
Christian. Killer Grizz, Threat Intel & Thrunter. Hack things w/ @bsides_nova. @DEFCON Contests Dept Lead & Black Badge DC32. GSE #344. (VIEWS ARE MY OWN).
Boston, MA
Joined June 2017
- Tweets16K
- Following2.8K
- Followers6.6K
- Likes38.3K
Andy Piazza retweeted
BREAKING: Employers worldwide are pulling back on AI as they navigate a flood of errors and low-quality work that sap employee time, raise privacy and security risks, and drive up costs, per the Guardian.
Andy Piazza retweeted
#BSidesNoVA conference starts tomorrow!
October 30th: Workshops and Happy Hour
October 31st: Talks and Villages
Workshop tickets are available until tomorrow, so get yours ASAP!
Conference Schedule: bsidesnova-2026.sessionize.c…
Tickets: eventbrite.com/e/bsidesnova-…
Andy Piazza retweeted
If you're a threat Intel pro that's been laid off and you want to come to @CYBERWARCON I have a ticket for you. Hit me up.
Andy Piazza retweeted
If you’re headed to #BSidesNOVA this weekend, @Junior_Baines is talking about Chinese implants in the supply chain on 10/31! Jake computers real good, you won’t wanna miss it 🎉
bsidesnova-2026.sessionize.c…
Andy Piazza retweeted
Replying to @RGB_Lights
Everything I learned about cryptology I learned on Sesame Street.
Andy Piazza retweeted
4/4 banger @unpromptedconf
Andy Piazza retweeted
Just starting out or trying to switch careers to #cybersecurity?
#BSidesNoVA conference has you covered on Oct 31st with Career Village!
Get your resume reviewed!
Learn how to get started in offensive security!
Conf Schedule bsidesnova-2026.sessionize.c…
Tickets eventbrite.com/e/bsidesnova-…
Andy Piazza retweeted
Welcome back @PhiaLLC, returning gold sponsor of #BSidesNoVA!
Learn how phia blends cyber, intelligence and technology expertise with passion and commitment at phiatech.com
BSides Conference Schedule: bsidesnova-2026.sessionize.c…
Tickets: eventbrite.com/e/bsidesnova-…
Andy Piazza retweeted
CISO: We need to defend against agent swarms!
Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
Andy Piazza retweeted
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits).
So for example, if you want to build some sample malware to test a detection system, nope.
Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope.
Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope.
You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children.
Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important.
And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
Andy Piazza retweeted
2/2 This led us to believe that it was exploitation of those vulnerabilities. We are unable to confirm that initial access is associated with the specific PHP2Shell CVEs. We have retracted our previous update from October 23.
Andy Piazza retweeted
#BSidesNoVA has a Happy Hour at GMU next Fri at 5PM for Fri or Sat conf attendees sponsored by @Altus_CC
We have fireside rants if you want to hear, costume contest if you want to dress up, free food and drink if you don't want those
Ticket for the conf eventbrite.com/e/bsidesnova-…
Andy Piazza retweeted
To teach a lesson,
After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again.
A big budget can buy a domain. It shouldn't buy someone else's research credit.
If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve.
Hack the planet. Credit the researchers.
Andy Piazza retweeted
Why is Wiz taking any credit for this? Their blog post words it like they discovered it.
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: nitter.cf/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.


























