Running workloads unprivileged is one of security's best practices. Discover with Matt Kim, @captaingolo.net and @sysdig.com several strategies to run rootless containers: 🛠️ What to modify in your images. 👥 How to use User Namespaces. 🔐 When to use Capabilities. www.sysdig.com/blog/how-to-...

From San Francisco to Saudi Arabia, stepping by Aragón, elites are following the same instruction manual: Blade Runner, Alien, Robocop. The government-less world where corporations are in charge is no longer science fiction. Is there something we can do? captaingolo.net/blog/why-im-...

I’m gonna frame this quote. 💖 “Don’t trust AI blindly. […]. Think of AI models as eight-year-olds. They will consider anything their parents told them as the ultimate truth, will make up facts with complete confidence, and if left unsupervised, they are capable of creating the greatest of mayhem.”

Is it possible to leave Instagram, WhatsApp and Facebook without cutting contact with your friends? I’ll try during February For now, these are the alternatives I’m considering: • Bluesky • Mastodon • Pixelfed • Telegram • Signal • RCS Do you use any others? captaingolo.net/blog/meta-al...

Kubernetes 1.35 brings changes around security: 🚮 Removal of cgroup v1 support 🪪 Increased verifications when pulling images 🦹🏻 Limits to impersonation 🌐 User namespaces when using the host network 🔑 Token secrets for CSI drivers And more! www.sysdig.com/blog/kuberne... #Kubernetes #Security #k8s

🎉 They finally published this article I collaborated on.

I'm excited to start my freelance career providing marketing services! If you are a startup and you feel you are not connecting with your audience as much as you want, let's chat!

Did you know? All our content is available both in English and Spanish. Our landings will direct you to your preferred language. And you can always change it. All without cookies! 🍪 ➡️ Try it! → safetybits.io/blog/

This is my last week at Safetybits. It's been a wild ride as I've worked on putting a newborn brand on the map, supervising the creation of the brand image, developing the messaging, writing engaging content, and helping shape the product features.

Yesterday, @nestorsalceda.com provided a sneak peek of Safetybits's next feature at #DFeX2025. By capturing network data around a security incident, you enable a forensics investigation. Néstor also covered circular buffers to process network traffic in Linux systems. Stay tuned!

Happy and defiant pride! 🏳️‍🌈🏳️‍⚧️ At Safetybits, we strive to create an environment where our workers and customers feel safe. Like security, rights need constant work to obtain and maintain. From Safetybits, we wish you a good time celebrating and the strength to continue fighting for equality.

Last Thursday, the "Hackea tu Idea - CyberUp" mentorship program concluded with a demo day. ¡And Safetybits took home the third prize! We are grateful to our mentors for their outstanding work and to the organizers (CEEI Aragón and @incibe.bsky.social) for the opportunity to join this program.

Join our CEO, @nestorsalceda.com, on June 2nd at DFeX 2025, where he'll teach to capture network traffic before an attack to enable a forensics investigation. Register for the event here: ciberseguridad.unizar.es/congreso-dfex/ // @www.unizar.es @incibe.bsky.social

OT Compliance is seamless with Safetybits. 🚙 Safetybits Risk Management covers the OT side of TISAX. ✅ Continuously keeping your industrial equipment in compliance. ℹ️ safetybits.io/blog/introdu... #OTSPM #Compliance #Cybersecurity #DigitalTransformation

OT Compliance is seamless with Safetybits. We ship the industry's most common security standards already mapped to controls for OT security, so you can start acting right away. Learn more at: safetybits.io/blog/introdu... #OTSPM #Compliance #Cybersecurity #DigitalTransformation

Safetybits Seamless #Compliance turns a chore into an ally in daily operations. ✅ Comply with security standards and regulations. 🔄 Continuous checks, act as soon as risks appear. 🧠 Obtain guidance through mitigation actions. And more! safetybits.io/blog/introdu... #cybersecurity #OTSecurity

"This is a cyberattack" is what everyone close to me thought. Friends, trainers, doctors, parents… Well, it's probably not, but the fact that everyone is thinking the same is telling. In any case, it motivated us anyway into be more resilient in all areas (including cybersecurity).

The #blackout on April 28 doesn’t look like a cyberattack 🤞🏼. However, given the current geopolitical climate, the cause doesn’t matter to many. This is the closest we’ve come such an attack, and many have realized they are not ready. #cybersecurity #OTSecurity safetybits.io/blog/europea...

