Tom retweeted
🕵️ New OSINT CTF challenge is live.
Trace a single street-level photograph all the way to its specific location - and then the nearest campsite 🏕️
Win a full year subscription to The OSINT Newsletter 🏆
Play here 👇
ctf.osintnewsletter.com/
🚨 The OSINT Newsletter CTF is live. A continuous CTF to practise OSINT, aligned to each week’s Newsletter topic.
The first challenge has dropped. The overall winner in the new year gets a full year OSINT Newsletter subscription.
Start here 👇
ctf.osintnewsletter.com
Tom retweeted
Happy New Year 2026 from us at urlscan! We don't arrive empty-handed, there were two neat additions to urlscan Pro over the holidays: HTTP request details & filters and the ability to change the visibility of your own scans retroactively.
Tom retweeted
Super excited to announce I’ll be speaking at @BSidesLV this year in the Hire Ground village! Come hear from me and one of my favorite people, CISO Jake Lorz of Cintas, on our best tips and advice for getting ahead in this field. You’ll hear a fun juxtaposition on viewpoints from middle manager vs. executive. It’s sure to be packed full of amazing tips and pure comedy gold. Get your badges soon!! Time is ticking.
You don't need a pocket watch, but you DO need a badge! Time's ticking BsidesLV!! Stock is limited.
bsideslv.org/donors
We have some rooms on the block left too: bsideslv.org/venue
Tom retweeted
💡FBI Watchdog: An OSINT tool that monitors domain seizures and DNS record changes in real time, alerting users to law enforcement takedowns and other DNS modifications.
github.com/DarkWebInformer/F…
Also, everyone is going to ask the same question... is this AI generated? There is some AI handling involved in order to have better structure involved. Please read the Readme on GitHub, it goes into features, future features, and some known issues.
Everyone has the right to make any blog post, video, etc. on this tool. Fork it, change it, make it better! Looking forward to see what everyone thinks.
Tom retweeted
Despite having not uploaded a proper video in over a year, our Youtube channel has somehow climbed to nearly 10K subscribers. I guess now’s as good a time as any to share a teaser of a new how to video being worked up. 😁
youtube.com/shorts/EphdGqhHn…
Tom retweeted
Episode 187 "Conquering #SOC Challenges: Leadership, Burnout, and the #SIEM Evolution" of Cloud Security Podcast where hosts @anton_chuvakin and @_TimPeacock interview Nicole Beckwith, Sr. Security Engineering Manager, Threat Operations @ Kroger
cloud.withgoogle.com/cloudse…
Tom retweeted
Yesterday myself and a dedicated community of CTI professionals from around the globe launched the new cyber threat intelligence capability maturity model (CTI-CMM). This is truly a labor of love from us because we care about the future of CTI as an anchor inside cybersecurity teams. This free resource is open for everyone at cti-cmm.org where you can download it.
The individuals called out in the document gave countless hours to help make CTI more accessible and I had the honor of working with and getting to know more about. Go check it out and go follow @CTIcmm for content updates and releases.
Tom retweeted
It's been only two months that I founded my new company Cyber Marketing Clinic, and I just signed up my third client. Huge thanks to all the wonderful people who referred me within their network.
Tom retweeted
.@ResortsWorldLV is going to search our rooms daily to protect us from the “well-known hacking convention”.
Tom retweeted
FININT tools by @ohshint_
- cryptocurrency and blockchain
- investments and stocks
- banking
- BINs and card information
and more.
ohshint.gitbook.io/oh-shint-…
#osint #finint
Tip by @akaclandestine
Tom retweeted
Take a minute to turn this off (or at least be aware it exists).
This Post is from an account that no longer exists. Learn more
Tom retweeted
😱 Anyone can access deleted & private repo data on GitHub. Forever.
🔓This is due to a new type of vulnerability - CFOR
👎Deleted Fork Data: Still accessible.
👎Deleted Repo Data: Commits remain.
👎Private Repo Data: Can become public.
👉trufflesecurity.com/blog/any…
Tom retweeted
Come hear me speak on the Creator Stage at DEF CON!
Schedule of our Talks at Creator Stage, Walkthrough Workshops, and events at the Packet Hacking Village @defcon
32 all available on a single page wallofsheep.com/pages/dc32. DJ schedule will be available soon.
Tom retweeted
One of the most important things you can do for your security program this week is to proactively discuss security controls with your stakeholders.
Admit that automatic content (signature) update is a risk, but delaying those updates is a bigger risk. Talk candidly about vulnerability management and how this plays into the equation.
Most importantly, don't wait for stakeholders to come to you. When they come to you, they'll have already taken a position (usually uneducated position) on things. When you're proactive, you get to control the narrative. Or (as my vet says) remember that it's FAR easier to prevent heartworms than it is to treat them. s/heart/brain/
Tom retweeted
.@CrowdStrike has confirmed they're no longer pushing the faulty update, so you only have to fix the machines that were already stuck in a BSOD loop. Anything that isn't impacted now shouldn't be impacted.
Tom retweeted
CrowdStrike outage being reported. Threat actors could leverage this against your help desk. Make sure they’re trained and aware on what to do. Significant risk of social engineering.
reddit.com/r/crowdstrike/com…
Tom retweeted
Great example of people trolling and people (media) jumping to conclusions #osint
“Assumption is the mother of all f*ck ups”
Replying to @AricToler
Let's introduce the FBI and whoever worked on that Senate briefing to @steam_id
Tom retweeted
Today marks 10 years since Malaysia Airlines Flight MH17 was shot down. All 298 civilians on board lost their lives. Using open sources, we helped to uncover who was accountable, amongst a wave of disinformation. You can listen to our investigation here: novel.audio/shows/the-bellin…
Tom retweeted

gabsmashh@gabsmashh16 Jul 2024
United States
United StatesConnected via United States Android AppAccount-level information, not a live location or per-post device.
those in manager- or director-level roles, how did you position yourself to move into that type of role? i have been working hard to break into one of those roles and just keep spinning my wheels



































