CTI.FYI @cti.fyi cyber threat intel, for your info
https://cti.fyi
rss feed: https://cti.fyi/rss.xml
EUVD Bot @euvd-bot.bsky.social 🛡️ Unofficial bot posting new entries from the EU Vulnerability Database (EUVD).
🔔 Stay updated on the latest security vulnerabilities.
🤖 Automated • Not affiliated with ENISA or the EU
Maintainer: https://bsky.app/profile/moltenbit.bsky.social
Veli-Pekka Kivimäki @vpkivimaki.bsky.social Intelligence analyst by day, OSINT in academia, engineer at heart. Now: Finnish Security and Intelligence Service. Adjunct, Johns Hopkins. Past: Finnish Defence Forces, Bellingcat, Microsoft, Nokia.
Natalia Antonova🇺🇸🇺🇦 @nataliaantonova.bsky.social Ukrainian-American. Writer. President, Concerned MILFs for America. Safer Dating Now creator. OSINT, but making it girly. Advocate for the glorious Normie Restoration ☀️
Kolina Koltai @koltai.bsky.social Senior investigator & Trainer @Bellingcat.com
Investigating explicit non-consensual deepfakes/AI and disinfo w/OSINT
"I am a doctor, but not that kind of doctor."
OSINT Techniques @osinttechniques.bsky.social https://www.forensicosint.com/
Samir @obretix.bsky.social geospatial IT – OSINT/IMINT
Vern McCandlish @malanalysis.bsky.social A #DFIR, #infosec, #dadjokes, #scifi, #books, #rpg, #ttx, #malware, elder #genx, and #gaming nerd. AKA an elder geek. Retired #leo. Retired from #infosec in #OT now too.
Kindness first is useful but telling off toxic folks is on my response spectrum too.
vx-underground (automated mirror) @vxundergroundre.bsky.social The largest collection of malware source code, samples, and papers on the internet.
Password: infected
(unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)
Arin Waichulis @arinware.bsky.social Security writer covering Apple, malware, and threats @ 9to5Mac + Social media strategy for the entire 9to5Mac network.
Charles @charles.dardaman.com AI | Hacking | Security | Malware | Founder/CTO (acq.) | CS PhD @UT_Dallas
@rootkitranger.bsky.social @rootkitranger.bsky.social Incident Responder at MDR, passionate about geopolitics and space exploration
Adam Harrison @harrisonamj.com Digital Forensic Investigator, Incident Responder, HAM, ambassador for flip-flops and purveyor of fine Dad Jokes. #DFIRFit
Taz Wake @tazwake.bsky.social DFIR & Threat Hunting Professional | SANS Course Author - FOR577 Linux IR Class | Certified SANS instructor | Incident Responder | I have no access to DMs.
Joe Gray aka JOSINT @c3pjoe.bsky.social Threat Intel; Author: @nostarch; 5x Black Badge; Views: my own; https://nostarch.com/practical-social-engineering
Craig Williams @craigwilliams.bsky.social I build threat intel stuff.
Audra Streetman @audrastreetman.bsky.social Threat Intel @ Target
Christopher Vega @thevega.bsky.social I do threat intel things. Former Activision Blizzard // Epic Games. Currently putting the G in 5G. Kinda passionate and extremely okay. Opinions are my own. He/him/#FSD 🦆
Team Cymru - S2 Threat Research @teamcymrus2.bsky.social Follow us for the latest blogs and IOCs from Team Cymru's S2 Threat Research team.
