Cabby42 (JR)

Cabby42 (JR)

@julien.bcksec.com

Infosec Junkie | Daytime Protector | Moonlit Hacker | Linking Infosec Enthusiasts

146 followers200 following129 posts

Cabby42 (JR) reposted

Hackers on the Hill
@hackersonthehill.org

Ever wonder how government policy shapes cybersecurity? Join the Policy Village at BSides Ottawa! A non-partisan space for productive dialogue between tech pros & policymakers. Just bring your curiosity, visit bsidesottawa.ca/ #Cybersecurity #PublicPolicy #BSidesOttawa

Cabby42 (JR) reposted

Phillip Wylie
@phillipwylie.bsky.social

Chris Traynor: Hack Your Way Into a Cyber Security Career #cybersecurity #infosec #innovation #personalbranding podcasters.spotify.c...

podcasters.spotify.comChris Traynor: Hack Your Way Into a Cyber Security Career by Phillip Wylie ShowSummaryIn this episode of the Phillip Wylie Show, Chris Traynor shares his journey into the cybersecurity field, discussing his hacker origin story, the impact of post-breach opportunities, and the nuances of breaking into offensive security. He emphasizes the importance of hands-on experience, the role of certifications, and shares engaging stories from his pen testing career. Chris also provides valuable insights on the security mindset and the collaborative nature of cybersecurity.Takeaways• Chris Traynor emphasizes the importance of community involvement in cybersecurity.• Post-breach organizations often have better budgets for security training and tools.• Transitioning into offensive security requires a shift in mindset to think like an attacker.• Certifications can help get past initial job screenings but are not always indicative of skill.• Hands-on experience is crucial for success in pen testing roles.• Building home labs can provide practical experience in cybersecurity.• Understanding the stories behind security incidents is vital for effective communication.• Not all security systems can be 100% secure; it's about managing risks effectively.• Collaboration between security teams and organizations is essential for improvement.• Training should focus on practical applications and real-world scenarios.Sound Bites"I wanted to figure out how things work.""Certifications do serve their purpose.""Hands-on experience is the biggest thing."Chapters00:00 Introduction to Cybersecurity and Community Engagement01:40 Chris Traynor's Hacker Origin Story05:06 Leveraging Post-Breach Opportunities07:24 Breaking into Offensive Security13:04 The Role of Certifications in Cybersecurity19:38 Gaining Hands-On Experience in Pen Testing22:45 Notable Pen Testing Stories and Experiences29:02 Final Thoughts on Security and CollaborationResourceshttps://www.linkedin.com/in/chris-traynor/https://www.antisyphontraining.com/instructor/chris-traynor/
Cabby42 (JR)
@julien.bcksec.com

I’ll be at #NorthSec this Thursday and Friday. If you spot me, feel free to come say hi! Always happy to chat about cybersecurity, identity, or whatever else you're passionate about. Want to catch up properly over a coffee? Feel free to send me a message, I’d love to connect with folks attending.

Cabby42 (JR) reposted

Phillip Wylie
@phillipwylie.bsky.social

The Future of Cybersecurity: A Conversation with Julien Richard podcasters.spotify.c...

podcasters.spotify.comThe Future of Cybersecurity: A Conversation with Julien Richard by Phillip Wylie ShowAbout The Guest:Julien Richard is a cybersecurity professional with a background in system administration and network administration. He is the founder of a cybersecurity collective and has extensive experience in penetration testing. Julien is passionate about sharing his knowledge and helping others succeed in the industry. Summary:Julien Richard joins Phillip Wylie on the podcast to discuss their journeys into the cybersecurity industry. They emphasize the importance of diversity in the field and the value of sharing different paths to success. They also discuss the role of certifications and the need for continuous learning in the ever-evolving cybersecurity landscape. Julien shares his thoughts on the future of offensive security and the potential impact of AI tools like ChatGPT. Key Takeaways: Diversity of stories and paths to success is important in the cybersecurity industry. Continuous learning and curiosity are essential for success in offensive security. AI tools like ChatGPT can be valuable for writing and research, but caution is needed to ensure accurate data sources. Understanding the fundamentals of networking, systems, and Linux is crucial for offensive security professionals. Quotes: "Everybody has a different way of getting into the industry." - Julien Richard "Don't just run something without understanding what's going on." - Julien Richard "The more you're exposed to it, the better you'll become." - Julien Richard "Continuous learning and curiosity are the most important qualities in this field." - Julien Richard Julien's social media:  https://www.linkedin.com/in/julien-richard https://bsky.app/profile/julien.bcksec.com
Cabby42 (JR)
@julien.bcksec.com

