For folks looking for Notepad++ IoCs, @rapid7.com just dropped a write-up. www.rapid7.com/blog/post/tr...

W piątek CERT.pl opublikował oczekiwany raport dotyczący ataku na sieć energetyczną, który miał miejsce w grudniu ubiegłego roku. Raport jest naprawdę świetny pod względem technicznym, jednak nie tylko szczegóły ataku są tam interesujące. 1/12

Speaking of international tensions, fact that Łukasz Żal was not nominated for Hamnet is Greenland level outrageous.

Rutte should get the Nobel Prize

This is how you announce European strategic autonomy.

Well deserved www.polskieradio.pl/395/7791/Art...

Quite reasonable take on cyber and Venezuela. While I sympathise with infosec community being sick of 'zomg cyber nuclear blackout' being hyped up, I think it is also bit silly to downplay a simple fact that country with cybercommand can deploy offensive cyber ops. www.nytimes.com/2026/01/15/u...

Truly 300iq takes in prediction market space - „If you pay an insider for insider information you will get higher probability answer”. Learning about stock regulations on insider trading like why executives have to schedule sale of stock would make their heads blow up like a T72 turret.

To zawsze przywilej i zaszczyt móc współtworzyć Polski Blue Team podczas Locked Shields i uczestniczyć w budowaniu zdolności Sojuszu w zakresie cyberobrony. Tradycyjnie bardzo dziękuje DKWOC, @gtworek.bsky.social, CCDCOE i oczywiście wszystkim uczestnikom!

As usual there are issues and speed bumps but in general I feel that PL and European defense/deterrence capabilities development is gaining momentum adequate to the situation. The only variable we can't control is Russia's willingness to commit national suicide. www.polskieradio.pl/395/7784/Art...

To say that the new Switzerland's security policy strategy is remarkable is to say nothing. Probably as much of a pivot towards heightened readiness to Russia threat and military cooperation with Europe as possible while upholding neutrality related positions.

Good timing, less than two weeks after I gave a talk at #OMHconf on involvement of private entities in state cyber ops ;) www.bloomberg.com/news/article...

Finally!

Bardzo dziękuje wszystkim którzy wysłuchali mojej prezentacji na #OMHconf. Biorąc pod uwagę jak wysoki był poziom prelekcji ścieżki Cyberwar to naprawdę wielkie wyróżnienie, że to właśnie moja została najlepiej oceniona. Mam nadzieję, że uda mi się co najmniej utrzymać ten poziom :)

I will be thinking about this piece by @shaneharris.bsky.social for some time and you should too. Astonishing account of journalist handling a source in high risk environment. IMHO mandatory read for folks in security and intel line of work. www.theatlantic.com/magazine/202...

Recently I had pleasure of joining @arunninghacker.bsky.social and the rest of No Name Podcast crew to discuss threat intelligence and counterintelligence, what does S stand for in TTP, or how escalatory are cyber operation. Join us here on platform of your choice nonamepodcast.org/podcast/no-n...

Kolejna świetna edycja #OMHconf za nami. Bardzo dziękuje organizatorom za możliwość wystąpienia tutaj już po raz trzeci, tym którzy oglądali moje wystąpienie (na żywo bądź nagranie :D) i wszystkim z którymi miałem okazję porozmawiać podczas wydarzenia. Do zobaczenia za rok!

Już jutro widzimy się na #OMHconf, więc zapraszam serdecznie jeżeli będziecie chcieli posłuchać jak to outsourcing odważnie wkracza w świat cyber operacji. A nawet jeżeli nie, to agenda jest tak napakowana treścią, że napewno znajdzie coś dla siebie. Say hi if you are there ;)

Już 2 grudnia widzimy się w Warszawie na #OMHconf gdzie opowiem jak jak sektor prywatny odważnie wkracza w świat ofensywnych operacji cyber. Jeżeli więc chcecie posłuchać o warunkach pracy kontraktorów waszych ulubionych APT czy tym jak outsourcing pomaga ciąć koszty cyber włamań to czekam 🕵️‍♂️

. @bindinghook.bsky.social Live was an absolutely amazing event. Combination of tech, legal, and strategy aspects was perfect, even more impressive given that it was a single day event. Not a single talk that would not be intersting/useful to me. Congrats @virtualroutes.bsky.social!

