BSides Pyongyang

Our Chief Propaganda Art Officer is in re-education, and the people were not satisfied with their replacement (who made this fire logo), so we’re opening the call to the public. Apply here: forms.gle/AXpTKjGPwc15Tc…

Talk spotlight: counterintelligence in the digital realm — how signals get spoofed, false flags get planted in code, and logs get weaponized. Telling real ops from deception. Watch: youtu.be/S6x8I0WD4p8 #BSidesPyongyang #ThreatIntel

GOGOGO! #bsidesbelfast26 bsidesbelfast.org/register/

if my toaster monitors me does my monitor toaster i

Too bad I’m a cybersecurity thotleader

We're actively monitoring the Call for Designs submissions just like how your toasters are monitoring you. Submit today: forms.gle/AXpTKjGPwc15Tc…

Keynote spotlight: Bryson Bort (@brysonbort) delivers a BSides Pyongyang 2025 keynote. Watch it in full: youtu.be/W3pfqUwpOv8 #BSidesPyongyang #BSPY25

I talked about this in a video I made the other day (still in the queue). Going back to my very first talk at @shmoocon, where I released PoC code, people made fun of it. Same when I released my first open source tool for my @DARPA Cyber Fast Track grant. A certain individual nearly stopped my book from being released, even after it was already at the printers, by claiming it was plagiarized, when it wasn’t. This sort of stuff has made me release a lot less to the community. This argument that cybersecurity is all about finding flaws/fault in things doesn’t wash for me. And all the research and data are there that women, minorities, the neurodivergent, etc., get hit by this by extra orders of magnitude. We are only hurting ourselves by making our community so hostile and unwelcoming to people just trying to make an honest contribution.

先日CISAから今年5月に発生したCISAの委託先担当者が個人GitHubにCISAのAWS GovCloud認証情報や構成コードを誤って公開していた件についての教訓（うまくいった事/うまくいかなかった事）が公開されています。インシデント対応を実施してる人は目を通しておいて良い内容だと思いました。（添付はあえてページ翻訳したものをスクショしておいておきます） Lessons from CISA’s Cyber Incident cisa.gov/news-events/ne… ▼参考情報 CISA Admin Leaked AWS GovCloud Keys on Github krebsonsecurity.com/2026/05/cisa-a… How We Got a CISA GitHub Leak Taken Down in Under a Day blog.gitguardian.com/how-we-got-a-c…

My book is live! Go buy it! a.co/d/0bdOq3tU

Stuxnet target was discovered by looking at a photo found from the website of the President.

See you all at my @BSidesBelfast 2026 keynote! 🥳

North Korea tearing down gray markets and replacing with ‘20×10’ facilities dlvr.it/TTVh2y

With just 24 hours left until last tickets for BSides Belfast 2026 go on sale, (11am sharp, get your F5 fingers ready!), we wanted a quick update and a few announcements; Sponsors, Schedule, and Keynote Speaker! bsidesbelfast.org/2026/keynote-a…

@AllenOvery (Shearman), @HuntressLabs : Tera Sponsors 🎉 @Allstate, @bakermckenzie, @BlackDuck_SW, @CSIT_QUB, and @EkcoCloud: Giga Sponsors 🫶 @LambdaMamba : Keynote Speaker! 😍

TED 2011 was ten years ago. At this time on the 13th of July, I was about to take my notes and walk on to the TED stage.

The National Academies of Sciences, Engineering, and Medicine's workshop series on data and situational awareness for medical and public health preparedness and response has been announced. The series runs three webinars this month, plus a capstone session in DC this September, and it's tackling a problem I've spent most of my career on: how you build real awareness of what's happening on the chaotic situations. I did that in a different domain, in operational intelligence situations. Things are different in crisis situations facing health care, public health, emergency management, but there are lessons that will carry well, especially when the situation is under stress and the data is noisy. I'll be bringing an intelligence tradecraft lens to the discussion. Will talk Boyd, Klein, Heuer and how their many lessons aided me in dealing with chaos. Intuitive decision-making, confidence versus certainty, analysis of competing hypotheses, indications and warning: none of it was built for public health, but it maps onto this problem better than most people expect. Worth naming, too, where the analogy breaks down. Intelligence work deals with adversaries actively hiding things and seeking to deceive. Public health mostly deals with different types of chaos, natural noise and ambiguity. But the stakes are life and death and concern us all. Different problems, related toolkits. If you work in health data, public health surveillance, emergency management, or critical infrastructure resilience, and you've got scar tissue from real incidents, the organizers want your voice in the room. Register and bring your questions and inputs. Details and registration: nationalacademies.org/projects/CHPP-… First web session 1 is July 16, 12 to 4pm ET. In person capstone session is 23 Sep.

True fact.

朝鮮社会主義女性同盟第8回大会に参加するため、全国の地方組織からの代表らが平壌に到着した

We aim to make BSides Pyongyang the supremest con, that we can invade Times Square billboards. Your artwork might be displayed on the Times Square billboard one day. Apply here: forms.gle/AXpTKjGPwc15Tc…

@0x8A7 This is genuinely more effort than most designs