The Coalition of Cyber Investigators @coalitionci.bsky.social The Coalition of Cyber Investigators is a collaboration between
Paul Wright (United Kingdom) and Neal Ysart (Philippines)
www.coalitioncyber.com
We explore:
OSINT | Investigations | Cybercrime | Digital Forensics | Evidence | Ethics | Integrity
Mathieu Gaucheler @shibasec.bsky.social OSINT and cybersecurity. SME at Maltego.
Maltego machines / custom Transform / Talks in my GitHub: github.com/shibaOSINT/MaltegoMachines
Medium: medium.com/@shibaosint
UK OSINT Community @osint-community.bsky.social #OSINT community building and fostering local OSINT capability within the UK.
Espen R (Zewensec) @zewensec.bsky.social OSINT Analyst ⌁ Co-founder and owner @kasescenarios ⌁ Former Community Manager @osintcurious ⌁ Honorary Sensei @osintdojo
@Zewensec on Twitter
UNISHKA @unishka.bsky.social An Alaska-based consulting and research organization with a global reach, dedicated to fighting corruption. Sharing educational content on anti-corruption and OSINT research.
Ginger T @cqcore.bsky.social OSINT | OPSEC | Obfuscation | Privacy | Infosec | Digital Exposure Risk, Enthusiast & Blogger.
(Opinions and posts are my own)
Blog https://www.cqcore.blog
GitHub https://github.com/The-Osint-Toolbox
The-OSINT-Toolbox https://the-osint-toolbox.com/
The Cyber Show UK @cybershowuk.bsky.social Cybersecurity podcast with top guests, events & banter on Dignity, Education, Surveillance State, Tech, Art, AI, Technofascism & more!
Website: cybershow.uk
YouTube: youtube.com/@cybershowuk
Spotify: open.spotify.com/show/0av5zTSOSIuBBtOjqjJWFc
Taggart @taggart-tech.com @mttaggart@infosec.exchange. Displaced Philly boy. Executive Director of @ifin-intel.org. Threat hunter. Educator. Dad. General in the AI Resistance.
taggartinstitute.org
wtfbins.wtf
linktr.ee/mttaggart
Corey Quinn @quinnypig.com Snarkmonger. Chief Cloud Economist at The Duckbill Group.
he/him.
Get my opinionated take on AWS news: http://lastweekinaws.com/t/
Signal: 833-AWS-BILL (833-297-2455)
Ryan Naraine @ryanaraine.bsky.social Three Buddy Problem
https://securityconversations.com
Kyler Middleton @letsdodevops.com Cloud Security Chick | LetsDoDevOps.com | Microsoft MVP (DevOps) | AWS Community Builder x3 (AI Engineering)| Day Two DevOps Podcast Host | Former Hashi Ambassador | Open Source Zealot
Jake Creps @jakecreps.bsky.social OSINT researcher
Jack Rhysider @jackrhysider.bsky.social Creator of Darknet Diaries.
Verification: https://twitter.com/JackRhysider/status/1675298532406984707
Justin Seitz @justinseitz.bsky.social Bullshit Hunter. Misidentified beet farmer. Fiery advocate. Neurospicy. Saskatoon, Saskatchewan prairie dweller. He/Him.
Find my work at bullshithunting.com
AWS Cloud Security Weekly @aws-cloudsec.bsky.social http://aws-cloudsec.com/about
Patrick Gray @patrick.risky.biz https://risky.biz/
Tom Uren @tom.risky.biz Author of the Seriously Risky Business cyber security newsletter
LimaCharlie @limacharlie.io Security tools and infrastructure on-demand. Use LimaCharlie to automate and manage security operations at scale.
Christopher Luft @tekgrunt.bsky.social Co-Founder @LimaCharlie.io | Host of The Cybersecurity Defenders Podcast
I am interested in computer science, art & growing my own food. Working to disrupt the way cybersecurity tools and supporting infrastructure are delivered.
