Simon Willison @simonwillison.net Independent AI researcher, creator of datasette.io and llm.datasette.io, building open source tools for data journalism, writing about a lot of stuff at https://simonwillison.net/
Sam Rose @samwho.dev That guy who makes visual essays about software at https://samwho.dev.
Developer Educator @ ngrok.com
He/him.
Christian Panton @pa.nton.cx OSINT Specialist @ DR Verificerer (Danish Broadcasting Corporation)
Prefers Signal over DM/chat: panton.01
Personal, long form, seldom updated: https://christian.panton.org/
All posts and views are my own, and might contain traces of nuts.
Maia Kahlke Lorentzen @maiathecyberwitch.bsky.social Internetekspert og medstifter af Cybernauterne. Vært på podcast Cybernormer og Onde Kvinder.
Troldejæger👹 cyberheks 🧙♀️kaotisk shitposter 💥. Free 🇵🇸.
She/her
Henrik C. Chulu and the Scroll of Doom @henrikchulu.bsky.social Website: https://asymmetric.henrikchu.lu/ Mastodon: https://mastodon.social/@chulu
jason grinblat @jfg.land creative head at freehold games
co-creator — Caves of Qud, Sproggiwood
generated histories, hidden monasteries, sentient plants🌹🌹
he/him
🐔 Brian Bucklew 🐔 ₑͤ>∿<ₑͤ ∞🌮 @unormal.bsky.social A semi-sentient colony of self-assembling, cooperative, biological nano-units. Still somewhat functional, despite its age. AI bad. 🏆IGF Narrative. 🚀Hugo Award Winning Caves of Qud Sproggiwood pronoun* BLM
TrustedSec @trustedsec.com End-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #HackThePlanet
https://trustedsec.com/
Volatility @volatilityfoundation.org Official account of the Volatility Memory Analysis Project and Windows Malware and Memory Forensics Training. http://volatilityfoundation.org
Volexity @volexity.com Volexity is a cybersecurity firm founded by the pioneers of memory forensics. Volexity delivers transformative solutions & services to governments & organizations worldwide, increasing enterprise visibility & facilitating rapid intrusion detection.
Electronic Frontier Foundation @eff.org We're the Electronic Frontier Foundation. We're a nonprofit that fights for your privacy and free speech online. Find all of EFF's social media accounts at eff.org/social.
Red Siege @redsiege.com Penetration Testing, Purple Team, Red Team & Adversary Emulation.
Let our Offense, Prepare your Defense. https://redsiege.com
#weareoffensive
Antisyphon Training - Powered by BHIS @antisyphontraining.bsky.social Affordable and accessible cybersecurity training that doesn't suck.
Featuring cybersecurity practitioners, former SANS instructors, and industry recognized leaders from all over the world.
https://www.antisyphontraining.com
Black Hills Information Security @bhinfosecurity.bsky.social Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
blackhillsinfosec.com & poweredbybhis.com
ThinkstCanary @thinkstcanary.canary.tools Know. When it matters.
https://canary.tools
GrandMaster @grandma5ter.bsky.social Cyberzzz in ICS/OT in Transport 🚦🚈🚊 Power 💡🔌 Water 🚰🚱 Renewable 💨☀ explorer and wanderer 🧳🌍 Sport enthusiast🏸🏎️🏐🏊♂️ Sometimes do blog as well
ICS Advisory Project @advisoryics.bsky.social The ICS Advisory Project is an open-source project that provides Critical Infrastructure Security Agency (CISA) ICS Advisory data in CSV format and supports multiple interactive dashboards for OT/ICS Asset Owners' vulnerability management.
ICS GmbH - Think Safe Think ICS @ics-gmbh.bsky.social IT/OT, CyberSecurity. CyberDefense, InfoSec, Safety, Pentest, IT-Security, KRITIS, ISO27001, IEC62443, DSGVO, SECIRA©, TISAX®
High Dependability Engineering für Software und Systeme, Industrial Engineering, Mobility, Railway
Secure ICS OT @secure-ics-ot.bsky.social Unsolicited posts from an ICS/OT Professional with both GICSP and ISA 62443 Expert. GIAC Advisory and ISA member.