Will T @bushidotoken.net 🇬🇧 | Senior Threat Intelligence Advisor at Team Cymru | Co-author SANS FOR589 | Co-founder Curated Intel
Drunk Binary @drunkbinary.bsky.social Senior Principal Adversary Hunter @dragosinc, Army Veteran,
Cocktail Scientist, APT Researcher | #FSD
https://infosec.exchange/web/@DrunkBinary
https://twitter.com/DrunkBinary
Christopher Glyer @cglyer.bsky.social Microsoft Threat Intelligence Center - Former Incident Responder & Chief Security Architect @Mandiant
Dakota @dakotaindc.bsky.social China-Focused Consultant @SentinelOne | Nonresident Fellow @ACGlobalChina | Adjunct @Georgetown | Unprofessional Cook | ❤️💜💙
https://linktr.ee/dakotaindc
Sergio Caltagirone @intel.bsky.social Georgia Tech Professor. Cyber threat intelligence and cybersecurity professional - former NSA, Microsoft, and Dragos. President of the Threat Intelligence Academy. #FSD 🦆 Formerly @cnoanalysis on Twitter
Eric Hutchins @ehutchins.bsky.social Started in infosec, co-authored the kill chain paper, dabbled in countering influence operations at Meta, and now back to infosec. Lover of command line, python, and rust.
Vas Panagiotopoulos @vaspanagiotopoulos.com Journalist interested in #surveillance | Contributor: @wired.com | @ftm.eu | Covers 🇬🇷 for @rsf.org | Researcher: @deakinuniversity.bsky.social | 2026 Fellow @techpolicypress.bsky.social
☏ Signal: vas.99
http://vaspanagiotopoulos.com
Daniel Gordon @validhorizon.bsky.social Thought Trailer, Cyber Threat Intel, DFIR. He/Him. Bucketing, sharing, and bacon-saving as a service. https://validhorizon.medium.com/
AaronCTI @aaroncti.bsky.social Co-Founder Webamon, Founder @perspectiveintel.bsky.social. Author of Cyber Threat Intelligence: The No-Nonsense Guide for CISOs & Security Managers. Training at Kase Scenarios! Exec/Webinars @osint-community.bsky.social and creator of osintportal.com
SwitHak (👁️) @swithak.bsky.social French Security Analyst (Fmr TelcoSec)
Cyber / Security / Geopolitics & and others.
Personal Account, My opinion!
Lang: ENglish & FRench
Electrospaces.net @electrospaces.bsky.social Insights in Signals Intelligence, Communications Security and Top Level Telecommunications. Also tweeting in Dutch and sometimes in German.
Mick Baccio @nohackme.thruntcon.com Purveyor of Fine Experiences.
Keyboard Cowboy meets Keyboard Cat.
Shitpost Veteran.
President & Chairman, THRUNT®️ Corp.
Julian-Ferdinand Vögele @julianferdinand.bsky.social Threat Research @ Recorded Future. Previously @ Security Research Labs. He/Him. 🏳️🌈
Matthijs R. Koot @cyberwar.nl IT, privacy, security, democracy. PhD. PGP: 51F9 8FC9 C92A 1165 (http://keybase.io/mrkoot). Employed as IT security specialist.
Mastodon: @mrkoot@infosec.exchange
LinkedIn: /in/mrkoot
Jamie MacColl @jamiemaccoll.bsky.social Senior Research Fellow @rusi.bsky.social | Senior Research Associate @virtualroutes.bsky.social | Usually researching ransomware and cybercrime | Sometime indie landfill guitarist
Adam Pennington @whatshisface.bsky.social I lead MITRE ATT&CK. Something something SCUBA diving, cyber. If it’s not about ATT&CK, I speak only for me. He/him.
Ollie Whitehouse @ollieatnowhere.bsky.social CTO at the UK's National Cyber Security Center 
Mark Parsons @mparsons.bsky.social Threat Analyst @ Microsoft - mostly post about astrophotography and occasional some work. Posts are my own
Steve YARA Synapse Miller @stvemillertime.bsky.social threat intelligence @google
writing & sharing on adversary tradecraft, malware, threat detection, ics/ot + cyber physical intel, and of course all things #yara
Nate Beach-Westmoreland @natebeachw.bsky.social Cyber threat analyst focused on state-aligned adversaries. Opinions are my own, not my employer's. #threatintel #infosec #osint
Matthew Kennedy @matthewkennedy.bsky.social Manager at Microsoft Threat Intelligence Center (MSTIC). Adjunct Faculty at Georgetown University. Penn State Alum. Tweets are my own.