Johannes Ulrich @joe-ulrich.bsky.social Seit über 25 Jahren beruflich in Bereichen Energieabrechnung, Energiedatenmanagement & Oracle Datenbanken tätig.
VzBgm. Marktgemeinde Gössendorf (GU). Statistik-Nerd.
Blog julrich.at
Öffentlichkeitsbeauftragter Freiwillige Feuerwehr Gössendorf
Sherrod @sherrod.bsky.social It’s me. Sherrod DeGrippo 
John Hultquist @hultquist.bsky.social Mandiant Intelligence at Google. CYBERWARCON and SLEUTHCON founder. Johns Hopkins professor. Army vet.
Kevin Beaumont @doublepulsar.com cybersecurity weather man. scanning the horizons for cloudy cyber. Expert at nothing except computer rubbish. Anti-ransomware since 2015.
Marc Rogers @cjunky.bsky.social Ramblings of a Mad Englishman: Hacker @ BBC's Real Hustle & Mr Robot. Head of Sec @ DEF CON. Founder @ CTI-League, Ransomware Taskforce, w00w00, CDC NSF, (He/Him).
Also
Twitter @marcwrogers
Mastodon cj@chaos.social
Lesley Carhart @hacks4pancakes.com I am eminently qualified to speak from experience about a variety of dumpster fires.
ICS DFIR at Dragos, martial artist, marksman, humanist, level 14 Neutral Good rogue, USAF retired. I post *very serious* things about infosec. Thoughts my own. Enby. 🏳️🌈
Jake Williams @malwarejake.bsky.social Breaker of software, responder of incidents, IANS Faculty, VP R&D Hunter Strategy.
Marcus Hutchins @malwaretech.com threads.com/@malwaretech
https://linkedin.com/in/malwaretech
https://marcushutchins.com
Costin G. Raiu @craiu.bsky.social Romanian antihacker from another planet. #threatintel #yara #chess #taekwondo black belt
Motto: "One reboot a day keeps the implant away"
Will T @bushidotoken.net 🇬🇧 | Senior Threat Intelligence Advisor at Team Cymru | Co-author SANS FOR589 | Co-founder Curated Intel
Tom Hegel @hegel.bsky.social Hunting nation-state threats, and bending intelligence tech to shape real-world outcomes.
Beau Woods @beauwoods.com hack all the cybers
Silas Cutler @silascutler.bsky.social You may know me from your server logs.
#Malware, Hacks, Internet Scanning, #CTI
J. A. Guerrero-Saade (JAGS) @jags.bsky.social VP of Intelligence and Security Research, Senior Technical Fellow (AI) @ SentinelOne.
Distinguished Fellow and Adj Professor @ Hopkins SAIS Alperovitch Institute. Three Buddy Problem Co-Host. LABScon Founder, Cyber Paleontologist, Fourth-Party Collector.
Joe Slowik @pylos.co Threat Intel / CTI / OT / ICS / Critical Infra stuff along with other things. I genuinely care, and wish others did too.
Website: pylos.co
Training/Consulting: paralus.co
Allison Nixon @nixonnixoff.bsky.social Chief Research Officer @ Unit 221B
most reliable way to reach me is my company's outreach form on the website
my other urls:
https://infosec.exchange/@nixonnixoff
https://www.linkedin.com/in/allison-nixon-81822124/
don't bother contacting me on twitter
Joe Roosen @jroosen.bsky.social SpyCloud - Director of Security Research, Cryptolaemus Coordinator, Emotet(Ivan)/QBot(Boris) Destroyer, gold prospector & former sysadmin.
CYBERWARCON @cyberwarcon.bsky.social CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities.
cyberwarcon.com
Jamie Levy 🦉 @gleeda.bsky.social @volatilityfoundation.org Core Dev | Art of Memory Forensics co-author | DFIR trainer and enthusiast | Director of Adversary Tactics @huntress.com
John Hammond @johnhammond.bsky.social Hacker. Friend. Cybersecurity Researcher at Huntress.