X: @Secure_ICS_OT
Mastodon: https://infosec.exchange/@Secure_ICS_OT
#ICS #OT #GICSP #IEC62443
𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec.com Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #PolarProxy, #FlowCarp, #CapLoader and RawCap.
Website: https://www.netresec.com/
Mastodon: @netresec@infosec.exchange
Michael Rodriguez @duckie042.bsky.social Manager @Mandiant @Google Public Sector, Mission Control @ Google Space, Defcon Goon, #ThruntCon Board Member
Dave (@6502_ftw from Tweets) @cursed.monster Computer necromancer/vivisectionist, spoiler of grain, electromagnetic wave wrangler. Has strong opinions, weakly held. Pronouns (he/him) in bio, always antifascist.
Stephen Hilt @sjhilt.hilt.zip Threat Researcher @ TrendAI (Trend Micro), waffle maker, and dad. My statements and opinions are my own and do not reflect my company.
AJ King @ajking.io Threat Research at SnapAttack now part of Splunk now part of Cisco / Detection Engineering / Dad | #DetectionEngineering #ThreatHunting #PurpleTeam | Header art from http://art.vx-underground.org.
Matt Hand @matterpreter.bsky.social Director of Security Research at Prelude💜 | Author of Evading EDR http://nostarch.com/evading-edr 📖 | Security research & windows internals 🦠
Hexacorn @hexacorn.bsky.social Red Brain, Blue Fingers
Malware Analysis, Reverse Engineering, Threat Hunting, Detection Engineering, DFIR, Security Research, Programming, Curiosities, Software Archaeology, Puzzles, Bad dad jokes
https://www.hexacorn.com/blog/
hexacorn@infosec.exchange
Greg Foss @gregfoss.com Security Research Leader @ Datadog
Views are strictly my own
Christophe Tafani-Dereeper @christophetd.fr Cloud and container security • Security research and open source at Datadog
🇨🇭🇫🇷
https://christophetd.fr
Mehmet Ergene @cyb3rmonk.bsky.social https://academy.bluraven.io
Threat Hunting & Research, Detection Engineering | Microsoft Security MVP
#KQL #DFIR #DataScience
All is one.
Opinions are my own
http://posts.bluraven.io
https://github.com/Cyb3r-Monk/Threat-Hunting-and-Detection
signalblur📡🛸 @signalblur.bsky.social Cloud Security Researcher
Founder of https://magonia.io
#Cloud #Container #NSM #Malware #CTI #ThreatIntel
UFO Enthusiast
Opinions are my own. He/Him
Katie Knowles @siigil.bsky.social Security Researcher @ Datadog. 🐶 Head in the (Azure) clouds.
Sometimes blogging, always curious. Aim to be, rather than to seem.
Blogs at https://kknowl.es.
Christopher Peacock @securepeacock.bsky.social I find weird things on networks.
#PurpleTeam | Ex Raytheon MSSP, SCYTHE, & GD | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious.
Eric Capuano @eric.zip - Dad of two <3
- Co-founder Recon InfoSec
- SANS DFIR Instructor
- BlackHat Trainer
- IANS Faculty
- Trainer @digitaldefenseinstitute.com
- Blog: https://blog.ecapuano.com
- ⬡ ODESZA, Lane 8, Kasbo 🎧
- ❤ @whit.zip
Joe Roosen @jroosen.bsky.social SpyCloud - Director of Security Research, Cryptolaemus Coordinator, Emotet(Ivan)/QBot(Boris) Destroyer, gold prospector & former sysadmin.
Jamie Levy 🦉 @gleeda.bsky.social @volatilityfoundation.org Core Dev | Art of Memory Forensics co-author | DFIR trainer and enthusiast | Director of Adversary Tactics @huntress.com
John Hammond @johnhammond.bsky.social Hacker. Friend. Cybersecurity Researcher at Huntress.
Beau Woods @beauwoods.com hack all the cybers
Silas Cutler @silascutler.bsky.social You may know me from your server logs.
#Malware, Hacks, Internet Scanning, #CTI
Tom Hegel @hegel.bsky.social Hunting nation-state threats, and bending intelligence tech to shape real-world outcomes.
