ทวีตที่ปักหมุด
All of the below tweets are fictional conversation starters meant to kick off security tabletop conversations. #DontPanic
English
Tabletop Scenarios
484 posts
Tabletop Scenarios
@badthingsdaily
THESE 👏 TWEETS 👏 ARE 👏 FICTION👏 This account tweets fictional or headline inspired breach scenarios. To play: Share opinions on prevention or response steps.
เข้าร่วม Şubat 2017
1 กำลังติดตาม17.5K ผู้ติดตาม
A sales surge over the last three months is publicly attributed to large purchases by an espionage group
secretservice.gov/newsroom/relea…
English
Tabletop Scenarios รีทวีตแล้ว
A startup has bought a domain associated with your brand without your permission and run your content through an AI engine, linking to their company
English
Someone just submitted the phrase "bounty plz" to your bug bounty program.
They've also attached a digest of that phrase signed by keys held in one of your HSMs.
English
Most of your CI/CD pipeline has broken after a dependency was detected as malware.
0x397==919==0q1627@jh__1995
Hey @badthingsdaily, this one could be for you. "Most of your CI/CD pipelines suddenly break."
English
Your remote support employees have been successfully bribed.
English
Billing alerts for outbound data transfer have started going off in object storage where your backup databases are stored.
Happy Thanksgiving
English
A competitor has submitted a functionally identical proposal to one you’ve submitted that is only dollar under yours.
The potential client, confused, asks if this is some kind of joke. They never shared your proposal, nor have you.
English
A military has found a way to blow up a product you sell, remotely.
nytimes.com/live/2024/09/1…
English
An executive of yours has suddenly decided to correct people who are wrong on the internet.
The wrong people very quickly start paying attention to your executive, who was not previously in the public eye.
English
An incident has just been declared after evidence of an intrusion was discovered.
All relevant on-calls have been paged.
Happy Labor Day
English
An unknown threat actor had gained access to the Company’s Google G-Suite account and changed passwords of all users of the Company’s G-Suite products (GMail, GDrive, G-Suite, etc), thereby denying access to all users.
Will@BushidoToken
“An unknown threat actor had gained access to the Company’s Google G-Suite account and changed passwords of all users of the Company’s G-Suite products (GMail, GDrive, G-Suite, etc), thereby denying access to all users having an unicoin email address” 👀
English
An adversary has sent a specially crafted packet designed to exploit a vulnerable tcp/ip stack in a server you’ve exposed to the internet.
English
Recovery keys necessary to recover from an outage are inaccessible due to the same outage.
English
The management control plane you would normally use to respond to an outage is down because of the outage
English
Nearly all customers are reaching out simultaneously after your product has triggered an outage.
English
All systems running a particular EDR are crashing.
English
All of your corporate cellular call and text records are leaked publicly.
English
Your hosted data warehouse has notified you of a breach.
English
Your eSignature vendor has announced a breach. All contracts have been exposed to an unknown adversary.
English