SLEUTHCON @sleuthcon.bsky.social Tickets for 2026 are now available!
https://www.sleuthcon.com
tuckner @johntuckner.me Working on finding bad software extensions.
Andrew Case @attrc.bsky.social Volatility Core developer, Dir. of Research Volexity, LSU Cyber
Nicole Hoffman @threathuntergirl.bsky.social Friendly Neighborhood CTI Analyst | Children’s Book Author | Lego builder | Gamer | She/Her
AaronCTI @aaroncti.bsky.social Co-Founder Webamon, Founder @perspectiveintel.bsky.social. Author of Cyber Threat Intelligence: The No-Nonsense Guide for CISOs & Security Managers. Training at Kase Scenarios! Exec/Webinars @osint-community.bsky.social and creator of osintportal.com
Phil Stokes ⫍🐠⫎ @philofishal.bsky.social macOS security researcher espousing no one's opinions but my own. Dogged follower of #lufc, at least until the world stops going round (IYKYK).
philastokes.com
PIVOTcon @pivotcon.bsky.social Threat Research Conference in Malaga, Spain, 6-8 May 2026
#StayTuned #ComingSoon #PIVOTcon #PIVOTcon26
https://pivotcon.org
Alex Delamotte @alex.leetnoob.com I’m just a girl who lives in Vegas & likes cloud malware, idk anymore.
Christopher Peacock @securepeacock.bsky.social I find weird things on networks.
#PurpleTeam | Ex Raytheon MSSP, SCYTHE, & GD | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious.
Katie Knowles @siigil.bsky.social Security Researcher @ Datadog. 🐶 Head in the (Azure) clouds.
Sometimes blogging, always curious. Aim to be, rather than to seem.
Blogs at https://kknowl.es.
signalblur📡🛸 @signalblur.bsky.social Cloud Security Researcher
Founder of https://magonia.io
#Cloud #Container #NSM #Malware #CTI #ThreatIntel
UFO Enthusiast
Opinions are my own. He/Him
Christophe Tafani-Dereeper @christophetd.fr Cloud and container security • Security research and open source at Datadog
🇨🇭🇫🇷
https://christophetd.fr
Greg Foss @gregfoss.com Security Research Leader @ Datadog
Views are strictly my own
Matthew Conway @mattreduce.com 🔍 Threat Intelligence @ Remitly
✍️ CTI newsletter and blog @sourcesmethods.com
mthcht @mthcht.bsky.social Threat Hunting - DFIR - Detection Engineering
🐙 https://github.com/mthcht
🐦 https://x.com/mthcht
📰 https://mthcht.medium.com
Kostas @kostastsale.bsky.social Running ➡ http://defendpoint.ca | http://edr-telemetry.com | https://edr-comparison.com/ | http://detectionstream.com | 🇬🇷🇨🇦
Hexacorn @hexacorn.bsky.social Red Brain, Blue Fingers
Malware Analysis, Reverse Engineering, Threat Hunting, Detection Engineering, DFIR, Security Research, Programming, Curiosities, Software Archaeology, Puzzles, Bad dad jokes
https://www.hexacorn.com/blog/
hexacorn@infosec.exchange
AJ King @ajking.io Threat Research at SnapAttack now part of Splunk now part of Cisco / Detection Engineering / Dad | #DetectionEngineering #ThreatHunting #PurpleTeam | Header art from http://art.vx-underground.org.
Matt Hand @matterpreter.bsky.social Director of Security Research at Prelude💜 | Author of Evading EDR http://nostarch.com/evading-edr 📖 | Security research & windows internals 🦠
Jason Trost @jason-trost.bsky.social Senior Staff Engineer at Databricks focused on Threat Detection / Security / ML / Data. Formerly Dept of Defense, Booz Allen, Endgame, Anomali, CapitalOne , HSBC
Selena Larson @selenalarson.bsky.social loves dogs, sports, memes. she/her. podcaster. "bluesky's humblest resident nailfluencer 💅" - Jerry
my heart is in the west 🌵🌊 views mine.
