Had a great experience at #LABScon2025 - the @sentinelone.com team worked incredibly hard and pulled off an amazing event for all!

It's on!!

I had a great time creating this workshop for @pivotcon.bsky.social . Definitely eye-opening to deep dive into what "everyone" says about a threat group and how vastly different reporting on "the same" group can be in practice. 😱 Check it out for yourself!

These were good times. 😁💚

We're being trolled, right? "By choosing...'Curly COMrades,' we aim to de-glamorize cybercrime...They are not 'fancy bears' or 'wizard spiders'; they are simply malicious actors...We hope this...sparks a...conversation...encouraging a shift towards more practical and less sensational designations."

What you missed while in Vegas last week: @vertexproject.bsky.social published my second #threatintel blog untangling threat actor targeting and motivation: vertex.link/blogs/tactic...

In case you missed it...check out my blog on the critical relationship between your tactical and strategic intelligence on @vertexproject.bsky.social's website. Part 2 is in our editorial pipeline and will be out soon! vertex.link/blogs/tactic...

Happy Birthday, Raven. I miss you.

'I never thought AI would come for MY job,' sobs engineer working to implement AI in order to eliminate jobs.

Here we go! 🚀#PIVOTcon25 officially started! Day 1 is packed with fantastic talks. Networking in full swing 🤟🏐🎾 Pivot! Pivot! Pivot! #CTI #ThreatIntel #ThreatResearch

Stay hydrated, and don't forget to apricate.

Many #threatintel teams struggle to demonstrate value to their organization. The knowledge bomb in @sentinelone.com's article is not the TTPs (though those are fascinating). It's that #threatintel is not just about the cybers. www.sentinelone.com/labs/top-tie...

I did not know distillery pins were a thing but I have incidentally obtained two, which is the start of a collection, and I am oddly proud of this.

At #PIVOTcon2025, take on the biggest CTI challenge: clustering, attribution, and cross-referencing threat reports! The "It's a Cluster!" workshop uses #Synapse to study these issues and spark discussion on how we can improve. The workshop is FREE but you must register (check your conference email).

Trump has signed an EO to investigate and revoke the clearances of one of his top cybersecurity officials from the first admin, former CISA director Chris Krebs - who famously confirmed the integrity of the 2020 election.

Different ideas and perspectives are fundamental to informed debate. They are also critical for fostering understanding and compassion for those whose experiences differ from our own. You can choose what you read. You can't choose what I read. Speak out against censorship. #UniteAgainstBookBans

⁉️Do we organise workshops for #PIVOTcon25 participants who arrive early on Day 0? We do‼️ We have 3 #workshops available for free but seats are limited. Check your mail 📩( + spam folder) and register today for any of the below fantastic workshops! #ThreatIntel #CTI 1/5

Come for the workshop...stay for the heated debates about naming conventions and attribution over adult beverages afterwards! #PIVOTcon25 #CTI #ThreatIntel #ThreatIntelligence

Just when you thought #PIVOTcon25 couldn't get any more exciting...

It's my Vertex-aversary...from early R&D, to our first commercial customer, to working with top-tier organizations and a passionate user community...it's been an incredible journey. Thanks @vertexproject.bsky.social for eight great years, and here's to many more. 💚

Recently, I was asked to brief members and staff of the 🇺🇸 U.S. Senate Select Committee on Intelligence about @citizenlab.ca research. In normal times, such a briefing would be an honour. But these are not normal times. My latest in @theglobeandmail.com www.theglobeandmail.com/opinion/arti...

It's heeeere! the @pivotcon.bsky.social speaker agenda for #PIVOTcon2025 has been released! It was so hard to choose among so many good submissions, but that means the selections are sure to be top-notch. Congratulations to all the speakers!

New: Jeff Bezos emailed staff at the Washington Post this morning announcing that the Post opinion pages going forward were largely going to focus on defending personal liberties and free markets. Current opinion section editor David Shipley is out.

