I rant about IT, Infosec, and things I find funny. Security Architect at one of the biggest banks you've never heard of.

Rhode Island
Joined June 2018
I've been working on a talk tentatively titled "Myths and Lies in InfoSec" Some of the research I'll be referencing in the talk was inspired by one particular stat: "60% of small businesses go out of business within 6 months of a data breach" How do we know a stat is fake? 🧵⏲️
Anybody know where this iffy stat came from? I’ve seen it attributed to several organizations, but its actual origin remains murky.
12
25
9
128
Dmitry Z retweeted
I honestly cannot remember the last time I did a job search. I was extremely lucky in that most of the time I just interviewed and got the role. I was not at all prepared for the utter slog of a search I was about to do. Best piece of advice - it's a marathon not a sprint. (2/n)
1
1
3
Dmitry Z retweeted
I've put off writing this thread, but figured I should share my experience job hunting from late last year which bled into early this year. If you are curious about my background you can look at my LinkedIn, but I honestly went in totally naive. #infosec #womenintech
3
2
4
15
If you are still doing this, please don't.
26
62
19
468
Regardless of your stance on cracking your own users passwords, if you are licensed for Azure AD Password Protection, go deploy it, even if you put it in audit mode initially. Having deployed it across multiple forests, a couple of misconceptions about the service👇
10
98
5
434
The following non-malicious request can be used to test susceptibility to the @springframework 0day RCE. An HTTP 400 return code indicates vulnerability. $ curl host:port/path?class.module.classLoader.URLs%5B0%5D=0 #SpringShell #Spring4Shell #infosec
10
192
7
531
So I've been a *mostly* happy @Ubiquiti customer, despite a few hiccups with their Cloud Key Gen 2+ model space heater. And a security breach. That I first found out about from @briankrebs. Against whom Ubiquiti has apparently just filed a lawsuit.
88
470
298
1,828
Hey, Chowdah Heads, it would be wicked smaht of you to attend this Bahstin Security Meetup tonight! Registah here. Go to the packie or Dunkies first, or even have some tonic. meetup.com/The-Boston-Securi…
2
6
1
14
It was so great to get some of the team together last night for a family dinner! @securityweekly @MrJeffMan @dougwhitephd @JohnnyBlazeSW @Artemispriss @dzag_ @SW_Samii hopefully we won't have to wait another 2 years for the next one! ❤️🖤
1
3
1
13
Hello, I’m in the job market looking for an entry level #infosecjobs in Incident response, blue team, and potentially red team also. I have experience with the most common security tools and I’m constantly learning about Cybersec. Please DM me if you can help or RT for reach.
4
24
1
14
Is there going to be a Layer 8 Conference this year? YES!! When will it be? We'll tell you on Monday!! Can't wait!
1
12
4
47
Want to get a pen test but don't want to end up with a pencil? At @BSidesBOS we'll have @dzag_ talk through his lessons learned in the process of finding a Penetration Testing partner, and what to look for. Check it out at bsidesbos.org
1
4
4
We didn't want to make this announcement, but things being how they are, it just makes sense. BSides Las Vegas 2020 is officially canceled. More details are available here: bsideslv.org/covid19/
79
348
99
623
As we've been closely monitoring the latest information and guidance related to the COVID-19 virus, OSHEAN and its partners for 'Cybersecurity Exchange Day' have made the decision to postpone the event bit.ly/2TEoVfN
6
3
Dmitry Z retweeted
Charges have been dismissed against our penetration testers who were arrested while conducting a standard penetration test. Thank you to the security community for your support. coalfire.com/News-and-Events…
4
43
8
133