Katie Nickels @likethecoins.bsky.social 
tlansec @tlansec.bsky.social Threat Intel @volexity.com n stuff.
London, UK.
Bill Robinson @billrobinson.bsky.social Researcher focused on Canadian SIGINT activities past and present. Also FVEY and other countries. Citizen Lab Research Fellow. Occasionally compared to a hedgehog. He/him.
Blog: https://luxexumbra.blogspot.com/
PJ 🇨🇦 🧬🔬📡💻 🥃 @pj47596176.bsky.social National security, cyber, science & innovation, whisky, and other musings.
Scott J Roberts @sroberts.io Cyber Threat, NatSec, Analytic Tradecraft | Instructor of Cybersecurity @ USU Data Analytics & Information Systems | Masters Student @ USU Center for Anticipatory Intelligence | Developer, Analyst, Author
Alex Lanstein @lanstein.bsky.social threaty threats -- helping build research workflows into a soc product, but I don't speak for them on this acct. pretty good at bash scripts and strings. disclosures on my linkedin below
https://www.linkedin.com/in/alexlanstein/
Ryan Naraine @ryanaraine.bsky.social Three Buddy Problem
https://securityconversations.com
Dr. Dave Venable @davevenable.com Focused on building resilience in democracies | Former U.S. intelligence officer | Chair, @ISRS.ngo | Board director & CISO | TheCipherBrief
techy @techy.detectionengineering.net Creator of Detection Engineering Weekly (https://detectionengineering.net), Sec Research/Intel/Detection @ Datadog
Kamil Bojarski @lawsecnet.counterintelligence.pl #threatintel #dfir #osint #natsec and other secs. Downloading things from the Internet and looking at them. Views are my own Email: kamil@counterintelligence.pl
Alexander Leslie @aejleslie.bsky.social Cybercrime & Hacktivism @ Recorded Future | Insikt Group | Curated Intelligence | @aejleslie everywhere else.
Thomas Brewster @thomasbrewster.bsky.social Forbes senior writer, covering privacy, surveillance and cybercrime. Editor of The Wiretap newsletter, featuring all of the above.
The Hague Program on International Cyber Security @thehagueprogram.bsky.social Applying critical thinking to cyber peace and security issues, a research program part of the Institute of Security and Global Affairs at Leiden University, based in The Hague, the Netherlands.
Bartek Jerzman @handle.invalid Hunting ghosts in wires and boxes, Head of CTI, former NCSC-PL, PL Navy #fightingthreats | @PIVOTcon.bsky.social co-founder & Chief Meme Officer
Binding Hook @bindinghook.bsky.social Expert commentary on emerging tech and security. Send us your article ideas at pitch@bindinghook.com. Project from @VirtualRoutes.bsky.social
Mark Parker Young @markparkeryoung.bsky.social Principal analyst at Google's Threat Intelligence Group. Former Deputy National Intelligence Officer for East Asia and senior nonresident fellow at the Atlantic Council. Views my own.
https://markparkeryoung.net
Alexandra Paulus @alexandrapaulus.bsky.social Researcher for cybersecurity + (defense) tech @swp-berlin.org.
Co-Host Cybernation Podcast.
Currently:
- Harnessing biotechnology for national security
- Holding software vendors accountable for insecure software
- mitigating Europe's US tech dependencies
Jimmy Wylie @mayahustle.com I look for ICS threats, and spend a lot of time reverse engineering.
Distinguished Malware Analyst @ Dragos.
Lead Analyst on TRISIS and PIPEDREAM.
He/Him
Steven Adair @stevenadair.bsky.social President @ Volexity
Wesley Shields @wxs.bsky.social Working at Google TAG. Retired FreeBSD committer. May or may not be a robot.