Will T @bushidotoken.net 🇬🇧 | Senior Threat Intelligence Advisor at Team Cymru | Co-author SANS FOR589 | Co-founder Curated Intel
Costin G. Raiu @craiu.bsky.social Romanian antihacker from another planet. #threatintel #yara #chess #taekwondo black belt
Motto: "One reboot a day keeps the implant away"
techy @techy.detectionengineering.net Creator of Detection Engineering Weekly (https://detectionengineering.net), Sec Research/Intel/Detection @ Datadog
B:\a.zza @mcbazza.com I.T. geek. Does things with computers/tech.
All views are own. Don't take seriously. Or, should you?
Servant to 5x cats. He/him
You may know me as 'mcbazza' on the bird-site
Sean Gallagher @thepacketrat.net Birb stalker. Cat tree. Cyber Threat Researcher. Recovering cyber and natsec reporter. Meme war and US Navy veteran.
@thepacketrat everywhere since 1994. These posts are not my employers’. https://falling-anvil.com
Panda 🐼 @realcyberpanda.bsky.social 🕵️ Security Analyst; #BlueTeam 🫡 | Software Developer 💻 | Layer 8 Debugger 🤷 | 🎩 Master of Mischief | Professional Ramen destroyer 🍜
Julia Evans @b0rk.jvns.ca programming and exclamation marks
blog: jvns.ca
zines: wizardzines.com
Scott Hanselman 🌮 @scott.hanselman.com I want you to win and be happy. Code, OSS, STEM, Beyoncé, T1D, open source artificial pancreases, Portland, 3D printing http://hanselminutes.com inclusive tech podcast! VP/Member of Technical Staff, Microsoft/GitHub 🌮
http://hanselman.com/about
Thomas Rid @ridt.bsky.social @ridt on X
Chris Sistrunk @chrissistrunk.bsky.social Husband, Dad, ⚡EE⚡, OT Security,
OT Practice Leader @Mandiant.com,
Ex-Entergy 💡, BEER-ISAC #002, LaTech Alum
#BBQ, Bourbon, Mississippi Sippers 🥃🦟, weirdo, klugemeister, #sockstatus, #dadjokes #DJaaS #NAPCON Keynote
📍 Mississippi, y'all
Kelsey Hightower @kelseyhightower.com Minimalist
Matteo @ hacking and cracking @geminiimatt.bsky.social Hacker. Founder of , @cryptoharlem.bsky.social, counter-surveillance, safety, and security expert. Pushing back against inequality in all it's forms. Anti surveillance, trainer to all marginalized & oppressed people everywhere. (He/They)
TrendAI Zero Day Initiative @thezdi.bsky.social TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Tom Uren @tom.risky.biz Author of the Seriously Risky Business cyber security newsletter
Jayson E. Street💜🤗💜 @jaysonstreet.bsky.social Hacker - Helper - Human
JaysonEStreet.com
bat 🦇🌻 @mzbat.bsky.social Security Consultant & Founder, Sonar Security | Red Siege, VMware Tanzu, NASA GSFC, Apple, 18F | art, lego, board games, comics, cute animals |🧛🏻♀️⛵️
Selena Larson @selenalarson.bsky.social loves dogs, sports, memes. she/her. podcaster. "bluesky's humblest resident nailfluencer 💅" - Jerry
my heart is in the west 🌵🌊 views mine.
mlf. @mlf.one He/it. A man of many talents and gifts.
IT security / LLM stuff / Occasional weirdness
DM for actual DM channels (Signal, etc.)
Andrew Martin ⚡☸️ @sublimi.no Hacker // CEO https://controlplane.io 🌐 @controlplane.io | Cloud Native Security | CISO openuk.uk | AI sec https://finos.org/ | Hacking Kubernetes https://oreilly.com/ | Ex https://tag-security.cncf.io/ & https://sans.org/ | Ex-X @sublimino
Ben Read @benread.bsky.social CTI @wizsecurity.bsky.social
Adjuct at @jhu.edu - SAIS
Nonresident Fellow at @atlanticcouncil.bsky.social - Cyber Statecraft
Previously NSC44, Mandiant, Google
Go Mammoths
Shane Huntley @shanehuntley.bsky.social Aussie security / tech guy.