The other thing people seem not to understand is LLMs hallucinations aren't the only issue. They don't have objective knowledge, they're predicting text based on their training data. And their training data (the internet) is rapidly degrading due to LLM generated content displacing quality research.

If Denmark falls through, maybe Canada...? denmarkification.com

"There is much that Americans disagree on, but all of us expect our government to follow the rule of law, protect due process and treat individuals in a way that we would treat others...The ABA...remain steadfast in our support for the rule of law." www.americanbar.org/news/abanews...

Saying it again louder: the ONLY acceptable date format is YYYY/MM/DD HH:mm:ss 🤦‍♀️🤬

Not wrong.

IT'S TOMORROW! #PIVOTcon25 #CfP #threatintel #cti

It seems somehow particularly appropriate to note that today is the birthday of Rosa Parks. www.womenshistory.org/education-re...

This is it! The @pivotcon.bsky.social #CfP closes this Friday, February 7. If you haven't gotten around to writing up your great talk idea, what are you waiting for? We want to hear about your interesting research, novel pivoting, and unexpected discoveries! #threatintel #cti

Every time a #Synapse user reads about another cybersecurity acquisition:

The angst over terrible vendor APIs is real.

A "code family" is a basic concept in @vertexproject.bsky.social's approach to tool analysis. Check out the next installment in Mary Beth Lee's malware manifesto as she defines "code family", how it differs from "malware family", and how this aids your #CTI analysis! vertex.link/blogs/catego...

If you're stuck at home in this cold weather, what better way to spend your time than dreaming of the sunny beaches of Spain while working on your @pivotcon.bsky.social #PIVOTcon #CfP submission? Just over two weeks until the Feb. 7 deadline!

#PIVOTcon / #PIVOTcon25 is a conference by analysts, for analysts where you can share your research in a trusted environment. Taking CFP proposals until 7 February...what are you waiting for?

What do you mean by "malware family"? Check out the blog by @vertexproject.bsky.social's Mary Beth Lee describing our approach to classifying software. MB lays key groundwork for follow-on posts that use real world examples to illustrate our process and why it matters! 🍿 vertex.link/blogs/more-t...

@vertexproject.bsky.social released a blog by Ryann Hallback on using #Synapse and the WiGLE Power-Up for some really interesting WiFi network analysis. Enjoy with your Monday coffee! ☕ vertex.link/blogs/wigle/

Just under a month to go! We want to hear about your research and methods - get your CFP in for #PIVOTcon2025!

A DuoLingo module, but for #Synapse Storm 🤔

TFW you're prompted for a firmware update 15 minutes before class starts.

Kicked off another #Synapse Bootcamp today for @vertexproject.bsky.social and it feels good to be teaching again!

It's on!! #PIVOTcon25 CFP is open. Remember, we don't want to hear about your favorite threat group or malware family...we want to hear about your methods and processes! Use the meme guide below and get those submissions in!

Hmmm wut dis? 👀💚

Super excited for @vertexproject.bsky.social's free #synapse challenge at @cyberwarcon.bsky.social tomorrow! Whether you're new to Synapse or an experienced user, have fun with our mock investigation (and check out a brand-new feature we've added)! lu.ma/tp2l0n3x

It's on! The first PIVOTcon smashed it out of the park, don't miss #PIVOTcon25!

Oh...so this is where everyone went? 🤔 We're happy to be here. CYBERWARCON is just 4️⃣ days away! Did we mention you can check in early this year? Seriously. You'll want to check in early.

We're hiring a Principal Intel Analyst in the UK. The work is onsite 3 days/week and requires a UK DV clearance. If you fit that description, it's some really cool work. www.google.com/about/career...

If you're attending @cyberwarcon.bsky.social, check out the free #Synapse workshop presented by my awesome colleagues from @vertexproject.bsky.social: lu.ma/tp2l0n3x

Because @vertexproject.bsky.social analysts need a new research project for @sleuthcon.bsky.social!