The Record @therecordmedia.bsky.social Covering the world of cyber and intelligence from every angle.
Andrew [Retired from Sad] @athomashemlock.bsky.social You guys want a drink or something. I think I have diet coke and lemonade and maybe some coffee from this morning.
He/him.
@silviocesare.bsky.social @silviocesare.bsky.social 
Myriam Dunn Cavelty @myducave.bsky.social Senior Scientist, Center for Security Studies, ETH Zürich
Cyber-Security Politics
Co-editor of Contemporary Security Policy
Cristin Flynn Goodwin @cristin.bsky.social All things cybersecurity, incident response, threat Intel, AI, and law. Founded @AdvancedCyberLaw.com after forever @MSFT. Host of @AdvancingCyber.com Podcast on Apple Podcast and Spotify. Mom to humans, dog, and cat. Seeks big mountains and lakes.
Natalie Silvanovich @natashenka.bsky.social Google Project Zero
Alex Blackwell @alexblackwell.bsky.social VGhpbmtlciwgU2FpbG9yLCBSZWRhY3RlZCwgU3B5
Eugenio Benincasa @euben.bsky.social Cyber Defense Researcher @ethz.ch. Former Italian govt, Pacific Forum and NYPD. LUISS & Columbia University Alum.
Monica Kello @monicakello.bsky.social Lecturer in War Studies (Cyber Security) at King's College London. Organising HagueTIX 2025 @haguetix.bsky.social.
Hamid Kashfi @darkcell.bsky.social I do computers @ DarkCell.se / @hkashfi at X
Andrew Thompson @imposecost.bsky.social Head of Research and Discovery @Google Threat Intelligence. Leading multidisciplinary teams to defeat adversaries. Posts are attributable to me—not my employer.
1steve 1stone @stonepwn3000.bsky.social TV/VCR Repair, Bad Guys & Breaches, big Jim Harrison poetry fan 
Tim Stevens @tcstvns.bsky.social Cyber, security, risk, infrastructure, politics | Assoc Prof | Dept War Studies | King's College London | Visiting RUSI UNED RISCS Cnam
David J. Bianco @davidjbianco.bsky.social Threat Hunting, CTI, incident detection & response. Creator of the Pyramid of Pain and lead author of the PEAK Threat Hunting Framework. SANS instructor. Special interest in helping newbies get started. Also happy to talk about other geeky topics. He/Him.
Virtual Routes @virtualroutes.bsky.social Virtual Routes tackles the impact of digital and emerging technologies on global affairs. Also check out @bindinghook.bsky.social, our media outlet.
- P Phil Venables @philvenables.bsky.social
sydney @letswastetime.bsky.social | search "thrunter"
| eval specialty="Purple Team, Treat Hunter, Lifting Heavy Things"
James Shires @jamesshires.bsky.social Co-Director, Virtual Routes (virtual-routes.org)
Managing Editor, Binding Hook (bindinghook.com)
Author of The Politics of Cybersecurity in the Middle East
Dave Aitel @daveaitel.bsky.social 
Joyce Hakmeh @joycehakmeh.bsky.social Deputy Director, International Security, Chatham House
Co-Editor, Journal of Cyber Policy
Andrew Dwyer @andrewdwyer.bsky.social Lecturer @isg-rhul.bsky.social | Geopolitics and Cyber Security | Writing a book on computation and geopolitics | Lead @ Offensive Cyber Working Group
Tim Starks @timstarks.bsky.social Senior reporter, CyberScoop, covering spyware, cyber policy and more. Russia-sanctioned. Former Washington Post, POLITICO, CQ Roll Call. @timstarks.02 on Signal. tim.starks@cyberscoop.com. Mastodon timstarks@infosec.exchange, X timstarks, Threads tstarks2.