Day 24 of Cabby42’s InfoSec Advent Calendar is here! Today, we thank the educators, creators, and developers who make cybersecurity better for everyone. Who inspires you? Share your gratitude below! #InfoSecAdvent #Cybersecurity #Cabby42 #Community

Cabby42 (JR)
@julien.bcksec.com

Day 22 of Cabby42’s InfoSec Advent Calendar is here! Today’s pick: Have I Been Pwned (HIBP) from @troyhunt.com —check if your data was exposed in a breach. Learn more: https://buff.ly/47eOWG6 #InfoSecAdvent #Cybersecurity #Cabby42 #HaveIBeenPwned

buff.lyHave I Been Pwned: Check if your email has been compromised in a data breachHave I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.
Cabby42 (JR)
@julien.bcksec.com

Day 17 of Cabby42’s InfoSec Advent Calendar is here! Today’s pick: FlareVM—a malware analysis and reverse engineering toolkit for Windows. Learn more: https://buff.ly/3JEM8p4 #InfoSecAdvent #Cybersecurity #Cabby42 #FlareVM

buff.lyGitHub - mandiant/flare-vm: A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM. - mandiant/flare-vm
Cabby42 (JR)
@julien.bcksec.com

Day 8 of Cabby42’s InfoSec Advent Calendar is here! Today’s resource: Semgrep Academy—explore secure coding practices, static analysis, and application security techniques with @Semgrep, supported by the amazing @shehackspurple. Check it out:

buff.lySemgrep
Cabby42 (JR)
@julien.bcksec.com

Day 5 of Cabby42’s InfoSec Advent Calendar is here! Today’s pick: MITRE ATT&CK Framework @attack.mitre.org. An essential resource for understanding how attackers operate. Learn more: https://buff.ly/2DWJ4Wi #InfoSecAdvent #Cybersecurity #Cabby42 #MITREATTACK

buff.lyMITRE ATT&CK®MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of…
Cabby42 (JR)
@julien.bcksec.com

Day 4 of Cabby42’s InfoSec Advent Calendar is here! Today’s pick: Backdoors and Breaches—a fun incident response card game by @bhinfosecurity.bsky.social. Check it out: https://buff.ly/3ZbhOMh #InfoSecAdvent #Cybersecurity #Cabby42 #BackdoorsAndBreaches

buff.lyBackdoors & Breaches - Black Hills Information SecurityThis is Backdoors & Breaches, an Incident Response Card Game, from Black Hills Information Security and Active Countermeasures. Backdoors & Breaches contains 52 unique cards to help you conduct…
Cabby42 (JR)
@julien.bcksec.com

Day 3 of Cabby42’s InfoSec Advent Calendar is here! Today’s pick: SecLists by @danielmiessler.bsky.social. The ultimate collection of wordlists for security assessments. Explore it here: https://buff.ly/3tkKuSz #InfoSecAdvent #Cybersecurity #Cabby42 #SecLists

buff.lyGitHub - danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, ...
Cabby42 (JR)
@julien.bcksec.com

Cabby42’s InfoSec Advent Calendar is coming! Each day this December, I’ll share a free infosec resource—tools, guides, training, and more. Some of you may already know them, but they’re worth revisiting! Why “Cabby42”? In college, I was the only one with a car. The ‘42’? If you know, you know. 😉

Cabby42 (JR)
@julien.bcksec.com

The first Policy Village at BSides Ottawa was a success! Thanks to the speakers, attendees, & organizers who made it happen. Next year’s edition will include a CFP—help us spread the word! If you know someone in public policy, let’s connect. @hackersonthehill.org #PolicyVillage #BSidesOttawa

Cabby42 (JR)
@julien.bcksec.com

Quick update on why you haven't seen my CyberSecurity News Roundup in the past few weeks. I've been taking a much-needed vacation. But don't worry, It'll be back next week. In the meantime, just google "Crowdstrike" and you'll have enough reading material for a few days. :-D