Astarte Cybersecurity

Thread with links to all videos, articles, etc.

"What is security engineering?" I attempt to answer that in this video, and cover common acronyms (it ramps up) youtube.com/watch?v=4ZXkcH…

Clip: x.com/IceSolst/statu…

What's a honeypot, and why are we entering the golden age of honeypots? My favorite security founder @haroonmeer discusses bootstrapping a $20M ARR company that everyone loves, @ThinkstCanary (and what makes them so successful) youtube.com/watch?v=0n-Ns1…

This is part of the full video here: x.com/AstarteSecurit… Uploaded the tier list part again as a separate video

TIER LIST: Web app pentester's tools with @0xTib3rius youtube.com/watch?v=mEFLhH…

Insight on data poisoning, ML security, graph theory, and custom tools, by researcher @vesnafvr who gave TWELVE conference talks in 2025 (she also ranks her favorites). youtube.com/watch?v=xtenae…

Condensed demo portion here: x.com/IceSolst/statu…

Legendary @matrosov talks supply chain security, binary analysis, and demo's his new OSS tool @sbom_tools He is one of the authors of Rootkits and Bootkits @REhints and is the founder of @binarly_io youtube.com/watch?v=hzb22T…

Excellent @secureannex blog post by @tuckner - he finds these variants on his platform by analyzing thousands of extensions: annex.security/blog/promise-b…

Excellent @HuntressLabs blog post by @RussianPanda9xx @wbmmfq et al: huntress.com/blog/malicious…

Crashfix variants: 1. Download browser extension 2. it is malware, crashes browser 3. restart browser 4. get bamboozled: "run this command to fix your machine" 5. that command gets you pwn'd Details in thread

Video with @JamesBerthoty on AppSec tools and trends (76 page report): - What are companies using? - How to pick tools (plus demo the Latio site) - AI-native SAST - Backlog reduction - Securing AI-gen code - Supply chain future youtube.com/watch?v=fTGAHd…

I attempted to uncover software engineers' opinion of security people, by talking to SWE & APT @endingwithali. The investigation's results were largely inconclusive. youtube.com/watch?v=OFwJgU…

Pentesting Active Directory: Insight from @techspence + list of tools used youtube.com/watch?v=gdnFGt…