David Oxley @oxley.io Senior leader for detection and response at Anduril Industries. @CitizenLab.ca Research Fellow. Former federal agent. Fan of space, books, cyberpunk, sci-fi, espionage history, and storms. Personal account. 🇺🇸 🇺🇦 🇹🇼 #ThreatIntel
Storm chasing 📸 🌪️: @wxdox.com
Nate Warfield @n0x08.bsky.social Network Security | Hacker | WIRED25 2020 | CTI-League Founder | Security Researcher
Rory McCune @mccune.org.uk Security geek, Containers, Kubernetes, Golang/Ruby, hillwalking
Home Page :- https://www.mccune.org.uk
Blog:- https://raesene.github.io
Matt Johansen @mattjay.com Friendly neighborhood cybersecurity guy | expect infosec news, appsec, cloud, dfir. | Long Island elder emo in ATX.
vulnu.com <- sign up for my weekly cybersecurity newsletter
Rich Mogull @rmogull.com Cloud security, hacker, run/bike/drown, TK11940 in the 501st, itinerant disaster paramedic, private pilot, and other stuff. @rmogull on Signal
Chief Analyst at CSA. CEO of Securosis. Both totally made up titles.
https://slaw.securosis.com
Myrtus @malwareindepth.com Malware Researcher | Developer | @Cryptolaemus1
| @NVIDIA
Will happily talk about malware with anyone.
Katie Nickels @likethecoins.bsky.social 
Blove @b-levene.bsky.social Head of Threat Informed Defense @Google
Cybercrime Specialist
Adjunct Professor at Johns Hopkins School of Advanced International Studies Alperovitch Institute
Meme Fiend
Aka “BLove”
Austin Larsen @handle.invalid Principal Threat Analyst - Google Threat Intelligence Group
Steve YARA Synapse Miller @stvemillertime.bsky.social threat intelligence @google
writing & sharing on adversary tradecraft, malware, threat detection, ics/ot + cyber physical intel, and of course all things #yara
Ryan McGeehan @mag00.bsky.social Security person. Formerly @ Federal Reserve, FB, Coinbase.
See Starting Up Security @ http://scrty.io
Anton Chuvakin @anton1chuvakin.bsky.social www.chuvakin.org
Jorge Orchilles @jorgeorchilles.bsky.social SANS Principal Instructor & Author #SEC565 | #RedTeam | #PurpleTeam | #PenTest | #C2Matrix Creator | ATT&CK & Atomic Red Team Contributor | Published Author
Nathan Burns @n-burns.bsky.social Senior Detection Engineer and Threat Hunter @ Autodesk
https://medium.com/@nburns9922
Opinions are my own (of course)
Brendan Chamberlain @infosecb.bsky.social Threat Detection Engineer @ Klaviyo | Detection & Response | Security Automation | macOS Security | Maintainer of awesome-detection-engineering, LOOBins
infosecb.com
https://github.com/infosecB
HGB @hgb.crowstrike.zip DE&TH
I like playing with malware, writing Sigma rules, and hoarding combo lists.