Google Threat Intelligence. Co-founder Threat Analysis Group (TAG). Tweets are my own not my employers.
Alex Stamos @stamos.org CPO/CSO of Corridor.dev, teaching at Stanford.
Brian Liston @brianjliston.bsky.social Senior Threat Intelligence Analyst at Recorded Future
Analyzing Russia IO, Ukraine, election security
Cited in NYT, FT, Politico, Axios, NBC, France 24
GSPIA class of 2017
Kostas @kostastsale.bsky.social Running ➡ http://defendpoint.ca | http://edr-telemetry.com | https://edr-comparison.com/ | http://detectionstream.com | 🇬🇷🇨🇦
Filippo Valsorda @filippo.abyssdomain.expert RC F'13, F2'17
Cryptogopher / Go cryptography maintainer
Professional open source maintainer
https://filippo.io / https://github.com/FiloSottile
https://mkcert.dev / https://age-encryption.org
https://sunlight.dev / https://filippo.io/newsletter
gattaca @gattaca.bsky.social Grump, keynote, breaker of things, dad, podcaster, creator of (-:|3, OG, raconteur, gentleman spy, investor, whisky distillery owner
Malware Unicorn @malwareunicorn.bsky.social @Straiker. Ex-Microsoft. Ex-Meta RedTeam, Ex-Endgame, Ex Fireeye. malwareunicorn.org
David Buchanan @retr0.id reverse engineering, cryptography, exploits, hardware, file formats, and generally giving computers a hard time
Fedi: @retr0id@retr0.id
Macroblog: https://www.da.vidbuchanan.co.uk/blog/
Lou @loustella.com Threat Researcher
NJ->TX->PA
Contains Multitudes.
GreyNoise @greynoise.io GreyNoise analyzes Internet background noise. Use GreyNoise to remove pointless security alerts, find compromised devices, or identify emerging threats.
vx-underground (automated mirror) @vxundergroundre.bsky.social The largest collection of malware source code, samples, and papers on the internet.
Password: infected
(unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)
Ace Pace @acepace.bsky.social Recovering Windows Internals researcher turned hpc architect turned Web Apps security researcher.
There is never enough time, thank you for yours.
Ján Trenčanský @j91321.bsky.social EDR R&D team lead at ESET. Opinions are my own.
@j91321@infosec.exchange
Eliot Higgins @eliothiggins.bsky.social Founder and creative director of Bellingcat and director of Bellingcat Productions BV. Author of We Are Bellingcat.
Nathan McNulty @nathanmcnulty.com Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🐘infosec.exchange@nathanmcnulty
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com Recorded Future - Ransomware Researcher
Owner @greenarcher.io - Yours Truly, Johnny Dollar | The Press Guardian | The Clock | The Green Archer
Weird mix of security, comics, photography and wine!
www.greenarcher.io
Bill Marczak @billmarczak.org senior researcher at @citizenlab.ca
Danny Moore @moore.bsky.social Cyber-warfare | PhD from KCL | Author of 'Offensive Cyber Operations' | Security @ Meta
John Scott-Railton @jsrailton.bsky.social Chasing digital badness. Senior Researcher at Citizen Lab, but words here are mine.
Merill Fernando 💚 @merill.net Product Manager @microsoft | Creator of bluesky.ms • cmd.ms • idPowerToys.merill.net • Graph X-Ray • 🇦🇺 • 🇱🇰 • Posts my own
http://youtube.com/@merillx
Sign up to my newsletter https://entra.news
Tabitha Sable @tabbysable.bsky.social Anyone who cannot understand that a useful science can be built on stunt hacking will not understand my life, either.
All we have is each other. To change everything, start anywhere.
