Andrew Thompson @imposecost.bsky.social Head of Research and Discovery @Google Threat Intelligence. Leading multidisciplinary teams to defeat adversaries. Posts are attributable to me—not my employer.
Austin Larsen @handle.invalid Principal Threat Analyst - Google Threat Intelligence Group
Joe Slowik @pylos.co Threat Intel / CTI / OT / ICS / Critical Infra stuff along with other things. I genuinely care, and wish others did too.
Website: pylos.co
Training/Consulting: paralus.co
1steve 1stone @stonepwn3000.bsky.social TV/VCR Repair, Bad Guys & Breaches, big Jim Harrison poetry fan 
Shane Huntley @shanehuntley.bsky.social Aussie security / tech guy.
Google Threat Intelligence. Co-founder Threat Analysis Group (TAG). Tweets are my own not my employers.
Jamie Levy 🦉 @gleeda.bsky.social @volatilityfoundation.org Core Dev | Art of Memory Forensics co-author | DFIR trainer and enthusiast | Director of Adversary Tactics @huntress.com
Ryan Tomcik @heferyzan.bsky.social DE/TH @GoogleCloud @Mandiant Managed Defense
Nicole Hoffman @threathuntergirl.bsky.social Friendly Neighborhood CTI Analyst | Children’s Book Author | Lego builder | Gamer | She/Her
Ronnie Salomonsen @r0ns3n.dk Adversary Methods - Research & Discovery (RAD) Team @Mandiant - Now Part of @GoogleCloud. Former DFIR, Malware & Network Analyst. All tweets are my own.
@barryv.bsky.social @barryv.bsky.social 
Alyssa (she/her) @ramen0x3f.bsky.social Senior Threat Researcher and Pun Aficionado @Microsoft
Former research+red team+hand drawn memes @Mandiant
https://linktr.ee/alyssarahman
The Banshee Queen 👑 @cyberoverdrive.bsky.social #threatintel @Recorded Future | Formerly @PwC GTI | Malware & infrastructure analysis with a side of cyberpunk. 🌃🌌 She/her, support 🏳️🌈🏳️⚧️✨
Gigs @gigs-security.bsky.social fka gigs_security on tweeter | Lumos & Nox’s mom | boppin around tracking your least favorite TA. Campaigns and Global Events Manager #GTIG @googlecloud
Katie Nickels @likethecoins.bsky.social 
Andy Greenberg @agreenberg.bsky.social Writer for WIRED. Author of SANDWORM. Latest book, TRACERS IN THE DARK: The Global Hunt for the Crime Lords of Cryptocurrency, out now. agreenberg@wired.com. Andy.01 on Signal.
Caroline @cxstephens.bsky.social 
SwiftOnSecurity @swiftonsecurity.com computer security person. former helpdesk
Lesley Carhart @hacks4pancakes.com I am eminently qualified to speak from experience about a variety of dumpster fires.
ICS DFIR at Dragos, martial artist, marksman, humanist, level 14 Neutral Good rogue, USAF retired. I post *very serious* things about infosec. Thoughts my own. Enby. 🏳️🌈
Sherrod @sherrod.bsky.social It’s me. Sherrod DeGrippo 
Olaf Hartong @olafhartong.nl Security researcher with a camera | @FalconForce.nl | Microsoft MVP | Snow man role model | https://youtube.com/@olafhartong
Justin Elze @handle.invalid CTO @TrustedSec.com | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Phil Hagen @philhagen.com DFIR, security, networking, all things tech, OneWheel, Radinn, travel, LEGO, and probably a whole lot more in small and sporadic bits. (Squirrel!)
Fierce and unapologetic ally. He/him/his.
Nick Carr @carr.bsky.social Relax.
Fan of an SEC team but I still root for mid-majors. 
