🛡️ Building the operating system for cybersecurity careers. Tech Roadmaps | Practical Labs | Community Support | Weekly Threat Intel | Free Forever ⬇️
Join for community & clarity →
Joined January 2017
- Tweets13.5K
- Following401
- Followers30K
- Likes29.4K
Pinned Tweet
❌Stop collecting advice.
✅Start building clarity.
Practical operating systems, playbooks, and coaching to think, lead, and win in cybersecurity; whether you’re breaking in, stepping up, or securing a growing business.
Find your path + Get the free toolkit
store.cybersecurityos.net/
CybersecurityOS retweeted
Google, Mozilla, Apple, and Go blocked compromised eMudhra certificates, and feds suspect a ransom negotiator helped run a ShinyHunters extortion site.
cybersecurityos.net/posts/os…
Cybersecurity Awareness Month ends today.
Security doesn't.
Thanks to everyone who followed along. If one post helped, share it with someone breaking in.
Keep learning with me: linktr.ee/cybersecurityos
Google, Mozilla, Apple, and Go blocked compromised eMudhra certificates, and feds suspect a ransom negotiator helped run a ShinyHunters extortion site.
cybersecurityos.net/posts/os…
CybersecurityOS retweeted
1 compromised laptop … $6.3Bn 🤯
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
CybersecurityOS retweeted
Talos saw attackers misuse 25+ legitimate collaboration, file-sharing, and payment platforms. and Dark Reading says some are skipping malware entirely and just calling the help desk to ask for access.
cybersecurityos.net/posts/os…
CybersecurityOS retweeted
Studying for SC-100 (Microsoft Cybersecurity Architect)?
Don't read everything. Study by domain.
MicrosoftSec Pro breaks the exam into domain-by-domain study guides. Built by someone who holds the cert.
cybersecurityos.gumroad.com/…
CybersecurityOS retweeted
no victim blame here.
Instead, the focus is on core principles such as:
defense in depth
RBAC
least privilege
just-in-time access
privileged access management
These may have been overlooked.
CybersecurityOS retweeted
My next newsletter "Your first Kali command said no" is coming Wednesday.
Subscribe to get it and stay in the loop on everything I'm creating.
join.cybersecurityos.net
CybersecurityOS retweeted
Rate yourself 1–10 on how much you grew in cyber this month.
Then reply with one thing you'll do in November to move up a point.
CybersecurityOS retweeted
another reminder
systems are only as secure as the humans behind them.
we focus so much on the technology that we forget the human element is always the ultimate vulnerability.
what if the real threat isn't a flaw in the code or someone’s misconfigured endpoint, but a long game played from the inside?
CybersecurityOS retweeted
How can a single compromised machine drain $6.3B from one of the world's largest exchanges?
This feels like a highly calculated, long-term operation…likely executed by a nation-state actor over months or even years.
How can a single compromised machine drain $6.3B from one of the world's largest exchanges?
This feels like a highly calculated, long-term operation…likely executed by a nation-state actor over months or even years.
another reminder
systems are only as secure as the humans behind them.
we focus so much on the technology that we forget the human element is always the ultimate vulnerability.
what if the real threat isn't a flaw in the code or someone’s misconfigured endpoint, but a long game played from the inside?
Rate yourself 1–10 on how much you grew in cyber this month.
Then reply with one thing you'll do in November to move up a point.
My next newsletter "Your first Kali command said no" is coming Wednesday.
Subscribe to get it and stay in the loop on everything I'm creating.
join.cybersecurityos.net
no victim blame here.
Instead, the focus is on core principles such as:
defense in depth
RBAC
least privilege
just-in-time access
privileged access management
These may have been overlooked.
