New Iran banger from @saffronsec.bsky.social / @threatinsight.proofpoint.com just dropped. Full of good analytic tradecraft, Indicators and interesting lures showing how self aware Iranian cyber actors are... www.proofpoint.com/us/blog/thre...

Ninja editing all references in $newjob's documentation from ProofPoint to Proofpoint.

Trying to decide if I should establish a threat actor naming schema based on flavors of Trader Joe's popcorn flavors

true analytic rigor comes from only opening your mouth when you have to and qualifying basically everything you say.

The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage. Learn more about it here: brnw.ch/21wWSH0 #PDF #threatdetection #cyberthreat

If your protest privacy/security advice does not start with a discussion of threat models, it is probably not good advice.

If you consider yourself a "Threat Intelligence Platform", don't email a spreadsheet of malicious indicators daily. That helps no one.

In addition to being one of history's most successful musicians, Taylor Swift has also successfully used a fire extinguisher.

Here’s what the Taylor swift and Travis kelce engagement taught me about B2B sales:

Suspected attribution...

Phish & Chips.

New: A handful of Chinese-linked cyber espionage groups are stepping up targeting of Taiwanese semiconductor companies, per new analysis from @proofpoint.com. Campaigns include targeting of financial analysts focused on the sector as well: www.reuters.com/sustainabili...

RIP my thrunting notifications.

Technically isn’t each and every one of us “years away from a nuclear weapon” when you really think about it?

Thrunting for Thractors

Dropping some joint research today with Threatray on TA397/Bitter 🔍 We dive into the confluence of signals that led us to our attribution of the threat actor 🎯 Shoutout to @konstantinklinger.bsky.social and Threatray for collaborating on this research. www.proofpoint.com/us/blog/thre...

ELECTRONIC ESPIONAGE and ELECTRONIC CRIME ftw

Not ready for Andor to end tonight…

@greg-l.bsky.social drops knowledge on TA406 (Konni) as North Korea shows new interest in Ukraine, likely to keep tabs on the progress of the war and Russia's ability to keep pace on the battlefield www.proofpoint.com/us/blog/thre...

Removing trans service members does not enhance readiness or lethality Instead, it just demonstrates to our friends that we don’t actually believe in our values and shows our enemies that we can be easily divided by hatred. We are stronger together. Full stop.

vibe

If you're looking at email headers and they're not pretty, you need to install @jacoblatonis.me's @vscode.dev extension marketplace.visualstudio.com/items?itemNa...

What working in Cyber looks like protecting the business

My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game www.proofpoint.com/us/blog/thre...

visualizing filenames is the cheatcode to discovering targeted activity. this should jump out at you

WHAT IS DEAD CAN NEVER DIE #FUZZYSNUGGLYDUCK

Introducing #UNK_CraftyCamel! Leveraged Trusted Business Relationship? ✅ Low Volume, highly targeted? ✅ Interesting technique? ✅ Overlaps with other IRGC clusters? ✅ Bonus: Infrastructure still up to watch how they respond to the blog? ✅ www.proofpoint.com/us/blog/thre...

Authoring a 39 page report criticizing someone else's reporting says a lot more about you than it does about them...

My low probability, high impact Lorcana Prediction: "WELCOME TO THE STORY" from the FABLED set coming Q3 actually indicates the introduction of a digital version along with the physical cards.

I mean, I don't see the big deal.... It was just John Jon Jhon Johann Jonne Johne Jonn Jhonny Jony /s

They also cannot for the life of them tell me what the Tricare Maximum Allowable Charge is for specific procedure codes. A Supervisor today says "Just have medical procedure done and find out what we'll reimburse later"

Tricare West's new contractor got rid of the ability to digitally upload claim forms... Now we're back to fax or snail mail. Because That Makes Sense

Fidelity, Bravery, and Integrity.

Always do this prior to going through a security checkpoint or interacting with law enforcement

New episode of DISCARDED! Researchers from @threatinsight.proofpoint.com were joined by Kristina Walter, Chief of the NSA's Cybersecurity Collaboration Center to talk about the Power of Partnerships Web: www.proofpoint.com/us/podcasts/...

We're revamping our targeted/espionage threat actor graduation process and shamelessly want to solicit best practices from industry. Anyone have guidance they're able to share.

Put a digital Lorcana game on Switch 2.

I wish there was some good open source research on the transition/reorg of IRGC-Electronic Warfare Cyber Division (IRGC-EWCD) to IRGC-Cyber Electronic Command (IRGC-CEC).

👏 FBI CyD go brrrrr 👏 but...I don't envy the ISPs who have to facilitate and explain the notification to affected users. www.justice.gov/opa/pr/justi...

I've never understood why selling to the USG was the reason we should shut down data brokers. Honestly, if the data is available, the gov should buy it. 🤷‍♂️ That being said, the information is invasive enough that it should be tightly regulated or shut down for ALL uses, not just government use.

This coulda been us but voters playin'