Taylor W @wilcosec

Interested in all things technology, cloud, and security. Cyberspace Joined February 2011

Tweets

323
Followers

188
Following

761
Likes

4K

JS0N Haddix @Jhaddix

4 weeks ago

New Executive Offense Newsletter - Building AI Hackbots, Hard-Earned Lessons Pt 1 (and course giveaway) executiveoffense.beehiiv.com/p/ai-hackbots-… Giveaway: Retweet this post and be entered to win a seat in Q4s courses! ("Red Blue Purple AI" or "Attacking AI") Three winners will be chosen next…

23 192 285 22K 162

Taylor W @wilcosec

a month ago

I feel like devcontainers will make a comeback.

Thomas Roccia 🤘 @fr0gger_

a month ago

I feel like devcontainers will make a comeback.

0 6 26 5K 12

0 0 1 108 0

Taylor W @wilcosec

a month ago

I’m seeing this myself. There is a suite of basic tests you can against any AI, but after that, it requires hyper-focused, manual testing. It’s painfully slow.

JS0N Haddix @Jhaddix

a month ago

I’m seeing this myself. There is a suite of basic tests you can against any AI, but after that, it requires hyper-focused, manual testing. It’s painfully slow.

12 37 233 19K 64

0 0 1 182 0

Florian Roth ⚡️ @cyb3rops

a month ago

People on here act like someone decides not to patch. Like there’s a guy who knows the service is vulnerable, knows it runs in prod, and just shrugs. That’s maybe 1% of the cases. The rest is messier: - No idea the service exists (no inventory) - No idea it’s vulnerable (no vuln…

46 105 624 87K 133

Matt Fuller @matthewdfuller

3 months ago

TIL that the AWS console has a "go" link that will take you directly to the resource page for any given ARN: https://console .aws.amazon.com/go/view?arn=<resource-arn>

3 10 49 5K 33

Rock Lambros @rocklambros

7 months ago

In honor of @LLM_Top10 AI releasing the Agentic AI Threats and Mitigation paper. Have a great weekend, everyone! #AI #AIAgents #Cybersecurity

1 3 5 267 1

Download Image

Abhay Bhargav @abhaybhargav

a year ago

Earlier "Secure Coding Training" used to mean - Secure coding - backend - Secure coding - front-end Now it means: - Secure coding - backend - Secure coding - frontend - Securing Kubernetes and Manifests - Securing Cloud & IaC - Securing Secrets - Securing CI/CD

2 6 44 2K 10

Abhay Bhargav @abhaybhargav

a year ago

Let me make Identity simple for you with AWS EKS: * Node IAM Policy - Identity is scoped to the node. Broader than necessary for most cases. Not recommended. * IAM Roles for Service Accounts (IRSA) - Kubernetes Service Account is linked to an AWS IAM Role through OIDC.…

0 2 8 993 7

Jay Rogers 👨‍💻 @jaydrogers

a year ago

Homelab tech is nuts: ⚡️ Proxmox (VM Hypervisor) 📂 MinIO (AWS S3 alternative) 🦊 GitLab (GitHub Alternative) 🤖 Swarm/K8s (Containers) 🔥 Sentry (App Monitoring) ⚠️ Uptime Kuma (Uptime Monitoring) 🔐 CloudFlare Tunnels (WAF) All for $0. What a time to be in computing!

36 163 1K 167K 2K

Jeff Barr ☁️ @jeffbarr

a year ago

Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly. #AWS #S3 How an empty S3…

83 550 3K 1.3M 682

Accidental CISO @AccidentalCISO

2 years ago

We have three choices. We can ignore the problem. We can solve the problem. Or we can hide it in someone else’s budget.

16 14 159 9K 4

Abhay Bhargav @abhaybhargav

2 years ago

🗒️ Security Architecture Review, especially done well can lead to: 🏗️ Identifying major flaws even before they happen 👩‍🏫 Higher security awareness of all product stakeholders. Better awareness == more support 👨‍💻 More deliberate app dev with massive gains beyond just security

0 2 5 941 3

SAINTCON @SAINTCON

2 years ago

SAINTCON 2024 will be held October 22-25, 2024 in Provo, Utah.

1 14 53 2K 1

dogwhohacks @dogwhohacks

3 years ago

For $3/month LastPass Premium will let you know if your credentials stored within LastPass are compromised on the Dark Web. However, free users can also find out this information by reading the LastPass blog.

5 6 32 17K 9

Download Image

Charity Majors @mipsytipsy

2 years ago

1.8% Devops specialist 1.35% Cloud infra engineer .97% Sysadmin .56% Site reliability engineer ----- 4.68% of engineers self-report as specializing in operational excellence. Well, good thing systems are getting simpler and easier to-- 😱 survey.stackoverflow.co/2023/#develope…

6 16 77 13K 25

mRr3b00t @UK_Daniel_Card

2 years ago

Almost every org on the planet: ‘We take your security seriously! So seriously that when we see the costs we decided to not invest and to accept the risk! ‘