I'm an infosec person who currently works as the CTO of a security services firm. Have done DevSecOps, Red Teaming, and reverse engineering. I reversed some of the tooling leaked by the Shadow Brokers and spoke about it publicly https://bsky.app/profile/francisck.comhttps://bsky.app/profile/francisck.com/post/3m4jxd6cbx22sI may have gone overboard on the Halloween goodies this year #halloween01 Nov 2025 02:34 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3m4jxd6cbx22shttps://bsky.app/profile/francisck.com/post/3lysvirxg2k2kThis report from @interseclab.bsky.social on how a Chinese company is exporting some of the capabilities of "The Great Wall of China" to other autocratic countries is INSANELY INTERESTING: https://interseclab.org/wp-content/uploads/2025/09/The-Internet-Coup_September2025.pdf *EVERY Page is worth reading* Some interesting tidbits in the thread14 Sep 2025 18:15 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lysvirxg2k2khttps://bsky.app/profile/francisck.com/post/3lyebe35sqs23Plex was hacked. It included usernames, emails, and hashed passwords. Change your passwords when you can, [contains quote post or other embedded content]08 Sep 2025 22:37 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lyebe35sqs23https://bsky.app/profile/francisck.com/post/3lvm2ht2mak2xI mean I’ve been urging people to toss their sonicwall devices into a shredder for years now 🤷🏻‍♂️ [contains quote post or other embedded content]04 Aug 2025 20:39 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lvm2ht2mak2xhttps://bsky.app/profile/francisck.com/post/3lvlrh5eols2dOur team collaborated with our friends at @sentinellabs.bsky.social to identify and disrupt a PXA infostealer campaign that has an intricate and complex delivery chain: https://labs.beazley.security/articles/ghost-in-the-zip-or-new-pxa-stealer-and-its-telegram-powered-ecosystem Thanks for the fantastic collab SentinelLabs team!04 Aug 2025 17:58 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lvlrh5eols2dhttps://bsky.app/profile/francisck.com/post/3lugnhpqtsc2iWe’re actively seeing this exploitation as well. Here is my team’s advisory on this vulnerability: https://labs.beazley.security/advisories/BSL-A1124 Is your have a publicly exposed SharePoint server, its probably already compromised so get ready to do some IR. [contains quote post or other embedded content]20 Jul 2025 23:38 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lugnhpqtsc2ihttps://bsky.app/profile/francisck.com/post/3lsx5uv34v22mWorth turning on if you have AT&T. Other carriers (like T-mobile) have similar programs. [contains quote post or other embedded content]02 Jul 2025 02:24 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lsx5uv34v22mhttps://bsky.app/profile/francisck.com/post/3lqwuc3pe322jThis is related to ROP code exec on switch 2 [contains quote post or other embedded content]06 Jun 2025 12:42 +0000at://did:plc:svsqyeqx3qdvygn2getltemf/app.bsky.feed.post/3lqwuc3pe322j