The official account for the Open Source Security Testing Methodology Manual. Pronounced "aw-stem". A tool designed to research how security works.

Joined February 2014
Every profession has its own snobs who laugh at how their colleagues get even basic things wrong. So do we hate them for being so snobby or should we be scared that we might get one of the idiots helping us instead?
2
2
1
3
OSSTMM retweeted
#coronavirus This is not rocket biology my #cybersecurity friends. You've got this. Create a physical separation between the threat and the asset. Reduce interactions. Apply both ingress and egress filtering. Stay strict with your hygiene. Beware misinformation. #Covid_19 #OSSTMM
6
4
OSSTMM retweeted
#coronavirus Keep calm and react. This is about security not Risk. Reduce your Attack Surface and protect your interactions. Remove unneeded services. Use controls for necessary operations. Remember a compromised host is a danger to other hosts. #Covid_19 #CyberSecurity #OSSTMM
6
8
#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog bit.ly/33rhwlF
7
7
So I've been busy with a bunch of projects for ISECOM and Hacker Highschool but one of the ones that's most interesting lately is using Social Engineering tricks to teach AI to learn how to understand what it reads. I'm going to see if I can present on it somewhere.
6
8
Cybersecurity: keeping everything working the same while keeping unknown bad things from happening by using technologies that have unknown supply-chain effects all under time pressure.
5
12
There is something pathetically optimistic about cybersafety. There is something quietly unsettling about cybersecurity. There’s something nauseously helpless about being breached. What to do guidelines for what to do when you're breached: threatvector.cylance.com/en_…
4
5
OSSTMM retweeted
Check out the ISECOM / OSSTMM chapter within! #osstmm @isecom @osstmm #cybersecurity #smartcity
We’re excited to launch The Road to Mobility: The 2020 Guide to Trends and Technology for Smart Cities and Transportation, a comprehensive resource that will help make safe and secure autonomous and connected vehicles a reality. blck.by/39B0V2N #BBRoadtoMobility
5
4
#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog bit.ly/33rhwlF
9
6
#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog bit.ly/33rhwlF
3
2
OSSTMM retweeted
Hacking for College Students: Here's an excerpt from my book-in-process- linkedin.com/pulse/fake-ids-… #CollegeStudent #college #hacking #privacy #homemadeartwork
3
7
OSSTMM retweeted
Check this out! @VereignAG @isecom #edtech #hackerhigh #osstmm
6
7
OSSTMM retweeted
Is this more like cyber-deterrence or social engineering? #CyberWarfare #cyberwar @hackerhigh @osstmm
2
4
A repeat of our annual Black Friday Offer: Create as many Canarytokens as you want, completely free¹ at canarytokens.org. At this price, you’d be crazy not to sprinkle some around your network. __ ¹ Tokens only free till heat death of Universe;
#Cybersecurity Island, the Unfortunate Reality Show. The show starts as contestants are forced to grab all the cybersecurity products they can off a boat and get to shore. With just their wits and a default Windows install, they must survive... @peteherzog bit.ly/33rhwlF
1
5
5
OSSTMM retweeted
I can attest to the fact that defenders prefer to have PoCs to better understand, prioritize, and fix security issues. As a researcher, it’s your own bug — you can do whatever you want with it. And please stop saying “responsible” disclosure. No need for moral judgements here.
Replying to @Fox0x01
We clearly disagree on this 😏 Providing POCs helps defenders more than attackers. Defenders often use POCs to build detections and develop new solutions to mitigate not just the big but also exploit techniques.
2
1
11