Maggie Miller @maggiemiller.bsky.social Cybersecurity reporter for Politico based in DC. Also history, dog, and good TexMex taco nerd.
mmiller@politico.com, DM for Signal
Julien Nocetti @jnocetti.bsky.social Associate Fellow IFRI & GEODE
PSIA Sciences Po
Global cyber, Internet, AI politics + Russia
Joe Tidy BBC News @joetidy.bsky.social Cyber Correspondent, BBC News. Author of Ctrl+Alt+Chaos. I cover cyber security, online safety, crypto, AI, social networks and everything 💻📱📡. Global news mainly. DMs always open for tips/ feedback.
Dustin Volz @dustinvolz.bsky.social Washington correspondent for The New York Times focused on cyber conflict, digital espionage and intelligence. Prior stops at WSJ, Reuters, National Journal. https://www.nytimes.com/by/dustin-volz
hakan @hatr.bsky.social reporter covering cyber (both crime and state-sponsored) for Der Spiegel and ZDF, short overview at https://linktr.ee/hakantanriverdi, Signal: hakan.25
Active Measures, LLC @activemeasures.bsky.social Active Measures, LLC is a full service research and writing firm. For details see activemeasuresllc dot com or reach out to walkin [at] activemeasuresllc [dot] com.
Cynthia Brumfield @metacurity.com DC resident and cybersecurity writer, analyst, book author, publisher. https://metacurity.com/ https://cyberriskbook.com/
https://www.csoonline.com/profile/cynthia-brumfield/ https://infosec.exchange/@metacurity
Send tips to Cynthia.507 via Signal.
Joe Devanny @joedevanny.bsky.social Senior Lecturer | National Security & Cyber | Department of War Studies | King’s College London | All views mine, etc.
Mei Danowski @meidanowski.bsky.social Threat Intelligence Researcher. Co-founder of Natto Thoughts.
https://www.nattothoughts.com/
Stéphane Taillat @staillat.bsky.social Assoc. Prof (MCF HDR) French Institute of Geopolitics/Univ. Paris 8 & AMSCC. Member GEODE
IR/Strat. Studies. Pols de cybersécurité. Post 9/11 US National Security/Foreign Pol.
Auteur: De la cybersécurité en Amérique (PUF, 2024)
La cyberguerre (QSJ,2026)
Louise Marie Hurel @lmhurel.bsky.social Tech, Cyber diplomacy, Norms etc.
Cyber at @rusi.bsky.social & among other things.
Jazz and personal views only.
Personal website: www.louisemariehurel.com
Contemporary Security Policy journal @cspjournal.bsky.social CSP publishes theoretically-based research on policy problems of international security.
It encourages novel contributions, not particular methodologies or policy goals.
Our aspiration: 🌎🌍🌏
Editors: Myriam Dunn Cavelty, Nicole Jenne, Yf Reykers
Catalin Cimpanu @campuscodi.risky.biz ☆ Cybersecurity reporter
★ Newsletters at Risky Business
#infosec #cybersecurity
https://risky.biz
Alex Rudolph @cyberincontext.ca I research Canadian cyber defence policy, focusing on CAFCYBERCOM.
Carleton University PhD(ABD): State behaviour in cyber conflict. (Cyber force structure & doctrine)
CGAI & NAADSN Fellow. Cyber Yeoman.
I run Canadian Cyber in Context: cyberincontext.ca
Jurre van Bergen @jurrevanbergen.nl Exposing the baddies - Here's how to contact me securely: https://gist.github.com/DrWhax/61978d4e7df5291d4cf308f10dc20d5a
ransomNews @ransomnews.online Decoding #ransomware groups since before Bitcoin existed.
Deep threat intel for defenders who actually read the tech writeups.
🔗 ransomNews.online
💼 linkedin.com/company/ransomnews
Joseph Lorenzo Hall, PhD @josephhall.org Astrophysicist turned advocate; guiding the globe to a safer, stronger Internet. Distinguished Technologist @internetsociety.org, https://josephhall.org/, (former CDT, NYU, Princeton CITP, Berkekey iSchool/Astro)