I can't wait to see all the phishing emails that'll not only link to cloudflare, but now will originate from it! 😅
blog.cloudflare.com/email-se…
Eric retweeted
Atomics on a Friday: Unveiling LOLRMM - A New Dawn in Cyber Defense xitter.cf/i/broadcasts/1vAGROLMZ…
If you're havin' EDR problems, I feel bad for you, son
I got ninety-nine problems, but Crowdstrike ain't one
Want to restrict service principals (workload identities) so they can only login from trusted locations? You can do it! But, like any modern Microsoft product, stronger security is a premium feature..
learn.microsoft.com/en-us/en…
Congrats to Josh and the rest of the team at Sublime!
I’m extremely excited to announce that @sublime_sec has raised a $20M Series A led by @indexventures with participation from @DAlperovitch
I wrote about our journey from black box to open platform, and where we're headed:
sublime.security/blog/announ…
Eric retweeted
I heard there was a secret cord
That David made and displeased the Lord,
But you don't really care for safety, do ya?
Well it goes like this, a plug, a switch
A circuit breaker open-hitched
The socket catching fire, hallelujah.
Eric retweeted
Please do the incident response team a favor, and check that the X-Forwarded-For Header is set on all your reverse proxies / load-balancers / etc.
They will thank you later.
So @emailrepio by @jkamdjou et al is pretty great. Anyone know of a good and similar equivalent for phone numbers? Thanks!
Anyone know of a tool that can categorize software similarly to web-filter categories?
Ex: Google is a search engine, AnyDesk is a remote access tool.
Lots of fun stuff happening from GitHub Actions lately in @GreyNoiseIO 🧐 viz.greynoise.io/query/?gnql…
Eric retweeted
Some commands are overwhelmingly run by attackers on compromised hosts (and seldom ever by regular users in regular usage).
Our @subtee has just released a new (free) Canarytoken to make monitoring these commands trivial.
Read more about it - blog.thinkst.com/2022/09/sen…
Seeing canarytokens.org used as a website traffic analytics tool is a first for me.
Eric retweeted
Folks, I am teaching my next Pay What You Can class next week. It is SOC Core Skills.
Please share with someone who is trying to get into security.
antisyphontraining.com/soc-c…
Thanks!



















