CYBERWARCON is coming!!! Registration and CFP are now open for this year's #CYBERWARCON! This year's keynote speaker will be @DAlperovitch. We are back in Arlington, VA this year on November 19th. 1/x cyberwarcon.com

Looking to fill a SOC analyst role: - $80k salary - hybrid schedule Requirements: - Atlanta based - phishing, BEC, EDR log analysis experience RTs for visibility are appreciated 🤟🏽

My role was eliminated, and I'm in search of a new job.

If you are the victim of wire fraud, don’t call the police. Don’t call the FBI. Call your local Secret Service office. Immediately. I didn’t believe it either, but I talked to a guy that works for the Secret Service and he blew my mind: If the money is sent overseas, the SS can stop it within the first 72 hours. If the money remains in the US, the SS has the power to seize bank accounts and other assets without a criminal conviction. The guy I was talking to told me about a lady that stole $850K from a small business in Texas by hacking into an email account and changing wiring instructions. He froze her bank account without notifying the bank so she wouldn’t be tipped off, flew across the country, and knocked on the lady’s door. He walked in the house, took a bunch of expensive jewelry and anything else he could find of value, and let her know her bank accounts are frozen and that he’ll be seizing all the money. It took a few months for her to get convicted and go to jail, but the victim had their money back within days. It typically needs to be at least $250K for the SS to get involved, but it’s worth a try if it’s over $100K. These thresholds are way lower than what it’d take for the FBI to get involved. Local police departments can’t to much in these situations because they don’t have the authority to seize assets without a conviction. I also learned that the SS was originally started to fight financial crimes, not protect the President. The SS was started in 1865 to combat widespread counterfeiting after the Civil War and didn’t start protecting Presidents until 1901. Hope this helps someone!

I’ll be at the final @shmoocon later this week; if you see me please say hi!

I think the Salt Typhoon hacks will be seen as the worst counterintelligence breach in US history. Though not reported yet, seems likely that the MSS compromised the FISA “selectors” in US telcos. The fallout from this is unfathomable. FBI NSD damage assessment is max pain rn.

Christopher Nolan’s next film ‘The Odyssey’ is a mythic action epic shot across the world using brand new IMAX film technology. The film brings Homer’s foundational saga to IMAX film screens for the first time and opens in theaters everywhere on July 17, 2026.

If anyone has an extra Shmoocon ticket that they’d be willing to sell me, please lmk🙏

Took an L again in the Shmoocon ticket sale😑

Just wanted to say a huge thank you to everyone who made @CYBERWARCON happen. I very much enjoyed attending and meeting everyone, and it has truly become one of my favorite conferences of the year.

I’m at CYBERWARCON all day today; if you see me please say hi!

I’ll be at @CYBERWARCON next week, in person this time, so if you see me, please say hi!

Is anyone, and I mean anyone, hiring juniors these days? Fresh college grads or minimal experience folk? Entry level reverse engineers? RE internships? Or specifically a DevSecOps role in the Portland area?

New addition to the cyber texts collection arrived: Evasive Malware by Kyle Cucci(@d4rksystem)

New addition to the reading list:

New additions to the collection:

🚨 I’m hiring again! This time I’m looking for a threat hunter with 1-5 years experience, and another shortly for a detection engineer, bonus points for Cribl experience. US citizen, within driving distance to Cincinnati, Chicago, Charlotte, San Jose, or Portland. In office 2 days a week, remote the rest. If this fits what you are looking for let me know! DMs open.

🚨 Job Alert 🚨 I am hiring for Senior CTI analyst role in 🇺🇸 ✅ South Asia & Middle East Threat Area ✅ threat actors profiling ✅ modelling data in #Synapse ✅ tactical level hunting for adversaries #CTI #ThreatIntel #ThreatIntelligence ➡️scb.taleo.net/careersection/…

I'm hearing reports of a sophisticated 'MFA Bombing' attack that targets Apple users, exploiting a flaw in Apple's password reset feature. Let's dive in: