Another great edition of NATO CCDCOE #CyCon. Proud that this year I could contribute both by hosting a workshop with @euben.bsky.social and Jiro Minier, and joining the CyCon proceedings Academic Review Committee. Kudos to organisers, speakers, and all the delegates. See you next year!

Looking for something to read this weekend? Check out @lawsecnet.counterintelligence.pl's review of @fiona-cunningham.bsky.social's Under the Nuclear Shadow (from @princetonupress.bsky.social) for a suggestion! bindinghook.com/are-informat...

Already next week with @euben.bsky.social and Jiro Minier we will be running a workshop on threat clustering challenges related to outsourcing of various aspects of cyber operations at NATO CCDCOE #CyCon2026. Topic that I keep thinking about a lot and we do have full house booked! See you in 🇪🇪

Happening next week! We’re proud Synapse is playing a part in the hands-on workshop at @ccdcoe #CyCon2026 with @lawsecnet.counterintelligence.pl, @euben.bsky.social, and Jiro Minier: “Threat Actors Can Do Public-Private Partnership Too”

Still excited for Modern Naval Warfare and definitely will be buying it tomorrow, but damn I have a feeling that it might flop hard :P

Another great edition of @pivotcon.bsky.social, superb experience both in terms of content and the organisation of event. @corpen.secman.pl @pstirparo.bsky.social and the crew deliver once again! Especially liked talks on [redacted] [redacted], [redacted] [redacted] [redacted], and [redacted].

See you next week in Malaga or prepare for a major FOMO if you won’t be there 😎 Great to see PIVOTcon coming back strong edition after edition. Couldn’t be there last year due to Locked Shields so very excited to be back and catch up with everyone!

Udział w #LockedShields to zawsze przywilej i zaszczyt i jak co roku czuję dumę broniąc Windowsów w Berylii. Bardzo dziękuje @cyberwojska.bsky.social za możliwość bycia częścią zespołu PL, @gtworek.bsky.social za zaufanie i niezrównane dowodzenie, oraz wszystkim członkom #BT03 i #CCDCOE!

A collaborative deep dive into clustering & attributing modern threat ecosystems, featuring a case study on APT41. Learn more here: web.cvent.com/event/3854aa...

We’re proud Synapse is playing a part in the hands-on workshop at @ccdcoe #CyCon2026 with @lawsecnet.counterintelligence.pl, @euben.bsky.social, and Jiro Minier: “Threat Actors Can Do Public-Private Partnership Too”

Now that things are becoming serious and official I'm very happy, super excited, and most of all proud to announce a workshop that I will be hosting together with @euben.bsky.social and Jiro Minier during the NATO CCDCOE #CyCon2026 conference! 1/4

Już 8 kwietnia zapraszam serdecznie na SECURE 2026 organizowany przez NASK i CERT.PL, a w szczególności moją prezentację "Śledzenie i analiza infrastruktury typu ORB w praktyce threat intelligence". Do zobaczenia! Link do rejestracji: www.secure.edu.pl/register

At Standard Chartered Cyber Intelligence Centre once again we are hiring, as we are looking for a colleague in US to support intelligence ops focused on ransomware affiliates. Join us for discovery and tracking of emerging groups, and translating intelligence to operational outcomes.1/4

Thanks for this post. I'm really tired of basic-ass analyses that go like "well based on historical patterns we expect retaliatory attacks". If you are doing an actual analysis perhaps there are few more factors that impact the Iranian capabilities currently and you might want to consider those.

Annual report by the Välisluureamet / Estonian Foreign Intelligence Service is always a must read, but what struck me most in this edition was this passage right in the foreword: 1/6

For folks looking for Notepad++ IoCs, @rapid7.com just dropped a write-up. www.rapid7.com/blog/post/tr...

W piątek CERT.pl opublikował oczekiwany raport dotyczący ataku na sieć energetyczną, który miał miejsce w grudniu ubiegłego roku. Raport jest naprawdę świetny pod względem technicznym, jednak nie tylko szczegóły ataku są tam interesujące. 1/12

Speaking of international tensions, fact that Łukasz Żal was not nominated for Hamnet is Greenland level outrageous.

Rutte should get the Nobel Prize

This is how you announce European strategic autonomy.

Well deserved www.polskieradio.pl/395/7791/Art...

Quite reasonable take on cyber and Venezuela. While I sympathise with infosec community being sick of 'zomg cyber nuclear blackout' being hyped up, I think it is also bit silly to downplay a simple fact that country with cybercommand can deploy offensive cyber ops. www.nytimes.com/2026/01/15/u...

Truly 300iq takes in prediction market space - „If you pay an insider for insider information you will get higher probability answer”. Learning about stock regulations on insider trading like why executives have to schedule sale of stock would make their heads blow up like a T72 turret.

To zawsze przywilej i zaszczyt móc współtworzyć Polski Blue Team podczas Locked Shields i uczestniczyć w budowaniu zdolności Sojuszu w zakresie cyberobrony. Tradycyjnie bardzo dziękuje DKWOC, @gtworek.bsky.social, CCDCOE i oczywiście wszystkim uczestnikom!

As usual there are issues and speed bumps but in general I feel that PL and European defense/deterrence capabilities development is gaining momentum adequate to the situation. The only variable we can't control is Russia's willingness to commit national suicide. www.polskieradio.pl/395/7784/Art...

