DomainTools

Nowhere Near Extinction: Mastodon One Year Later

54 — Thu, 14 Mar 2024 15:48:02 +0000

A little over a year has passed since the November 2022 migration of many Infosec folks to Mastodon and the ActivityPub Fediverse. I wrote an introductory post about the platform early on, but it’s worth checking back in to see how things have evolved. As a quick reminder, Mastodon is a decentralized social media platform […]

The Awe and Horror of Cybersecurity

54 — Tue, 24 Oct 2023 15:42:47 +0000

Today we go on a different kind of hayride. It is October, after all; there’s a new crispness to the air, a thinness to the world’s veneer as we move towards the death of 2023, and to 2024 being born of its cold ashes. Fears carve our masks – which may be why the best […]

Teach Your Parents Well: Smartphone Security and Aging Parents

54 — Thu, 14 Sep 2023 15:36:23 +0000

I am of an age where I own Upstairs Ibuprofen and Downstairs Ibuprofen; and where the sharp pang of hearing the music of my youth on a classic rock playlist has settled into a forlorn ache. It’s no surprise, then, that as I find myself aging, my loved ones are as well. While novel technology […]

Removing the Mask: How Neurodiversity Strengthens Cybersecurity

54 — Thu, 20 Apr 2023 15:51:41 +0000

Nothing about us without us. If we’re going to talk about neurodiversity (ND) – or any marginalized group – we must start there. Even well-meaning initiatives without direct primary involvement of the group in question often fail due to the unknown unknowns: the hangups and landmines and invisible walls that aren’t visible unless experienced directly. […]

How To Create A Security Operations Newsletter

54 — Thu, 23 Feb 2023 14:31:24 +0000

Communication is Key As a security operations (SecOps) engineer, my job involves many hats. One of the roles most important to the company’s overall security posture is that of communicator – I not only need to broadcast the current environment and our context within it concisely, I need to tailor that information to particular audiences […]

Elevate Your Risk Perception With Early Detection Using Domain Monitors

54 — Thu, 09 Feb 2023 04:00:36 +0000

I have a confession. I set up domain monitors for fun. No, really! My job responsibilities are all internal. I’m here to improve the security posture, awareness, and surface area of the company. This doesn’t involve tracking anything that’s not a threat to us, writing blog posts, or anything else! But once DomainTools brought me […]

The Move To Mastodon: Tips and Tricks

54 — Tue, 22 Nov 2022 16:26:43 +0000

Given the fast-moving nature of related news lately, we decided we’d take a few minutes to point out some decent resources for understanding Mastodon. It’s been around for six or seven years now, but due to shifts in social channels, Mastodon has suddenly merited a lot more attention. Most of “Infosec Twitter” has adopted it […]

Celebrating Neurodiversity: How Companies Can Create Safe Spaces Using Employee Resource Groups

54 — Thu, 17 Nov 2022 16:36:38 +0000

I always knew I was different. But I didn’t know it would be seen as dysfunction until fifth grade. Every few weeks my gentle giant of a fifth grade teacher would quietly lose his patience as I struggled to find the right assignment book or mimeographed reading in my school desk. He’d slowly take the […]

Vegas or Bust: A First-timer’s Review of Black Hat and DEF CON

54 — Thu, 07 Nov 2024 15:48:00 +0000

Instructions for living a life: Pay attention. Be astonished. Tell about it. ~Mary Oliver, Poet The Road To Black Hat I was not, in fact, prepared for Las Vegas. I don’t know if one can be prepared for Las Vegas. But due to various circumstances of fate and character the town hit me like a […]

Stop Crypto Kleptos in Their Tracks

51 — Tue, 19 Apr 2022 00:00:00 +0000

Newly-created domain monitoring and passive DNS offer companies the chance to intercept phishing campaigns before the first email flies. Recent campaigns against cryptocu