New video! Getting Into Cybersecurity - An Interview with Patrick Laverty! Patrick Laverty, a pentester, social engineer, and conference organizer talks to Tib3rius about his career journey. Watch now! youtu.be/k3Ir4D161Uk

Saw Bugonia tonight. Very good film. Watch the trailer, don't read any spoilers, trust me.

I'll be on Infosec Pat's channel in 45 min for some live hacking fun and Q&A!

Episode 22: Social Engineering, Gas Mark 4, and AGAs with Rachel Tobac! @tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @racheltobac.bsky.social to talk social engineering war stories...and more! Links below!

If you're coming to BurbSec East or BSides Chicago next week, come find me and grab one of these new stickers. 🔥

I vibe-coded a new Burp Suite extension using Claude Code, and you can too! Watch me set up Burp’s Claude starter project, build a working extension and let AI debug itself. Watch now! youtu.be/83-kpDPHQag

New video! I tested out Burp AI against a freshly coded app to see what it could do. Explore Issue + Agentic mode in Repeater were particularly fun to use. www.youtube.com/watc... Thanks to @portswigger.net for sponsoring this video!

I've vibe-coded a Burp extension using Claude that I had in my head for a few years, and it only took a few hours. What's worse is it actually works. Really well. I feel dirty. 😭

Episode 21: The One Where They Talk About AI Again @tib3rius.bsky.social & @swiftsecur.bsky.social talk about AI (again). How it affects our lives, vibe coding, and its increasing usefulness in Cybersecurity. Links below!

Base64 is hands down my favorite way to encrypt stuff. So easy. 🔥

If we put 10 more monitors below, we could make a Stargate.

New video! Getting Into Cybersecurity - An Interview with Stacey (@sweetdelightss)! Stacey, a Security Operations Analyst at Wiz talks about how saying "yes" to early opportunities helped her career growth. Watch now! youtu.be/ek7LJpT2qFQ

Finally put my "Getting Into Cybersecurity" interview series / podcast onto Apple Podcasts: podcasts.apple.com/u... It's also on Spotify: open.spotify.com/sho... Or for the video version: www.youtube.com/play... I also have a biweekly podcast (@AcrossPondPod) over at www.acrossthepondcas...!

Episode 20: War Stories with Julien Richard! @tib3rius.bsky.social & @swiftsecur.bsky.social chat with Julien Richard about his war stories! Thank you to @portswigger.net for sponsoring today's episode! Check out portswigger.net/burp/ai to learn more about AI in Burp Suite. Links below!

New video! Explore Burp Suite Pro's Custom Actions and learn how to automate tasks directly in Repeater, streamline testing workflows, and unlock powerful ways to extend Burp with just a few lines of code. Watch here: youtu.be/Ts912rQjZ3U

There's a new supply chain attack in town, and this one propagates using a worm...inside npm. Charlie Eriksen joins me in this video to discuss how this happened, how bad it is, and what we can do to prevent it in the future. youtu.be/d0CryTPuCjk

🔥

Episode 19: DEF CON! @tib3rius.bsky.social & @swiftsecur.bsky.social chat about DEF CON, the world's biggest hacker convention, which Andy attended for the first time this year! Links below!

Huntress tracked a threat actor who installed their Managed EDR product, sparking debate online over triage limitations and user privacy. I sat down with @johnhammond.bsky.social to separate fact from misunderstanding. Watch the discussion now! youtu.be/inHcEmsYmK8

The new Covert Companion Pro lockpicking tool from Covert Instruments costs $150, but is it worth it? In this video, I compare the Pro to my original Covert Companion, to see if you should upgrade or stick with the classic. Watch now! youtu.be/YME82WGL334

OMG I ALSO DID A VIDEO ABOUT THE NPM SUPPLY CHAIN ATTACK THINGY. youtu.be/QhzK5T7g3Ro

Clicking "skip" when ChatGPT tries to "think" is basically daring it to bring on the slop.

IYK,YK. (and if you don't know, ask @tib3rius.bsky.social !)

New video! Getting Into Cybersecurity - An Interview with Asmodeus! In this episode, security engineer @asmodeusyrzero.bsky.social shares his experiences as a neurodivergent person in Cybersecurity! Watch now! youtu.be/1NJ_M-3gONo

Revealing the #TRUTH behind the JWT abbreviation.

The world becomes much funnier when you pronounce all initialisms as acronyms.

Episode 18: UK Online Safety Act @tib3rius.bsky.social & @swiftsecur.bsky.social chat with Daniel Card about the controversial UK Online Safety Act. Links below!

Struggle with SQL injection? Don't overthink it with complicated payloads and scanning tools. In this new video, I go over a tried and tested method for detecting simple SQL injections. Watch now! youtu.be/c_aEOhoPOrI Thanks to ThreatLocker for sponsoring this video! threatlocker.com/tib...

Pleased to announce I've joined the new DivisionHex team at @coalfire.bsky.social 🔥 coalfire.com/insights/new...

Made a Flipper Zero video. Viewer joked "I prefer Diet Flipper". That led to this. Now gotta figure out how to print them...

We launched a merch store! Prices are set to the lowest we can in the system to cover expected/unexpected fees. We don't want to make money from this. Any profits we do make will be donated to charity. techtalk-shop.fourthwall.com

I lost one of my cats earlier today. Please send hugs and cute pictures of your own fur babies. TY.

Even on Instagram, I can't escape the memes.

Tech Talk! returns this Saturday at 2pm EDT! @tracketpacer.bsky.social and I will talk about our DEF CON experiences, what we enjoyed, what we didn't, what new plans we have for next year. Tune in for this joint stream at either of our Twitch channels!

One of the most common questions I get asked by newcomers is should they stay at a company long-term or switch companies every few years. In this video, I'll go over the arguments for and against both options. Watch now: youtu.be/jsnktqjFDXc

Hey folks, my friends over at BSides RDU (Raleigh-Durham, NC) want you to know there are still tickets available for their Sept 12th con! One day, multiple tracks, CTFs, lockpicking, a raffle, and more! Go check out their schedule and sign up if you're nearby!

Fucking do it, I dare you.

Episode 17: Common Vulnerability Scoring Sucks? @tib3rius.bsky.social & @swiftsecur.bsky.social chat about the problems with CVSS. Links below!

Finally got around to arranging all the DEF CON 33 stickers / swag I got for the traditional clout photo. 🔥

Feet Feud (Hacker Family Feud) & the John Hammond Lookalike Contest will start on the Track 1 / 2 stage tonight at 10:30pm! #DEFCON #DC33

Um, ACKtually will be on the Contest Stage at 4pm today! Come watch!

Reminder that Aw, man...pages! starts at 10am on the Contest Stage (stage in the south lobby). Come prove to us you've read your man pages...

Tried my best "lime guy meme" with all my contest badges.

Date night with @therealc3rul34n.bsky.social 🥰 #HackerSummerCamp

Hey I actually got some sleep. Let's see how this pans out. #HackerSummerCamp #DEFCON #DEFCON33 #BSidesLV

New video! Getting Into Cybersecurity - An Interview with Kim Cote! In this episode, Google Cybersecurity Auditor Kim Cote talks about her unconventional path into the industry, with advice on networking, public speaking, and why the curious excel in this field. Watch now: youtu.be/iyLqb7ubPtI

Giving out a bunch of these today at BSides LV. 🤓

Landed in Vegas for #HackerSummerCamp! 🎉🥳

So like, I have 4 full containers of stickers in my luggage. I heard hackers like stickers. 🥹👉👈