We’ve been working on something cool 😎.

We had a wonderful time last Thursday at CCI's "La voz de la industria" event. Our CEO, @nestorsalceda.com, charmed the audience, and we validated our offer in front of relevant industry players. This is only the beginning! Centro de Ciberseguridad Industrial -> www.cci-es.org

You can feel the PTSD on people's face when compliance is named in the conversation. We are preparing something cool with Safetybits that changes the game (at least for industrial environments), and here is a sneak peek.

🚀 SafetyBits OTSPM is LIVE on Product Hunt! We’re making OT security simpler with automated threat detection & compliance. Check it out and let us know what you think! www.producthunt.com/posts/safety... #OTSecurity #CyberSecurity #ProductHunt

We are pleased to announce our new uniform for the company. 🤣

It's been a few intense days trying to turn @lizano.bsky.social‘s beautiful designs into a web. I'm really excited to share the result! Hopefully we'll iron out the final minor quirks over the next days 🎉.

🇪🇺 NIS2 was supposed to be transposed by Oct 17, 2024. ⚠️ Most countries have bills that may be signed into law at any time. 💡 They are mostly adapting existing regulations, so you can start preparing. ℹ️ safetybits.io/blog/nis2-af... #cibersecurity #nis2 #digitaltransformation #compliance

The “Unrecognized Device in OT Environment” triggers as soon as a new device speaks to the network. Then, investigate faster with metadata and context gathered by our Continuous Inventory. Learn more at: safetybits.io/products/ots... #Cybersecurity #Inventory #DigitalTransformation #OTSPM

By supporting a wide catalog of brands and devices we can provide actionable security insights. i.e. listing devices needing firmware updates, or that are using default credentials. More at: safetybits.io/products/ots... #Cybersecurity #Inventory #DigitalTranformation #OTSPM #IndustrialSecurity

Our Continuous Inventory tracks the changes of your devices over time. When investigating, you can check when a device was added to the network, or when configuration changes took place. Learn more at: safetybits.io/products/ots... #Cybersecurity #DigitalTranformation #OTSPM #IndustrialSecurity

We’ve been busy working on something cool. Did you know 30% of devices are missing from manual inventories? Continuos Inventory uncovers them… And more!

Working in teams without psychological safety is something I wouldn’t recommend to anyone. Be aware, and identify this red flag as early as possible. Make yourself a favor and prioritize your well-being.

Just updated my hugo sites to use responsive images everywhere (using the figure shortcode). Now those posts with lots of pictures won't kill your browser anymore 🎉 Code in: github.com/onthenubs/on...

Yesterday, December 1st, was World AIDS Day. Nine years ago, a friend of mine tested positive for HIV. I didn’t know anything about it then, so I couldn’t help him. I’m sharing everything I’ve learned since then. I hope you find it insightful! captaingolo.net/blog/9-myths...

Really interesting article about Bluesky’s decentralization and the cost of maintaining your own instance. 🤯 dustycloud.org/blog/how-dec... From the co-author of ActivityPub, the protocol used by Mastodon. Via @[email protected] framapiaf.org/@philonous/1...

Is Twitter really going downhill? Is Bluesky replacing it? What's going on in the rest of apps? 🔬I've been running an experiment in my social networks for a few weeks. I’m finally sharing the results in this article: captaingolo.net/blog/social-...

Just wrote a piece in the company blog comparing industrial security with other computer-like types of security. Hope you enjoy it 🙇🏻.

🌩️ Excited to be speaking at DeepSec! 🌐 On Thursday, November 21, at 14:50, I’ll present alongside my colleague Alessandro Brucato from Sysdig. Our talk, "Navigating the Storm: Emerging Threats in AWS Cloud Security", dives into the cutting-edge challenges in securing cloud infrastructure. 🚀

Quite an interesting video: Visit to equinix, a high security data center. Just so you get a glimpse of how crazy this place is, the building foundations are raised above ground level. So even if you crash it with a bus, the building would be unharmed. 🤯 youtu.be/wumluVRmxyA

Some stuff about me: I work @safetybits.io and I write content about cybersecurity.

Greetings everyone 👋🏼. English-speaking-friendly profile for formal stuff. Want the personal nonsense? Here is a link into the right direction -> @capitangolo.net Also, some pronunciation tips for Jiménez: Jim like Him E like in Ernest 🤯 (I find it funny people trying, I don’t really care 😂).