SwiftOnSecurity @swiftonsecurity.com computer security person. former helpdesk
Whitney Champion 🍪 @whit.zip security architect / co-founder @digitaldefenseinstitute.com / co-founder Recon InfoSec
♥♥♥ == @eric.zip, nerdery, rainbows, sweatpants
she/her | mama of 3 | 🤍🙏🌿🌈🍄
unicorns.lol
https://short-stack.net
whitneychampion.com/portfolio
Jonny Johnson @jonny-johnson.bsky.social Principal Windows Security Researcher @HuntressLabs | Windows Internals & Telemetry Research
Phillip Wylie @phillipwylie.bsky.social Offensive Security Professional | Phillip Wylie Show Podcast Host | The Pentester Blueprint coauthor | TribeOfHackers Red Team | https://linktr.ee/phillipwylie
Nick Frichette @frichetten.com Staff Security Researcher @datadoghq | DEF CON/Black Hat USA main stage speaker | he/him | OSCP OSWE | I turned hacking AWS into a career | Tweets are my own | Created https://hackingthe.cloud
alden @re.wtf malware enjoyer • macOS security
https://alden.io
DPRK CERT @dprkcert.bsky.social Official Computer Emergency Response Team (CERT) for the Democratic People's Republic of Korea
#NorthSide #NorthKoreaBestKorea
Lennart Koopmann @lennart.0x58ed.com Building @nzyme.org // Leichtes Wirkmittel 30+
Houston, TX, USA
KJ5KRF
pancak3 @handle.invalid https://trac-labs.com
cyber go brrr
Amitai Cohen🎗️🤟 @amitaico.bsky.social personal website @ cloudcurio.us ✦ researching @ Wiz Security (threats.wiz.io) 🐞 maintaining @ cloudvulndb.org 🎙️ podcasting @ cryingoutcloud.io 🗺️ pivoting @ Pivot Atlas (gopivot.ing)
Nasreddine Bencherchali @nasbench.bsky.social Detection @Splunk | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Florian Roth @cyb3rops.bsky.social Placeholder profile : https://x.com/cyb3rops | glad to be in this respectful safe space | vi/vim
techy @techy.detectionengineering.net Creator of Detection Engineering Weekly (https://detectionengineering.net), Sec Research/Intel/Detection @ Datadog
Antisyphon Training - Powered by BHIS @antisyphontraining.bsky.social Affordable and accessible cybersecurity training that doesn't suck.
Featuring cybersecurity practitioners, former SANS instructors, and industry recognized leaders from all over the world.
https://www.antisyphontraining.com
vx-underground (automated mirror) @vxundergroundre.bsky.social The largest collection of malware source code, samples, and papers on the internet.
Password: infected
(unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)
Mehmet Ergene @cyb3rmonk.bsky.social https://academy.bluraven.io
Threat Hunting & Research, Detection Engineering | Microsoft Security MVP
#KQL #DFIR #DataScience
All is one.
Opinions are my own
http://posts.bluraven.io
https://github.com/Cyb3r-Monk/Threat-Hunting-and-Detection
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com Recorded Future - Ransomware Researcher
Owner @greenarcher.io - Yours Truly, Johnny Dollar | The Press Guardian | The Clock | The Green Archer
Weird mix of security, comics, photography and wine!
www.greenarcher.io
Datadog Security Labs @securitylabs.datadoghq.com Read our Security Labs blog: https://securitylabs.datadoghq.com
Subscribe to our monthly newsletter: https://securitylabs.datadoghq.com/newsletters/
Black Hills Information Security @bhinfosecurity.bsky.social Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
blackhillsinfosec.com & poweredbybhis.com
Best of r/cybersecurity @cybersecurity.page Automatically summarizes the hottest posts on r/cybersecurity, with a 'less is more' philosophy, so you can stay up-to-date wherever you are. Uses open source LLMs.
Operated by @tweedge.net, bot code @ https://github.com/r-cybersecurity/best-of-bot
Eric Capuano @eric.zip - Dad of two <3
- Co-founder Recon InfoSec
- SANS DFIR Instructor
- BlackHat Trainer
- IANS Faculty
- Trainer @digitaldefenseinstitute.com
- Blog: https://blog.ecapuano.com
- ⬡ ODESZA, Lane 8, Kasbo 🎧
- ❤ @whit.zip
Bluesky @bsky.app official Bluesky account (check username👆)
Bugs, feature requests, feedback: support@bsky.app