In early 2025, the #CommonVulnerabilitiesandExposures system – vital for tracking software vulnerabilities – nearly shut down, sparking global concern over reliance on a single, fragile cybersecurity pillar. bindinghook.com/articles-bin...

🚰 Last week in Brussels, we hosted a roundtable with public and private sector experts to tackle #cybersecurity and policy challenges in the #watersector. 🙏 Jeremy Rollison, @ricderby.com, Jos Wetzels & all the participants for joining us! Learn more: virtual-routes.org/virtual-rout...

My DMs right now

It's world password day!

@ricderby.com highlights growing concerns about #hacktivism, including increasing attacks on critical infrastructure and blurred lines between independent activist groups and state-backed operations. bindinghook.com/articles-bin...

The first topic is from yours truly 🤩

👋 Say hello to the 2025-2026 European Cybersecurity Fellows! 12 months, 15 fellows from 10 countries across Europe, one goal: to take the next step in their careers and make it count. Learn more: virtual-routes.org/initiatives/...

Added to Siemens' 2024 Hall of Thanks! 💪 Link below 👇

These aren't the cyber-physical attacks I signed up for. economictimes.indiatimes.com/news/interna...

Latest OT TTP just dropped, specific to the Swiss rail sector

I attended my first Insomni'hack' last year and was even lucky enough to give a talk. It's an amazing event and you should definitely consider going!

Actually starting to feel not ill for the first time in months, might have a nice healthy Christmas break. Child coming home from nursery:

Weekly stand-up: Any blockers? Me:

Talking at a conference vs adrenaline comedown the rest of the day

Where do I report to the NCSC that, not only will they cease to exist if threat is reduced to 0, but time itself will stop?

We finally got some time to catch up on TV shows for the first time since the young lad was born. How come nobody told me how good Slow Horses was? Massively underhyped show for its quality!

You'd best be VERY aware for the next 4 days!

Aside from Daniel's excellent work, it's really exciting to see the term 'cyber extortion' being used rather than 'ransomware'. It represents the fact that encryption-based ransomware is only a subset of the much wider issue that is cyber enabled or cyber dependent extortion.

LASR is a cool name but why are we having a Lab for AI Security Research when we've never had a dedicated lab for holistic cyber security research?

Just confidently said good morning to a stranger while on a walk at 14:12… that’s gonna haunt me for weeks

Ah, well so much for not being alarmist…

Gutted I won't be able to attend this but if you're near or have the time you absolutely should.

My son is obsessed with a toy that has a suction cup on the bottom. Naturally I stuck it to my head to make him laugh this morning... Only realised after dropping him off at nursery that it had given me a huge hickey right in the centre of my forehead. Brilliant

Jokes aside, have you tried bsky.app/profile/bsky... and do you have a custom handle?

Why do I keep seeing people (and now myself) with "Invalid Handle" instead of their actual handle? And is there a fix?

It's been quite some time since posting here on Bluesky so I'll do some updates over the next few days. Since the quoted post, the goodies got combined with other goodies to become this box. So far it has 3 demos on it, 2 which are released research, and 1 that is a very exciting work in progress.

Ok, the UK Cyber / Hacking / Infosec list is now available as a subscribable feed on here. Search for it under feeds or follow this link bsky.app/profile/glen...

🛡️ Why “defend harder” won't work in the long run and what to do instead – arrest criminals. Our keynote "Impose Cost” at BSides Cape Town unpacks this. Can infosec work better with law enforcement to address the root cause of attacks? sensepost.com/blog/2023/wh...

I got an exciting package of OT goodies from Orange Cyberdefense the other evening. Although the branded tape gave it away, the Sniffer Cat™️ had to check that it was safe. Watch this space for what project these (and much more) get used for!

The revelations about the recent Sandworm attack are already unusual due to being within the ~9% of publicly reported OT cyber-attacks that have utilised sophisticated OT TTPs in the past 35 years. However, seeing living off the land techniques in the wild is deeply concerning.

@ricderby.bsky.social, your thoughts on the 'ROPA' method of cyber risk estimation? industrialcyber.co/expert/the-m...

From the Aussie CISC's inaugural CNI Annual Risk Review. OT disruption box = An implied acknowledgement of IT/OT convergence-->PROBLEMS being _very_ plausible? (cc: @ricderby.bsky.social) Full document: www.cisc.gov.au/resources-co...

Up late on a Saturday making charts and writing about OT cyber attack trends. Is this the infosec rockstar life?

'A new project aims to make it easier for PLC programmers to implement secure coding practices by analyzing and cataloging useful files and functions from each PLC vendor'. @ricderby.bsky.social, any views? www.securityweek.com/new-project-...

Thrilled to bits to be returning to the largest cyber event in the Southern Hemisphere, put on by the wonderful AISA team! Looking forward to presenting on my research at #cybercon2023! If you're in Melbourne and want to talk cyber then, lemme know!

Well, I put our new research on arxiv while it's under review, thinking it wouldn't get much attention, but I guess the cat's out of the bag. We took a look at ransomware against OT assets, which currently isn't a thing, and came up with our new technique: Dead Man's PLC. 1/2

Finally getting around to a fresh reading list with a bit of a topic change, quite the departure from my usual haunts. Looking forward to digging into these! Ft. Cat for good measure 🐈‍⬛

Submitted an extremely destructive OT attack technique to a reputable academic venue. One (self-proclaimed expert) reviewer rejected it based on not being tested on a LIVE COMPLEX PRODUCTION ENVIRONMENT. So, in the name of science, I guess I’m starting a cybercrime gang!

I can't decide whether my first post here should continue on and just mirror other socials or be something special. So instead I'm just posting about the dilemma! 😂 How is everyone else using Bluesky? Just duplicating the same posts on each platform or different content?