Andy Piazza (@klrgrz) header
Andy Piazza (@klrgrz) profile picture

Christian. Killer Grizz, Threat Intel & Thrunter. Hack things w/ @bsides_nova. @DEFCON Contests Dept Lead & Black Badge DC32. GSE #344. (VIEWS ARE MY OWN).

Boston, MA
Joined June 2017
Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)Photo by Andy Piazza (@klrgrz)
BREAKING: Employers worldwide are pulling back on AI as they navigate a flood of errors and low-quality work that sap employee time, raise privacy and security risks, and drive up costs, per the Guardian.
858
3,128
855
32,173
2,131,617
#BSidesNoVA conference starts tomorrow! October 30th: Workshops and Happy Hour October 31st: Talks and Villages Workshop tickets are available until tomorrow, so get yours ASAP! Conference Schedule: bsidesnova-2026.sessionize.c… Tickets: eventbrite.com/e/bsidesnova-…
1
5
9
393
If you're a threat Intel pro that's been laid off and you want to come to @CYBERWARCON I have a ticket for you. Hit me up.
2
29
1
58
4,809
3
1
12
994
Andy Piazza retweeted
34
230
20
2,487
65,422
Replying to @RGB_Lights
Everything I learned about cryptology I learned on Sesame Street.
1
1
120
Andy Piazza retweeted
🤖 Made with AI
No fucking way ITS 4 AGAIN DIFFERENT BUG
5
14
136
3,733
4/4 banger @unpromptedconf
1
9
1
72
2,540
Just starting out or trying to switch careers to #cybersecurity? #BSidesNoVA conference has you covered on Oct 31st with Career Village! Get your resume reviewed! Learn how to get started in offensive security! Conf Schedule bsidesnova-2026.sessionize.c… Tickets eventbrite.com/e/bsidesnova-…
1
5
5
613
Andy Piazza retweeted
14
93
5
787
13,262
Welcome back @PhiaLLC, returning gold sponsor of #BSidesNoVA! Learn how phia blends cyber, intelligence and technology expertise with passion and commitment at phiatech.com BSides Conference Schedule: bsidesnova-2026.sessionize.c… Tickets: eventbrite.com/e/bsidesnova-…
2
1
209
Andy Piazza retweeted
CISO: We need to defend against agent swarms! Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
36
71
13
627
27,126
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits). So for example, if you want to build some sample malware to test a detection system, nope. Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope. Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope. You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children. Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important. And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
34
70
12
489
27,606
Andy Piazza retweeted
2/2 This led us to believe that it was exploitation of those vulnerabilities. We are unable to confirm that initial access is associated with the specific PHP2Shell CVEs. We have retracted our previous update from October 23.
4
9
5
35
7,934
#BSidesNoVA has a Happy Hour at GMU next Fri at 5PM for Fri or Sat conf attendees sponsored by @Altus_CC We have fireside rants if you want to hear, costume contest if you want to dress up, free food and drink if you don't want those Ticket for the conf eventbrite.com/e/bsidesnova-…
1
2
338
Andy Piazza retweeted
This is all just a very aggressive Cybersecurity Awareness Month campaign
14
293
19
2,038
25,960
Andy Piazza retweeted
To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.
51
264
29
1,926
173,776
Why is Wiz taking any credit for this? Their blog post words it like they discovered it.
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: nitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
34
33
9
615
39,615