Andrew Case @attrc.bsky.social Volatility Core developer, Dir. of Research Volexity, LSU Cyber
Huntress @huntress.com Managed endpoint protection, detection and response designed to help the 99% fight back against today’s cybercriminals.
DFIR Diva @dfirdiva.bsky.social DFIR Analyst
Blog: https://dfirdiva.com/
Free & Affordable Training (DFIR, OSINT, Cybersecurity): https://training.dfirdiva.com/
Community Listings: https://communiy-listings.dfirdiva.com/
TrustedSec @trustedsec.com End-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #HackThePlanet
https://trustedsec.com/
Volatility @volatilityfoundation.org Official account of the Volatility Memory Analysis Project and Windows Malware and Memory Forensics Training. http://volatilityfoundation.org
Blue Team Con @blueteamcon.com Blue Team Con is an annual cybersecurity conference built for defenders, inclusive of anyone interested in safeguarding organizations.
https://blueteamcon.com
Stay Tuned on Blue Team Con 2027!
Dungeon Crawler Matt @mattdinniman.bsky.social I write books. I play bass. I have dogs. 
BleepingComputer @bleepingcomputer.com Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Steven Erwin @stevenerwin.bsky.social DFIR things, tweet things, I drink things, I secure things, and I learn things.
apexxor @apexxor.com Cyber dumpster fire marshal, tabletop adventurer, wannabe coffee and whiskey snob, Malort propagandist, new dad, & husband. Follows folks smarter than he/him.
Anton Chuvakin @anton1chuvakin.bsky.social www.chuvakin.org
CTI.FYI @cti.fyi cyber threat intel, for your info
https://cti.fyi
rss feed: https://cti.fyi/rss.xml
Ryan Clarke @nologsnocrime.bsky.social @Defcon604 Admin. @VanCitySec Organizer.
DFIR @Mandiant (@GoogleCloud). He/Him.
vx-underground (automated mirror) @vxundergroundre.bsky.social The largest collection of malware source code, samples, and papers on the internet.
Password: infected
(unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)
Andrew Morris @andrewmorr.is 🔳 founder of @greynoise.io. computers, networks, technology enthusiast. big goober.
Intel 471 @intel471.bsky.social Intel 471 specializes in delivering intelligence related to threat actors, threat hunting, financial cybercrime, ransomware, vulnerabilities, malware and underground marketplaces. Listen to our podcast, Cybercrime Exposed, on Spotify and Apple. #infosec
gab 🇺🇦🇵🇸 @handle.invalid fka @gabbyroncone on twitter. mission tech lead for RU & Eastern European APT ops @Google. views expressed here are mine, not my employer’s. she/her.
John @bigbadw0lf.bsky.social Frontline Intelligence with #AdvancedPractices 🦅 @Google Threat Intel | views are my own
cactuscon @cactuscon.com Arizona's hacker con. CactusCon 14: Feb 6-7, 2026 in beautiful Mesa, AZ. https://cactuscon.com + LinkedIn, X, Mastodon
Wraithmarked Creative @wraithmarked.bsky.social Boutique sci-fi/fantasy publisher ⚔️
Maker of pretty books 📚
Our parents wish we had "real" jobs 🤦♂️
LINKS: linktr.ee/wraithmarked
Nick from Weymouth 🇺🇦🇺🇸 @nicastronaut.bsky.social professional despondent masshole. ⚾🏈🏒
south shore guy.
VIBEINT SME.
reluctant cyber poster. 🦅🛡️
chris! @unauthorized.computer burritosec | he/him 🏳️🌈 | cyber dude | and it only seems so strange right now
Christine @sopooped.bsky.social ☕️🐶🪴
ricky 🎶💜🍄 @0xpsilocyber.com Cloud Security Response @ Google 🕵️♂️
Husband & dog / cat dad 🐕🐕🦺🐈⬛🐈
Gamer & Music nerd 🎵🎮
using this as a music / thought journal, always happy to chat about DFIR or SecOps stuff, dm me.