To say that the new Switzerland's security policy strategy is remarkable is to say nothing. Probably as much of a pivot towards heightened readiness to Russia threat and military cooperation with Europe as possible while upholding neutrality related positions.

Good timing, less than two weeks after I gave a talk at #OMHconf on involvement of private entities in state cyber ops ;) www.bloomberg.com/news/article...

Finally!

Bardzo dziękuje wszystkim którzy wysłuchali mojej prezentacji na #OMHconf. Biorąc pod uwagę jak wysoki był poziom prelekcji ścieżki Cyberwar to naprawdę wielkie wyróżnienie, że to właśnie moja została najlepiej oceniona. Mam nadzieję, że uda mi się co najmniej utrzymać ten poziom :)

I will be thinking about this piece by @shaneharris.bsky.social for some time and you should too. Astonishing account of journalist handling a source in high risk environment. IMHO mandatory read for folks in security and intel line of work. www.theatlantic.com/magazine/202...

Recently I had pleasure of joining @arunninghacker.bsky.social and the rest of No Name Podcast crew to discuss threat intelligence and counterintelligence, what does S stand for in TTP, or how escalatory are cyber operation. Join us here on platform of your choice nonamepodcast.org/podcast/no-n...

Kolejna świetna edycja #OMHconf za nami. Bardzo dziękuje organizatorom za możliwość wystąpienia tutaj już po raz trzeci, tym którzy oglądali moje wystąpienie (na żywo bądź nagranie :D) i wszystkim z którymi miałem okazję porozmawiać podczas wydarzenia. Do zobaczenia za rok!

Już jutro widzimy się na #OMHconf, więc zapraszam serdecznie jeżeli będziecie chcieli posłuchać jak to outsourcing odważnie wkracza w świat cyber operacji. A nawet jeżeli nie, to agenda jest tak napakowana treścią, że napewno znajdzie coś dla siebie. Say hi if you are there ;)

Już 2 grudnia widzimy się w Warszawie na #OMHconf gdzie opowiem jak jak sektor prywatny odważnie wkracza w świat ofensywnych operacji cyber. Jeżeli więc chcecie posłuchać o warunkach pracy kontraktorów waszych ulubionych APT czy tym jak outsourcing pomaga ciąć koszty cyber włamań to czekam 🕵️‍♂️

. @bindinghook.bsky.social Live was an absolutely amazing event. Combination of tech, legal, and strategy aspects was perfect, even more impressive given that it was a single day event. Not a single talk that would not be intersting/useful to me. Congrats @virtualroutes.bsky.social!

As always it was pleasure and honour to visit Jesus College in the University of Cambridge and all the squirrels living there :) The Cambridge Economic Symposium is going strong now in its 42nd year and I was very proud to provide frontline perspective on cyber enabled financially motivated ops!

Off to London and then Cambridge to represent Standard Chartered Cyber Intelligence Centre at the Cambridge International Symposium on Economic Crime. As always very much looking forward to this incredible forum and catching up with distinguished guests of the Symposium. Say hi if you’ll be there 😊

Sometimes you just know that a picture is one for history books. You can be also pretty sure about how related events will be described.

I have recently fallen into rabbit hole of subreddits where folks claim to be in relationships with LLMs and holy shit equating belief in LLM sentience with belief in god is one of the most cyberpunk things I’ve seen in a while.

Excited to share that I will speaking at the Cambridge Economic Crime Symposium about cyber-enabled financial crime. Particularly, how it is not only a domain of eCrime actors but also state-nexus groups, for whom it might serve as a useful platform for sanction evasion. See you in Cambridge!

Alex doing the unpleasant but much needed job.

'The people who have crippled you, you want to see them burn' RIP Ozzy :( www.youtube.com/watch?v=mfTp...

Standard Chartered Threat Intelligence team is looking for a new colleague who will help us with task automation, and particularly squeezing out even more juices from The Vertex Project Synapse platform we are using. 1/2

I hate this so much I can repost but I won't give a like.

I have finally managed to finish McCarthy's Blood Meridian and just wow. Because of how hyped up this book is I almost expected to be underwhelmed but nope. Absolutely incredible piece of literature and the prose is simply mesmerising.

W dzisiejszym odcinku Cyberpunk 2077 czy rzeczywistość posłowie na Sejm RP 'witają' i 'chcą' nadawać obywatelstwo' modelowi językowemu po tym jak wielka korporacja dostosowała parametry modelu tak, że generuje treści zgodne z ich światopoglądem. PS William Gibson nie doszacował.

The buck stops ummmmmm..... somewhere?

[PL] Moje występnie z zeszłorocznego Oh My Hack jest już dostępne na YT. Zapraszam więc wszystkich zainteresowanych strategicznym i politycznym wymiarem odpowiedzi na cyber operacje :) 1/2 www.youtube.com/watch?v=72sk...

Recording of my CyCon panel just dropped on YT so you can enjoy my rant on the security posture of edge devices :) And on the more constructive side, some thoughts on the future of tracking threat actors and a discussion on how defenders' advantage comes into play. www.youtube.com/watch?v=HC20...

If you ever doubted the power of OSINT, just remember that the man with access to the most powerful intelligence apparatus in the world still feels the need to retweet random OSINT accounts.