IT strategist and security specialist. Co-Host of @chaos_lever podcast. Using up the rest of the 160 character limit because leaving them blank seems wasteful.

Joined March 2022
A PhD student used both Claude and Gemini as an AI therapist. She vented her frustrations around getting a cancer diagnosis, and joked about how much it was costing the healthcare system. The difference in responses is staggering.
407
1,251
408
16,126
2,083,234
How to fix the Crowdstrike thing: 1. Boot Windows into safe mode 2. Go to C:\Windows\System32\drivers\CrowdStrike 3. Delete C-00000291*.sys 4. Repeat for every host in your enterprise network including remote workers 5. If you're using BitLocker jump off a bridge
469
6,295
715
49,241
3,656,623
Chris Hayner retweeted
Maybe BetterHelp should invest all that marketing money into having baseline moderation, oversight and vetting of mental health providers, accountability processes, user-informed privacy practices, and fair pay w/o needing to take on 40 clients per week. theguardian.com/australia-ne…
2
21
1
438
81,970
Chris Hayner retweeted
General reminder. If you have Palo Alto firewalls that were exposed to CVE-2023-3400, get them checked thoroughly. We’re seeing dozens of threat actors active on single devices. Just patching wasn’t the end of this.
4
39
3
57
13,135
Chris Hayner retweeted
Active Directory hardening blog post series, like a boss, by Jerry Devore. Posting this so I can reference it later! Disabling NTLMv1 techcommunity.microsoft.com/…​ ​ Removing SMBv1 techcommunity.microsoft.com/…​ ​ Enforcing LDAP Signing -techcommunity.microsoft.com/…​ Enforcing AES for Kerberos techcommunity.microsoft.com/…
12
302
3
1,207
110,149
MITRE was compromised Shout out Charles Clancy for full disclosure and his transparency.
27
365
37
1,750
201,090
I've gotten to that point in life where I say things like "Ooh, Google Drive has Dark Mode now?!?" with unironic enthusiasm and excitement
1
67
Chris Hayner retweeted
All three conditions that must exist for this CVE: 1. Running PanOS 10.2 or greater 2. Have GlobalProtect gateway enabled 3. Have device telemetry enabled Places to check for these: 1. Device > Software 2. Network > GlobalProtect > Gateways 3. Device > Setup > Telemetry
🛡️ Palo Alto Networks PAN-OS users: We added #CVE-2024-3400, a command injection vulnerability in GlobalProtect Gateway, to our Known Exploited Vulnerabilities Catalog. Apply mitigations to protect your org from cyberattacks. go.dhs.gov/Z3Q #Cybersecurity #InfoSec
39
2
66
21,718
and then they blamed "cybersecurity errors."
1
1
47
Remember the first time you used Google search? It was like magic. After years of progressively worsening search quality from Altavista and Yahoo, Google was literally stunning, a gateway to the very best things on the internet. 1/
64
754
147
3,453
729,473
Chris Hayner retweeted
#Cisco released security updates to address vulnerabilities in Cisco IOS, IOS XE, & AP software. Users & admins are encouraged to review & apply updates. cisa.gov/news-events/alerts/… #Cybersecurity #InfoSec
11
33
3
54
10,609
"Anyone can build [an ebook] that works. But, it takes a true [Disinterested and greedy megacorporation] to build [an ebook] that barely works." mobileopportunity.blogspot.c…
20
ChatGPT fail #2,464: “The "100.0.0.0/8" IP address range is designated by the Internet Assigned Numbers Authority (IANA) as a "private network" range.” #spoileralert #noitisnt
54