@ReThinkSec

@JoeSpikey & @LoneTreePress #CISO | #security | #AppSec | #PenTesting | #Cybersecurity | #Leadership

 Seattle, WA & Bozeman, MT
rethinksecurity.io
Joined April 2020
  • Tweets80
  • Following207
  • Followers54
#AppSec teams should think in three phases: Awareness, Enablement, and Enforcement to work efficiently with development teams. Click through for more info. #security #prodsec #ciso #infosec #cybersecurity rethinksecurity.io/posts/the…
2
1
Stop acting like #phishers! Legit banks are contacting people in the phishiest way possible, and phishers who are taking extraordinary steps to trick you. We need to step up our game to protect users. #appsec #phish rethinksecurity.io/posts/sto…

Mini-Post: Stop Acting Like Phishers

There are two sides to preventing a successful phishing attack. The first side is focusing on the user; trying to train users to identify phishing attacks and to protect themselves from these types...

rethinksecurity.io
What would you do with a magic wand to help reduce #software #risk? #appsec #ciso #security rethinksecurity.io/posts/red…

Mini-Post: Reducing Vulnerability Classes to Near Zero Through Secure Defaults and Good Choices

“If you could wave a magic wand and do anything to reduce vulnerabilities, what would you do?” Some common answers are things like training and education, forcing penetration testing, better tools,...

rethinksecurity.io
There were 18 Billion records lost in #beaches since 2019. If each record was one inch long the beaches would stretch around the world ... 11 times! We need to protect our users! rethinksecurity.io/posts/you… #AppSec #hackers #DEFCON

You Have an Obligation to Fight for Privacy

Note: The header image was created by Visual Cinnamon for The New York Times on an opinion piece on digital trackers. By now everyone is familiar and desensitized to cookie popups that bombard us on...

rethinksecurity.io
1
Sounds about right. This is more common than you may think in large SaaS companies. reuters.com/article/us-twitt… #Twitter #hack #breach

Exclusive: More than 1,000 people at Twitter had ability to aid hack of accounts - sources

More than a thousand Twitter employees and contractors as of earlier this year had access to internal tools that could change user account settings and hand control to others, two former employees...

reuters.com
1
The July #newsletter is out! Lots of great #security articles and #news this month! Check it out here, and subscribe if you find it useful. #ciso #appsec #hackers rethinksecurity.io/newslette…

July 2020 Newsletter

Since COVID started I’ve been having a hard time keeping track of time. It feels like it’s been somewhere between 2 weeks and 2 years since this all began. After a bit of a hiatus I’m excited to...

rethinksecurity.io
Interesting list of prices and products in the #darkweb from @Privacy_Affairs here: privacyaffairs.com/dark-web-… I wrote my own article on exploring the darkweb a few months ago. You can check that out here: rethinksecurity.io/posts/exp…
2
A ton of apps are looking at your clipboard contents. #iOS14 makes this clear. #privacymatters rethinksecurity.io/posts/you…

You Have an Obligation to Fight for Privacy

Note: The header image was created by Visual Cinnamon for The New York Times on an opinion piece on digital trackers. By now everyone is familiar and desensitized to cookie popups that bombard us on...

rethinksecurity.io
1
1
#iOS14 adds a warning if an app inspects your clipboard. You can see a demo of this in this video. youtube.com/watch?v=pRSWdtoU…
Check out my latest post on what you can do to minimize your #privacy risk online as an #app #developer and as a #consumer. rethinksecurity.io/posts/you…

You Have an Obligation to Fight for Privacy

Note: The header image was created by Visual Cinnamon for The New York Times on an opinion piece on digital trackers. By now everyone is familiar and desensitized to cookie popups that bombard us on...

rethinksecurity.io
1
I worry about #privacy a lot, that's why I run an ad blocker like @ublockorigin or @DuckDuckGo's privacy essentials. Web #Performance is another reason to install a blocker. debugbear.com/blog/2020-chro…
1
BGP Hijacking is real and can be impactful! @IBM #cloud had major outage. www-itproportal-com.cdn.ampp…
Hey cyber enthusiasts, here's a FREE 6-week online bootcamp for ANYONE to learn IT/Cybersecurity. You'll receive a voucher for the Security+ exam. Registration by June 8th ohiocyberrangeinstitute.org/… #infosec #cyber #CyberSecurity #WomenInCyber #BlackTechTwitter #WomenWhoCode
25
196
10
287
Pop Quiz: Which of these are real companies that track you around the web and which are companies I just made up: * MiQ * Floodlight * Google Analytics * Kameleoon * Ve * Baidu Analytics * Hotjar * Mautic * Impact Radius * Pixlee * Facebook Pixel * UNiDAYS [continued below]
1
1
3
more replies
That was a trick question, those are all trackers. What’s worse those are all used on a single page on a single site.
1
Stand by for a ReThink Blog post on the dangers of too much user tracking and what you as a user can do to protect yourself and what you can do as a business to design user-centric data models.
1
ReThink Security retweeted
Harsh Bothra@harshbothra_6 Jun 2020
XSS is pure love and combined with luck, it may give unexpected results. I just published XSS to Database Credential Leakage & Database Access — Story of total luck! link.medium.com/RDFxEsR456 #bugbountytips #bugbounty #hacking #bugbountywriteups #security

XSS to Database Credential Leakage & Database Access — Story of total luck!

Reflected Cross-Site Scripting happens when you provide a malicious javascript code to some input parsing functionality and due to lack of…

link.medium.com
4
164
407
Don’t fall victim to somebody else’s poor #AppSec leading to a #databreach minted.com/data-incident-not… Use unique credentials for each site with a #password manager like @1Password, @LastPass or @dashlane Check yourself at haveibeenpwned.com/
Minted data breach loses credentials and PII

ALT Minted data breach loses credentials and PII

1
1
1
Load more