@spycloudco

Our Identity Threat Protection solutions help businesses prevent ATO, ransomware, and online fraud.

 Austin, TX
spycloud.com/
Joined January 2024
  • Tweets64
  • Following2
  • Followers153
16Media
There's a massive gap between what organizations believe about their identity security program and what's actually happening. Read SpyCloud's 2026 Identity Threat Report: lnkd.in/exZZZnR8
2
50
We published a deep analysis from SpyCloud's Chief Investigations Officer Jason Lancaster discussing what we found across the water sector – the numbers, the patterns, what it means for security programs. spycloud.com/blog/water-util…

Beyond the Pipes: The Identity Exposure Hiding in U.S. Water Utility Vendors

SpyCloud's analysis of over 66,000 U.S. water utilities and vendors reveals stolen credentials and sessions creating identity risk separate from OT exposure.

spycloud.com
38
SpyCloud supported a coordinated takedown of EvilTokens, a commodity Phishing-as-a-Service (PhaaS) platform used to compromise Microsoft accounts via device code phishing. Read on to learn more: spycloud.com/blog/disrupting…

See No EvilTokens: Disrupting the EvilTokens PhaaS Platform

EvilTokens, a top PhaaS platform, was disrupted in a Microsoft-led partnership – SpyCloud's data on 8,700+ compromised accounts helped make it happen.

spycloud.com
1
34
SpyCloud retweeted
Joe Roosen
@JRoosenSep 19
Will "friendly" cl0p fire back? hmmm I wonder if the issues with SH downloads of late was because of cl0p? 🤔
BleepingComputer
@BleepinComputerSep 19
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service.

bleepingcomputer.com
1
6
694
SpyCloud retweeted
Joe Roosen
@JRoosenSep 21
New message from SH to cl0p. "21 Sep UPDATE: Every 24 hours you fail to engage with us the demands increase. The demand now includes a mandatory apology issued directly to me PUBLICLY. I am 3-0 against you rich and broke criminals. "
1
1
1
391
SpyCloud retweeted
Joe Roosen
@JRoosenSep 21
Good overview of the current cl0p vs ShinyHunters situation. Both DLS sites are currently still down as far as I can see also. reuters.com/legal/government…

Cybercrime feud erupts on dark web as notorious group claims hijack of rival's website

One of the world's best-known cybercrime ‌groups said on Sunday it had hijacked one of its chief rivals' dark web site, bringing what it said was a long-simmering feud out into the open.

reuters.com
2
3
6
1,228
SpyCloud retweeted
Joe Roosen
@JRoosenSep 20
Well that escalated pretty fast. This is the cl0p DLS showing the SH DLS contents.
1
6
32
2,850
The security boundary isn't what it used to be. It now stretches across your entire vendor ecosystem – their people, their applications, and their access. Read CPO Damon Fleury's @ForbesTechCncl article: forbes.com/councils/forbeste…

Council Post: Supply Chain Risk Is Your Biggest Cybersecurity Blind Spot

The perimeter has expanded to include the people, applications and access paths of third parties, and cybersecurity must reflect this reality.​

forbes.com
24
WEBINAR: 8/19/26 at 10AM CT. Learn how @spycloudco & @pingidentity enables your team to automatically block, reset, or escalate the moment a compromised identity detected across both PingOne Advanced Identity Cloud and PingOne DaVinci. Register: spycloud.com/events/webinar-…

Webinar: Fight AI-driven phishing and malware attacks

Learn how SpyCloud and Ping Identity enables your team to automatically block, reset, or escalate the moment a compromised identity detected – across both PingOne Advanced Identity Cloud and PingOne...

spycloud.com
1
1
168
SpyCloud Identity Guardians for Entra ID and Okta Workforce now reset exposed passwords AND automatically revoke compromised sessions and refresh tokens the moment they're detected in criminal markets. Learn more: spycloud.com/blog/spycloud-i…

How to Detect and Remediate Stolen Sessions Automatically with Your IdP + SpyCloud

SpyCloud Identity Guardians detect and revoke compromised sessions for Entra ID and Okta Workforce, stopping session hijacking where password resets fall short.

spycloud.com
1
39
August marks our 10-year anniversary of our mission to disrupt cybercrime and our historic marquee at HQ in Austin, TX got a glow up. A decade in and our mission is still as clear as ever: to make the internet safer for everyone.
3
32
How The Most Dangerous Identities In Your Enterprise Aren’t Human hubs.li/Q04r52vx0 Written by Damon Fleury of @spycloudco

Council Post: How The Most Dangerous Identities In Your Enterprise Aren’t Human

Without those answers, it’s nearly impossible to assess risk, let alone contain it.

forbes.com
1
65
AI-driven attacks move fast. Your identity security should move faster. ⚡ We're teaming up with SpyCloud and Yubico to bring you two August webinars on automated defense: 🔹 Aug 19 w/ @spycloudco: ow.ly/QfJq50ZxcyC 🔹 Aug 26 w/ @Yubico: ow.ly/9v3N50Zxcyz
2
2
276
We've got some takeaways from this year's Black Hat conference. Identity, managing AI agents, NHIs, and your real-world cybersecurity problems. Read more on our blog: spycloud.com/blog/spycloud-b…

Identity Isn’t Going Anywhere: What We Saw at Black Hat USA 2026

From non-human identities to AI agent governance, here's what stood out to SpyCloud's team at Black Hat USA 2026.

spycloud.com
1
66
More Than a Leak: What SpyCloud Found Inside the FortiBleed Threat Actor Infrastructure Read our full analysis on the @spycloudco blog: spycloud.com/blog/what-spycl…
3
2
269
In this episode of the Microsoft Threat Intelligence Podcast, Aurora Johnson from @spycloudco Labs breaks down the highly organized Chinese-language smishing ecosystem. Listen now: thecyberwire.com/podcasts/mi…

Hot Cybercrime Summer:  Smishing, Supply Chains, and Sleuthcon

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠⁠Sherrod DeGrippo⁠ sits down with Aurora Johnson of SpyCloud and Amitai Cohen of Wiz ahead of SleuthCon to explore two rapidly...

thecyberwire.com
2
2
167
SpyCloud Senior Investigator Duncan Edwards talks about his career in federal law enforcement and his current role. Listen to the full @DetonationPoint podcast here: open.spotify.com/episode/494…

Episode 41 - Chasing Bad Guys: From U.S. Marshals to FBI Cyber Investigations with Duncan Edwards

Detonation Point · Episode

open.spotify.com
Detonation Point Podcast@DetonationPointJun 15
Has technology improved investigations, or have we lost some important skills along the way? Duncan Edwards, former Deputy U.S. Marshal, retired FBI Special Agent, & now Senior Investigator at @spycloudco shares insight into both modern and "old school" investigations.
1
1
59
One hacked email account can give cybercriminals access to far more than just your inbox. 🎙️ Sam Curet, Senior Investigator at @spycloudco Full episode of #DetonationPoint on YouTube: youtu.be/ChEnCVzPLSM?si=tp-Z… #Cybersecurity #FinancialFraud #Cybercrime #Hackers
1
1
53
How to check if your data has been leaked... Sam Curet, Senior Investigator at @spycloudco shares a tool to check your exposure. Early warning is the easiest way to mitigate stolen credentials. #Cybersecurity #Cybercrime #DataBreach
1
1
1
198
📣 SpyCloud + Okta Identity Threat Protection: a new integration that delivers recaptured criminal underground intelligence directly into Okta's risk engine, automating response to stolen credentials and session hijacking before attackers can act. lnkd.in/gmFFcdKV
2
84
Load more