Security ops engineer and investigator @ DomainTools, writer, voracious reader. he/him. Opinions here mine only. Autistic/depressed/anxious/hungry. https://dti.domaintools.comhttps://bsky.app/profile/neurovagrant.bsky.socialhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwyfjk6iik2cReuters: ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say #cybersecurity #infosec https://www.reuters.com/world/middle-east/key-shinyhunters-hacker-detained-jordan-is-cooperating-sources-say-2026-10-03/03 Oct 2026 17:20 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwyfjk6iik2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwwjax2kec2c02 Oct 2026 23:22 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwwjax2kec2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwwizhcv722cI've said it before, I'll say it again: you are defined by how you treat your people. Treat them well. That's not a request or suggestion, but an imperative.02 Oct 2026 23:18 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwwizhcv722chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwv6yp4cok2wis it friday yet02 Oct 2026 10:46 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwv6yp4cok2whttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwqcirbd522hOOH OOH OOH OOH Satisfactory just announced its first paid DLC, "Core Values" No date yet, short trailer is up though. Go wishlist. I WANT TO GIVE THEM MY MONEY NAO PLZ.30 Sep 2026 12:05 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwqcirbd522hhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwp2udojtc2wHeard a great quote the other day that I think we should amplify: "Windows is the Flock camera of operating systems."30 Sep 2026 00:16 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwp2udojtc2whttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwodssqrc22hHad to dig it up for a Signal group so I'll drop it here too. If you haven't read the Reddit thread about the sysadmin who discovered the entire prod system ran out of a 500TB Dropbox that everyone had read/write access to, block off some time in your calendar: https://www.reddit.com/r/sysadmin/comments/eaphr8/a_dropbox_account_gave_me_stomach_ulcers/29 Sep 2026 17:23 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwodssqrc22hhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwnxsvtkcs2yThought the MacOS 27 update killed my Macbook air for a minute. Macbook was on the black Apple/progress bar screen and stuck around 80% through the night while updating. Powercycled it this morning and it came up fine on 27. whew.29 Sep 2026 13:48 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwnxsvtkcs2yhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwe5j3j7ts2nSo I love the horror genre and resonate with it on a deeply philosophical level, but the new Silent Hill: Townfall game requires you to deal with OT/ICS/SCADA technology and that is simply taking horror too far.25 Sep 2026 16:04 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwe5j3j7ts2nhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwbfb6sixc2nHey folks, maybe add 1password-login[.]com to your blocklists immediately. Newly observed about an hour ago. Also check out its nameservers and IP pivot: bitwarden-vault[.]org yesterday, fortivpn[.]download recently, a LOT more badness.24 Sep 2026 13:44 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwbfb6sixc2nhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mwa7otyhxs2nHumbled to have been presented @domaintools.bsky.social "Bad Actors Badger" Award this evening! Truth is, I am only the last mile, and can't do it w/o everyone in the chain - every bit of dev, every doc, every sale, every customer, we're all badgers. We are the adversaries - let's never let up.24 Sep 2026 02:32 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mwa7otyhxs2nhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mw7sbjnhjc2kHas anyone written a "Who's on first?" routine about DNS yet? "What're you looking at?" "A record." "Yes I know it's a record, what is it?" "A record that seems to be a C2 domain." "Okay whatever, now you're just making up things with letters and numbers. Where is this C2 stuff?"23 Sep 2026 22:32 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mw7sbjnhjc2khttps://bsky.app/profile/neurovagrant.bsky.social/post/3mvxpyowcdc2z"Looking at alerts" killed me. Filched from elsewhere.20 Sep 2026 17:30 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mvxpyowcdc2zhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mvxc4tjac22yEeeeenteresting. https://www.bellingcat.com/news/2026/09/19/christy-kinahans-uae-residence-visa-cancelled/20 Sep 2026 13:22 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mvxc4tjac22yhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mvsnvlh2kc2zCVS, I think you missed the word "vaccine" unless our relationship has changed in a deeply significant manner...18 Sep 2026 17:09 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mvsnvlh2kc2zhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mvsmzrl6z22zGreat article on disrupting TeamPCP. Props to Larsen, GTIG, and anyone else involved. https://www.wired.com/story/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang/18 Sep 2026 16:54 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mvsmzrl6z22zhttps://bsky.app/profile/neurovagrant.bsky.social/post/3mviplv4r2c2kUpdated the @ifin@infosec.exchange thread here. Blackfile-suspected list (attached) up to 59. Medium-high confidence. Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively. https://ifin.network/t/blackfile-related-emerging-domains/826/9?u=neurovagrant14 Sep 2026 18:13 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mviplv4r2c2khttps://bsky.app/profile/neurovagrant.bsky.social/post/3mv6ad2pavc2cUK - Anduril - Security Operations Analyst https://job-boards.greenhouse.io/andurilindustries/jobs/5222558007?gh_jid=522255800710 Sep 2026 14:13 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mv6ad2pavc2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mv5vm7ojqk2cOne of the lessons I have to continue learning and re-learning is to carve out distinct blocks of time to focus on priorities. Task-switching like a mad grasshopper only leads to more jumping around like a mad grasshopper. 30 years of employment in Mad-Grasshopper-as-a-Service is hard to unlearn.10 Sep 2026 11:01 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mv5vm7ojqk2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mv4j3ce3n22cImagine getting a C&D from a municipal attorney to stop profiting from AI-generated child sexual abuse material and your strongest argument being jurisdiction of where the CSAM-generators were advertised. [contains quote post or other embedded content]09 Sep 2026 21:44 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mv4j3ce3n22chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mv4fvlvl3k2cirregular reminder: I care much less about your choice to devalue your product with AI slop and much more about how you treat the humans in the loop. If you find yourself at a crossroads about which to value, you have already gone too far, and it is time to find your way back.09 Sep 2026 20:47 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mv4fvlvl3k2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3mv4at4wa7c2cSeeing a few places go loud with Blackfile-related domain lists, most of which are missing multiple entries. Dropped two CSVs over at @ifin-intel.org - 32 domains associated with Blackfile with high confidence, and a larger list of domains observed while hunting. https://ifin.network/t/blackfile-related-emerging-domains/82609 Sep 2026 19:17 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3mv4at4wa7c2chttps://bsky.app/profile/neurovagrant.bsky.social/post/3muzark3tf22cTIL Hunter Biden is launching a memecoin called "Laptop" themed after his laptop that was seized and then became a focus in the last weeks of the 2020 US presidential race. i hate this timeline.08 Sep 2026 14:38 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3muzark3tf22chttps://bsky.app/profile/neurovagrant.bsky.social/post/3muotulopfs2lme: it's so nice to have today and monday off also me: but think of all the work i could get done if i sign in even earlier than usual today and just push through it like a legend04 Sep 2026 11:20 +0000at://did:plc:5oej2vum42qalvecfspsupmb/app.bsky.feed.post/3muotulopfs2l