If I get dupe’d while at the gym during a live hacking competition im never working out again

Now THIS is a stamp! USPS: President Jimmy Carter was a Nobel Peace Prize winner, a champion of National Parks, and a strong advocate for human rights. Today, we’re proud to honor his legacy with our newest Forever® stamp. Order yours and other stamp-inspired products here: b.link/ujyjmd12

Having a great time at #blackhat #sector.

Excited to be presenting next week at #SecTor #Blackhat Come see me at the Cloud Security Summit, September 30th - 10:20am www.blackhat.com/sector/2025/...

🎉🥳My latest whitepaper has been nearly a year in the making and it’s finally out! 🎉🥳 A huge thanks to the many friends and colleagues that participated in the review process. www.vectra.ai/resources/co... #gcp #aws #msft #NHI #cloudsecurity #multicloud

In 10 days, I'll be taking the stage in Berlin @fwdcloudsec.org Challenging intuitive beliefs that Security is defined by what's easily measured. We'll see that confronting cognitive bias is not just an intellectual exercise; it's an emotional one. #WYSIATI fwdcloudsec.org/conference/e...

I need more Co-Star followers

Who owns the risk of managed identities in the cloud? Answer: It depends who you ask 😜 Here’s a very quick TL;DR to a much longer threat model comparing the risk of CSP-managed NHI’s across #AWS #GCP and #Azure www.vectra.ai/blog/cloud-s...

See you all in the desert next week #BSidesLV #hackersummercamp

No dogs on the furniture. Enforced strictly.

There’s one company I will judge you unmercifully for working for. ~ Oracle ~

Going for 300 next week.✨

What a amazing time at @fwdcloudsec.org The highlight was of course connecting with all my cloud friends. The low? Two days of a background altitude-induced headache 🤕

We still have a few more sponsor slots for fwd:cloudsec Europe taking place in Berlin, September 15-16! For more details: fwdcloudsec.org/assets/docs/...

Theme of the day “I raised this issue with MSRC…” #fwdcloudsec25

Quote of the day: “MSFT has architected themselves into this corner” #fwdcloudsec25 @ericonidentity.com

++++ Talk Announcement ++++ Happy to say I'll be speaking this year at #BsidesLV on the risks of CSP managed NHI's in the first of its kind talk: "The Not So Boring Threat Model of CSP-Managed NHI’s"

When you’re on your ~30th plane for the year, you need an emotional support teddy

It would mean so much to me to have a turn out of the #cloudSecurity community to my talk at the @cloudvillage-dc.bsky.social Tuesday | 11:00am rsa2025.cloud-village.org#day-2 It’s not just as a belt n suspenders talk but a ‘why do we only suspenders’ talk. It’ll be a little subversive 🖤

I’ll be speaking at the #cloudVillage at @rsaconference.bsky.social opening up Day 2 - leveraging Behavioral Economic Theory to help up understand why we do what we do in Cloud Security. rsa2025.cloud-village.org#day-2

Selfie with Keanu Reeves

I’ve done a lot of bs from #delta WiFi. That #teams call was a first

The #CloudSec community knows the answer to the question “if there’s no #CVE is it even a vuln?” 🙃

This white lotus ending was the worst

Any other frequent travelers reconsidering flying into #DCA

The nastiest I ever am is when #delta forgets my gluten free meal. #50percent

Guess who’s back! #spring

Have the kids seen and internalized pulp fiction?

A blog in which I say even though it feels so good, we’ve been doing it all wrong www.vectra.ai/blog/beyond-...

The downside of becoming a gym rat is the constant creatine advertisements.

Wistful for a Beirut sunset 🌅

Do you ever just keep doing sets 💪 to avoid the stair machine?

I’m equally highly professionally accomplished and unable to feed myself (or cook or clean) Do I need a wife?

I’ll be without access to email / social accounts or really most modes of comm for the next ~8 days Looking forward to this digital detox 🧚🏼‍♂️

Back from vacation == home gym 🎊

Sometimes people ask me what I look for in @fwdcloudsec submissions, usually in the context of #GCP. So I put together this little ditty on the 3 categories of #GCP talks and general advice in each. Important to remember I am 1 of 20 or so reviewers so opinions may vary. 1/10

Workshopping a new presentation: “What Julie Andrew’s taught me about being a security professional”

How to threatmodel youtu.be/drnBMAEA3AM

Kiah was set to join our faculty at Howard Law School in the Fall. She was a dedicated, brilliant civil rights lawyer poised to make a powerful difference in our world. Our hearts are broken & we pray for her family & friends. www.kwch.com/2025/01/30/c...

I’d would like to think she would have enjoyed the fight of the next four years. RIP Cecile

Leonard Peltier is coming home www.whitehouse.gov/briefing-roo...

I don’t respect anyone who names a winter snow storm #enzo

Turn your Apple TV into a Tailscale exit node, or just access it remotely: tailscale.com/kb/1280/appl...

Re-skeeting my own skeet about #aws and their culture of weaponizing leadership principles 🤷‍♀️

My latest blog is a think piece of sort ( 🤯 gasp, I know). It stems from both my work identifying vulnerabilities in the cloud but also as a driver of remediation in the AppSec world and as a cloud consumer. www.vectra.ai/blog/remedia... 1/1

Merry Christmas ya filthy animals

My toxic trait is always trying to find the closest parking spot st the gym.

My latest blog is a think piece of sort ( 🤯 gasp, I know). It stems from both my work identifying vulnerabilities in the cloud but also as a driver of remediation in the AppSec world and as a cloud consumer. www.vectra.ai/blog/remedia... 1/1

If you told me 20 years ago my prized possession would be a holiday sweater satirizing cloud security I would have been like…”but what about your Princess Diana Purple Heart Beanie Baby?” Thank you @wizsecurity.bsky.social team!

Tree is up! It’s beginning to feel like Christmas 🎄