Tib3rius @tib3rius.bsky.social Web App (mostly) Hacker | Cybersecurity Educator | Content Creator | Ex-Brit | Links: http://linktr.ee/tib3rius (he/him) 🇺🇸 A mostly unserious person. @therealc3rul34n.bsky.social is bae 🥰
Jeremy Hanmer @fzylogic.bsky.social Distinguished Engineer @DreamHost
Language-agnostic software dev - Rust, TypeScript (primarily Next.js), Perl, Python, LUA...and so-on
ex-VP Security
ex-Network engineer
Poly, neurodivergent, 420 friendly, anti-fascist all day long
Teflon |CyberSec| 🖖 @shiftygeek.bsky.social Security Architect. I talk about Fabric, Network builds, network security, information security, New Zealand and a bit of gaming. #InfoSec #StarField #NZ #Networking #NetEng #Fabric #NetSec
I follow often (As long as your profile has some content)!
Adam Pennington @whatshisface.bsky.social I lead MITRE ATT&CK. Something something SCUBA diving, cyber. If it’s not about ATT&CK, I speak only for me. He/him.
Ryan Kovar @meansec.bsky.social Cyber dude. Enjoys clicking too fast, long walks in the woods, & advocating. Hates printers. Co-Creator of the BOTS CTF
Eric Sheesley @esheesle.bsky.social Infosec practitioner; Co-creator of the MITRE ATT&CK Framework
Mastodon: http://infosec.exchange/@esheesle
Sergio Caltagirone @intel.bsky.social Georgia Tech Professor. Cyber threat intelligence and cybersecurity professional - former NSA, Microsoft, and Dragos. President of the Threat Intelligence Academy. #FSD 🦆 Formerly @cnoanalysis on Twitter
John Hultquist @hultquist.bsky.social Mandiant Intelligence at Google. CYBERWARCON and SLEUTHCON founder. Johns Hopkins professor. Army vet.
Joe Slowik @pylos.co Threat Intel / CTI / OT / ICS / Critical Infra stuff along with other things. I genuinely care, and wish others did too.
Website: pylos.co
Training/Consulting: paralus.co
MITRE ATT&CK @attack.mitre.org MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Reposting ≠ endorsement.
Marc Rogers @cjunky.bsky.social Ramblings of a Mad Englishman: Hacker @ BBC's Real Hustle & Mr Robot. Head of Sec @ DEF CON. Founder @ CTI-League, Ransomware Taskforce, w00w00, CDC NSF, (He/Him).
Also
Twitter @marcwrogers
Mastodon cj@chaos.social
Corey Quinn @quinnypig.com Snarkmonger. Chief Cloud Economist at The Duckbill Group.
he/him.
Get my opinionated take on AWS news: http://lastweekinaws.com/t/
Signal: 833-AWS-BILL (833-297-2455)
LiveOverflow 🔴 @liveoverflow.bsky.social wannabe hacker... he/him
🌱 grow your hacking skills https://hextree.io
Chris Krebs @thekrebscycle.bsky.social Aka @c_c_krebs over there
Patrick Howell O’Neill @patrickhowelloneill.com Journalist at Bloomberg News in DC. Signal: @howelloneill.01, email: patoneill1@bloomberg.net https://www.bloomberg.com/authors/AXb8dLPHBFc/patrick-howell-oneill
Rob Fuller @mubix.com (he/him) Dad / Husband / Marine / Student / Teacher / @Hak5 / @NoVAHackers / @SiliconHBO / @NationalCCDC / @MARFORCYBER Auxiliary
Will Dormann is on Mastodon @wdormann.bsky.social I play with vulnerabilities and exploits.
While this site initially showed promise, I've grown tired with its lack of improvement.
You'll find me @wdormann@infosec.exchange on Mastodon.
Lea Kissner @leak.bsky.social Security, privacy, respect. Was the Twitter CISO until it was terrible. Now LinkedIn CISO. they/them
wint @dril.bsky.social Never Bullshit
I challenge any and every one who wants to kick my ass to a debate .
https://www.patreon.com/dril
https://www.instagram.com/dril
https://linktr.ee/drilreal
Drunk Binary @drunkbinary.bsky.social Senior Principal Adversary Hunter @dragosinc, Army Veteran,
Cocktail Scientist, APT Researcher | #FSD
https://infosec.exchange/web/@DrunkBinary
https://twitter.com/DrunkBinary