@methodtim

Security Engineering - @AnthropicAI Opinions mostly stolen from people smarter than me. #BlackLivesMatter

 California, USA
Joined June 2009
  • Tweets7.3K
  • Following820
  • Followers3.5K
1.3KMedia
Tim Nguyen retweeted
Adam@digivector7 Sep 2023
Check if you've communicated with Paul091_! Outside of the 0-day, they also pushed their github project, GetSymbol - meant to help researchers download symbols. But it contains an update channel that could allow them to run arbitrary exes on machines of interest!
billy leonard@billyleonard7 Sep 2023
🚨 DPRK 🇰🇵 campaign against security researchers - new from @Google TAGs @maddiestone @_clem1 @digivector on new 0day ITW and potential infection through a tool aimed at helping the research community. as wu said protect ya neck kids 🦇 blog.google/threat-analysis-…

Active North Korean campaign targeting security researchers

Threat Analysis Group shares findings on a new campaign by North Korean actors targeting security researchers.

blog.google
21
1
39
14,464
🚨 DPRK 🇰🇵 campaign against security researchers - new from @Google TAGs @maddiestone @_clem1 @digivector on new 0day ITW and potential infection through a tool aimed at helping the research community. as wu said protect ya neck kids 🦇 blog.google/threat-analysis-…

Active North Korean campaign targeting security researchers

Threat Analysis Group shares findings on a new campaign by North Korean actors targeting security researchers.

blog.google
4
66
7
144
51,451
I decided to take this week (mostly) off Twitter just to see what Mastodon was like. I joined an infosec-focused server and I’ve spent the past few days trying to use it like Twitter. Here’s a quick review. 1/
9
126
31
591
Today we take you behind the scenes like never before, learn about the work @Google's security experts do behind closed doors to keep billions safe every day. The HACKING GOOGLE docuseries is streaming NOW on @YouTube → g.co/safety/HackingGoogle

HACKING GOOGLE Series

Five elite security teams. Six never-before-told stories. Go behind the scenes with the hacking teams at Google keeping more people safe online than anyone e...

youtube.com
8
99
16
286
How does Google detect and respond to threats across its vast network and user base? @methodtim pulls back the curtain and shares his perspective on automation, toil, metrics and more: goo.gle/3R2wGGU
17
2
33
A sneak peek into the GCP detections we've been building in my team.
Urs Hölzle@uhoelzle13 Aug 2022
ICYMI: at Blackhat this month, researchers discovered "interesting" vulnerabilities in managed postgres. Only GCP caught them.🧵 "[W]e have been conducting similar research across most major cloud providers, but this is first time we were “caught.” Kudos to GCP’s security team!"
4
2
27
We’re growing the security engineering group at @DeepMind - DM me or apply directly!
Women In Security and Privacy (WISP)@wisporg1 Jul 2022
Hoping these job posts on our WISP Job Board help you move into your next role! @congressfellows, Congressional Innovation Fellowship @deepmind, Research Engineer, Security & Privacy @HIDGlobal, End User Business Manager, Access Technology Solutions wisporg.com/job-board

Job Board - Women in Security and Privacy

wisporg.com
8
19
The past few weeks have been heart-wrenching and extraordinary as we work hard to protect everyone in UA, RU, BY. Lots of 💙💛 to all my colleagues and friends affected. A few words from @Kent_Walker on what we've been up to. blog.google/inside-google/co…

Helping Ukraine

Some actions we're taking to provide charitable support, promote information quality and cybersecurity, protect colleagues and more.

blog.google
7
19
Tim Nguyen retweeted
Alex@alexanderjaeger14 Feb 2022
Want to do an internship at Google in Security? Now you need to be quick: careers.google.com/jobs/resu… (ZRH) Please complete your application before 22nd of February. And yes, some projects are also in DFIR space. Let me know if you have questions. RT is appreciated.
32
31
TAG is looking for some great people to join as "Reporting Analysts" to help pull out and communicate more insights from our work understanding and countering serious threats. careers.google.com/jobs/resu… Location could be flexible for the right candidate.
3
33
8
68
Tim Nguyen retweeted
Eric Chiang@erchiang29 Dec 2021
Today, we're open sourcing a log4j JAR scanner. Throw it at a filesystem, detect vulnerable JARs, and even rewrite them in place. Includes a Go API to import the JAR parsing for other applications. github.com/google/log4jscann…

GitHub - google/log4jscanner: A log4j vulnerability filesystem scanner and Go package for analyzing...

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files. - google/log4jscanner

github.com
6
512
20
1,599
"All executives are responsible for #security," said @Google's @argvee at today's #WSJCIO Network Summit. Learn more about what she means here: wsj.com/articles/cios-team-u…

CIOs Team Up With Other Executives to Counter Cyber Threats

Government regulations and mounting attacks are forcing collaboration between senior staff, according to one of Google’s most senior security specialists.

wsj.com
9
32
Tim Nguyen retweeted
thaidn
@XorNinja7 Jul 2021
We are raising money to help Vietnamese street vendors and poor working people living in quarantined areas in Saigon and surrounding areas. vietbay.group/events/fundrai…

VietBay Group - Fundraiser to help Vietnamese struggling due to COVID

(Tiếng Việt) Vietnam is experiencing the worst COVID outbreak since the start of the pandemic. Tens of thousands have died in July and August 2021, but the worst is yet to come. Less than 3% of the...

vietbay.group
1
20
3
27
Tim Nguyen retweeted
Julien Vehent@jvehent7 Jun 2021
I am very excited about this new @googlecloud podcast. @argvee and @methodtim have built an incredible Detection & Response group, and the team focusing on Cloud is second to none. We're doing groundbreaking work, and I hope to share more in the future.
CloudSecurityPodcast@CloudSecPodcast7 Jun 2021
Episode 17 "Modern Threat Detection at Google" of Cloud Security Podcast where hosts @anton_chuvakin and @_TimPeacock interview @jvehent of @Google - get it at Google Podcasts, @ApplePodcasts, @Spotify or direct at cloudsecuritypodcast.libsyn.…

Cloud Security Podcast by Google: Modern Threat Detection at Google

Guest: , Security Engineering Manager in the Detection and Response team @ Google Topics: What is special about detecting modern threats in modern environments? How does the Google team turn the...

cloudsecuritypodcast.libsyn.com
1
7
25
Read the sign, then read it again.
42
1,010
57
3,533
An update on the NK campaign targeting security researchers - stay safe out there! blog.google/threat-analysis-…
1
26
4
54
Sharing a few thoughts today on what we're doing to protect Google from supply chain attacks and our collaborations within the broader ecosystem to reshape the approach to layered defense to address supply chain attacks long-term. cloud.google.com/blog/produc…

Google’s approach to secure software development and supply chain risk management | Google Cloud...

We’re sharing some of the security best practices we employ and investments we make in secure software development and supply chain risk management.

cloud.google.com
2
23
7
74
You know about dramatic increases in cases, hospitalizations across US Surge began after labor day But one state has done well during this time Big state that would move national numbers And what they've done holds a lesson for all of us Yes -- let's talk California Thread
100
1,600
343
5,256
i know. there’s a lot going on right now. so i just wanted to say. i love you
842
16,706
796
131,876
marginalized people have been saying this forever but, since it’s coming up again... it’s not possible for a company to be apolitical. claiming to be apolitical is an implicit endorsement of the status quo and in this case the status quo is pro racism & pro police brutality
7
166
8
723
Load more