Pinned Tweet
This week, we released the first domain extension for the D3FEND Ontology, Operational Technology. D3FEND 1.3 has additional goodies. 🧵
1
1
7
255
Peter Kaloroumakis retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,304
10,844
70,336
12,460,467
Peter Kaloroumakis retweeted
Or, defense has to provide a layered system that the attacker doesn't know about. Goes both ways. I agree with this btw, just saying we can flip that script also.
Attackers only have to get it right once. Defenders have to get it right every time.
At #HumanX, @nikesharora explains why that imbalance and vulnerabilities across enterprise infrastructure will drive a major IT overhaul in the years ahead.
16
13
104
9,886
Peter Kaloroumakis retweeted
The Department of War has commissioned the @MITREcorp, a nonprofit that leads Federally Funded Research and Development Centers (FFRDCs), to execute PROJECT MERIDIAN.
MITRE’s National Security Engineering Center FFRDC will manage and direct the completion of the project, ess, policy, and technology experts to assess the capabilities, emerging technologies, and operational concepts needed to sustain U.S. military advantage across next-generation warfighting domains.
MITRE will author and deliver an independent, unclassified final report, not to exceed 30 pages, with classified annex(es) at the conclusion of the 120-day project period.
PROJECT MERIDIAN: THE FUTURE OF WARFARE
MITRE’s National Security Engineering Center FFRDC will manage and direct the completion of the project, ess, policy, and technology experts to assess the capabilities, emerging technologies, and operational concepts needed to sustain U.S. military advantage across next-generation warfighting domains.
MITRE will author and deliver an independent, unclassified final report, not to exceed 30 pages, with classified annex(es) at the conclusion of the 120-day project period.
PROJECT MERIDIAN: THE FUTURE OF WARFARE
91
348
1,316
101,815
Peter Kaloroumakis retweeted
Your annual Donald Rumsfeld IRS Tax Day Letter appreciation post.
128
1,197
7,426
765,999
Peter Kaloroumakis retweeted
‼️Do not npm install or deploy anything right now
Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.
Pin versions or wait until this is resolved
Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.
Pin versions or wait until this is resolved
@npmjs @GHSecurityLab there is an active supply chain attack on axios@1.14.1 which pulls in a malicious package published today - plain-crypto-js@4.2.1 - someone took over a maintainer account for Axios
161
1,750
8,828
1,639,902
With all this vibe coding will someone please build an alternative to Facebook marketplace 😭
0
0
4
78
Peter Kaloroumakis retweeted
Prediction: In less than 90 days, all channels that we thought were safe from spam & automation will be so flooded that they will no longer be usable in any functional sense: iMessage, phone calls, Gmail.
And we will have no way to stop it.
And we will have no way to stop it.
3,312
1,596
23,146
9,696,810
Peter Kaloroumakis retweeted
best time to buy a mac mini
is 3 weeks from now on reseller marketplaces
is 3 weeks from now on reseller marketplaces
92
109
4,691
239,176
Peter Kaloroumakis retweeted
Seeking hardcore engineers & designers to fix the most broken user experiences on Earth
Apply at ndstudio.gov
Apply at ndstudio.gov
78
130
1,132
400,319
@noodlesinspacex @bbreisch26 @wikipunk Another feature of pathfinder is to verify all the edges of the graph and interpolate missing nodes.
1
0
3
82
@noodlesinspacex @bbreisch26 @wikipunk We also have a getting started guide for D3FEND for OT, big shout out to the amazing @holtorama for all of her hard work on the OT content. It is not easy to build a unified technology ontology!
d3fend.mitre.org/blog/getting-s…
d3fend.mitre.org/blog/getting-s…
0
0
6
82



