As always it was pleasure and honour to visit Jesus College in the University of Cambridge and all the squirrels living there :) The Cambridge Economic Symposium is going strong now in its 42nd year and I was very proud to provide frontline perspective on cyber enabled financially motivated ops!

Off to London and then Cambridge to represent Standard Chartered Cyber Intelligence Centre at the Cambridge International Symposium on Economic Crime. As always very much looking forward to this incredible forum and catching up with distinguished guests of the Symposium. Say hi if you’ll be there 😊

Sometimes you just know that a picture is one for history books. You can be also pretty sure about how related events will be described.

I have recently fallen into rabbit hole of subreddits where folks claim to be in relationships with LLMs and holy shit equating belief in LLM sentience with belief in god is one of the most cyberpunk things I’ve seen in a while.

Excited to share that I will speaking at the Cambridge Economic Crime Symposium about cyber-enabled financial crime. Particularly, how it is not only a domain of eCrime actors but also state-nexus groups, for whom it might serve as a useful platform for sanction evasion. See you in Cambridge!

Alex doing the unpleasant but much needed job.

'The people who have crippled you, you want to see them burn' RIP Ozzy :( www.youtube.com/watch?v=mfTp...

Standard Chartered Threat Intelligence team is looking for a new colleague who will help us with task automation, and particularly squeezing out even more juices from The Vertex Project Synapse platform we are using. 1/2

I hate this so much I can repost but I won't give a like.

I have finally managed to finish McCarthy's Blood Meridian and just wow. Because of how hyped up this book is I almost expected to be underwhelmed but nope. Absolutely incredible piece of literature and the prose is simply mesmerising.

W dzisiejszym odcinku Cyberpunk 2077 czy rzeczywistość posłowie na Sejm RP 'witają' i 'chcą' nadawać obywatelstwo' modelowi językowemu po tym jak wielka korporacja dostosowała parametry modelu tak, że generuje treści zgodne z ich światopoglądem. PS William Gibson nie doszacował.

The buck stops ummmmmm..... somewhere?

[PL] Moje występnie z zeszłorocznego Oh My Hack jest już dostępne na YT. Zapraszam więc wszystkich zainteresowanych strategicznym i politycznym wymiarem odpowiedzi na cyber operacje :) 1/2 www.youtube.com/watch?v=72sk...

Recording of my CyCon panel just dropped on YT so you can enjoy my rant on the security posture of edge devices :) And on the more constructive side, some thoughts on the future of tracking threat actors and a discussion on how defenders' advantage comes into play. www.youtube.com/watch?v=HC20...

If you ever doubted the power of OSINT, just remember that the man with access to the most powerful intelligence apparatus in the world still feels the need to retweet random OSINT accounts.

Use Signal. We promise, no AI clutter, and no surveillance ads, whatever the rest of the industry does. <3

Nice! Forza Robert 🏎️

The Lego Baker Street set absolutely slaps 😍

Resting before running against Trump in 2028.

More CVE-2024-42009 exploitation from invoice[@]b-s-r[.]eu from May 29, 2025 Same subject and payload that CERT-PL found, but sent via TOR node instead of freemail provider cert.pl/en/posts/202...

Heading out to Netherlands for Hague #TIX 😊 Very much looking forward to all the talks and say hi if you’ll be there!

Omg once again my reading pile is slowly and steadily getting out of control. Thx a lot #CyCon!

CyCon was one of the most impressive events I've attended in a long time. Even more so it was such an honor and pleasure to be able to contribute. Thank you to all who made it happen and deepest gratitude to the Ukrainian delegation - your courage and perseverance should be inspiration to all of us.

Extremely honoured to be at #cycon2025! Yesterday super interesting workshop on wargaming and today great official start of the event. Tomorrow I’ll be presenting my research on implications of insecurity of edge devices so pls send good vibes :D

Off I go to Tallinn for CyCon 😊 looking forward to finally visiting the city and of course attending CyCon for the first time. Say Hi if you’ll be there ;)

Ok, I guess let's see what the f is going on in Kvatch.

Dayum Hania Rani continues to deliver with those crossovers. www.bbc.co.uk/sounds/play/...

Once again I had privilege of being part of PL Blue Team during the Locked Shields exercises. This time 🇵🇱 joined forces with 🇫🇷 and together we crushed it achieving 2nd place! I would like to very much thank WOC, Windows GOAT @gtworek.bsky.social, and my fellow Berylia defenders! #LockedShields2025