FinTech startup to £105 million acquisition. Now I make stuff and help people with cyber security.
UK
Joined November 2008
- Tweets175
- Following498
- Followers260
- Likes976
Craig Hays retweeted
Hi folks, I’ve posted a short You Tube film I made of my homecoming the other day. It’s roughly edited but gives a flavour of the specialness of the moment.
Nick LifeAfloat Homecoming - 28th August 2023 youtu.be/_IGp3c0jKZ4?si=YKXg… via @YouTube
Craig Hays retweeted
@GrimArtGroup Wallsend, Newcastle 1960s I think. That’s insane but was the norm at the time. If someone knows the street….
Anyone know any single person cybersecurity companies that aren't just consultants selling their time to other organisations? Looking for new people to follow here
Craig Hays retweeted
Every top bug bounty hunter has at least a couple crazy reports they can't talk about.
One of the most exciting things you can expect from Critical Thinking is walk-throughs of these sick bugs in as much detail as can be exposed without breaking NDAs.
I'm looking at some 🔥 rn
Craig Hays retweeted
here’s a playlist especially for you, security leaders: spoti.fi/3SgALs1 #InternationalPodcastDay @ScottBVS @sisinerd @JoeNocera_PwC @DebbieDataDiva @CraigHays
Craig Hays retweeted
I hope you don’t mind my blatant self-promotion. A month ago I published my first book. Read it & have an opinion? I be delighted for your review. Strong Winds Are Forecast: A solo, 1850 mile journey by sea kayak, to every lifeboat station around Scotland. amzn.eu/d/2FfGyBm
The inspiring @LifeAfloat just set off on a 12 month kayaking trip around the beautiful coast of Scotland. Here he is a month ago solo paddling 20 miles each way to the Isle of Man and back again!
youtu.be/meqNoEWdhZQ
Craig Hays retweeted
Well, this is it folks. Almost the moment of departure. I’m not sure what to say, except thank you for your warmth and support. I’m looking forward to sharing my journey with you. See you later. 😊 #scotland365
Craig Hays retweeted
Last night, I got Apache Guacamole published through Azure Application Proxy to share some of my lab machines in a test tenant, and it's so dang cool
RDP and SSH right in the browser, no Remote Desktop Services licensing (or crazy farm configuration and certs)
Loving this :)
My bug bounty writeup on pre-account takeover by reverse engineering a token generation algorithm was mentioned in this article by @msftsecresponse!
Want to learn how to mitigate "Pre-hijacking Attacks" on Web User Accounts? Take a look at the research paper by @sudoavi and @ajpaverd that will be presented at #usesec22. Learn more at msft.it/6013bryXU.
Craig Hays retweeted
New documents for the Okta breach: I have obtained copies of the Mandiant report detailing the embarrassing Sitel/SYKES breach timeline and the methodology of the LAPSUS$ group. 1/N teapaw.org/BillDemirkapi/status/1…
Good RBAC guide for setting up Azure Sentinel while following the principles of least privilege azurecloudai.blog/2020/11/30…
Just had a call centre try to phish my amazon account by entering my phone number here, then phoned me with a solid script to ask for the SMS verification code. I repeatedly gave incorrect codes then spoke to his 'boss' to complain about poor customer service. He hung up on me.
Craig Hays retweeted
Enabled MFA? Yay! But threat actors who get past the first gate can wear down users with MFA requests. Expose it for where it’s from docs.microsoft.com/en-us/azu…
