Rob Morgan
@sudobashman
Followers
358
Following
2K
Media
156
Statuses
4K
Founder of @factoryinternet, building clouds, building platforms, trying to make companies more secure.
Sussex, England
Joined September 2011
Tenable aware - 10.8.5/10.9.0 fails to install on macOS 15.6. Not sure why but might be an apple thing, signatures and all the things line up. I think Apple are nuking it. Turns out this started yesterday.
0
0
0
Is there anyone at @TenableSecurity that I could chat to about the Mac agent build? I've tried normal channels but not getting anywhere yet?.
1
1
2
LinkedIn seems to be a bit dead, I've been saving this one for a while (well a minute or two);. LinkedIn went down after a critical CVE was discovered—‘Chief Visionary Energy’ overload. Too many people endorsing each other for ‘Thought Leadership’. #linkedinsupport #linkedintips
4
0
1
@Cloudflare In fairness, looking like BGP so perhaps the rest of the Internet and a lot of major service providers blindly trusting random ASNs announcing 1.1.1.0/24 might be a fairly big part of the problem. Almost surprised this sort of stuff doesn't happen more often.
0
0
4
Why do you hire a pen test firm with badges/a human to do the test? Same reason you hire a consultant to suggest the thing you already know. It's so you can blame someone else if it goes wrong.
0
0
2
Equally, I watched "one of the top 3 AI pen test infra services" miss passwords.txt on an open SMB share in the same /24 it was deployed in. Passwords.txt had DA creds and was untouched. Bug Bounty XSS FTW though!.
The current top US-based hacker on Hackerone's leader board is "Xbow". You might wonder what the heck that is. No, it's not an experienced hacker. It's not even a human. It's an AI agent, that's fully automated trained on real vulnerability data. The future with AI is scary.
1
0
2
RT @bettersafetynet: If you think a SOC or MSSP can be replaced with AI, you have an inexcusably shallow understanding of what these orgs c….
0
47
0
RT @rekdt: Hear me out,. There's no PCI-DSS requirements if you pivot to only take cash & cryptocurrency.
0
19
0
RT @techspence: Cybersecurity isn���t hard. It’s just easier to ignore until you’re on the news.
0
21
0
RT @_Freakyclown_: This is a great example of compliant non-compliance! Now I just need to order 75 staplers to give to the homeless.
0
2
0
🍿🍿🍿🍿.
0
0
1
RT @UK_Daniel_Card: anyone here know someone who works in the VALVE/Steam security team?. #Steam #Scammers #CyberCrime #Cyber #Security htt….
0
5
0
Solid advice. It's a climb that never stops, but sometimes you've got to have a rest and appreciate progress. 👏.
Imposter syndrome in cybersecurity is real. I heard this business guy Alex Hormozi say something that really changed my perspective on this…. “You don’t need more confidence, you need more evidence.”. 🫳🎤. That hits hard. In security, we often feel like frauds… not because we.
2
2
5
If you work in IT/Cyber - would you buy insurance rather than backup software, and then phone the insurer when your system dies/a human makes a mistake?.
16
1
20
RT @vxunderground: Lockbit ransomware group has been compromised. Their backend panel was dumped. You can see my build logs in the data du….
0
124
0
Closer than every when nearly every service going is in a browser. Still so many problems to roll it into an enterprise though, home use for a web browser/guest machine though? Can be great!.
Why will the Year of the #Linux Desktop always be next year? . Because we're still trying to decide on the perfect window manager 🙄.
0
0
0
I'm that old that I've seen Linux run out of inodes to store files and I've hit file/folder limits on earlier versions of linux when storing tens of millions of files. Can I have a badge now? (or more likely a pension!).
0
0
1