#Infosec, #CTI, and #ICS & Critical Infra Things
https://pylos.co
Also be on the alert for posts on heavy metal, sports ball (or black, cylindrical rubber object game 🏒), and various #shitposting.
Main job: analyzing the threats and doing the #CTI at Dataminr
Sidejob: #CTI and #ICS/#OT training and consulting through Paralus LLC (https://paralus.co)
Happy participant in TootFinder #tfr
Data driven rage blogging on the “vulnpocalypse”
https://www.dataminr.com/resources/intel-brief/examining-the-vulnpocalypse-and-defensive-responses/
DataminrExamining the Vulnpocalypse and Defensive Responses - DataminrCVE volume isn’t the problem, but exploitation speed is. Learn why defenders must shift from “assume breach” to “assume exploitation.”
Yes, you need to address this ASAP, but no, the internet is not (yet) on fire.
The current PHP shitshow is especially vexing because on the one hand, it is very much a big deal, but on the other, there is no widespread SUCCESSFUL exploitation of this vulnerability YET. Despite the latter, a whole lot of asshats are hyping the former for clicks and soundbytes.
Joyce is right that IR firms are fucked right now, but is misdiagnosing the cause. The “vulnpocalypse” is less about volume - most CVEs are pointless noise - and more about speed for a fraction of the items emerging. Emphasizes what we already knew: “just patch” is not defense on its own.
