Augusto Barros

Augusto Barros

@securitybalance.com

Making cybersecurity products move forward and actually solving problems. Security enthusiast, geek, Corinthians fan. Product @ Prophet Security. All views are my own. Eppur si muove.

129 followers151 following60 posts

Augusto Barros reposted

Augusto Barros reposted

A honeytoken fires when someone reaches for what they shouldn't, which makes the alerts high-signal. To get the most of them, decide on the best locations, such as decoy MCP entries, fake AWS keys, and Cloudflare Workers serving fake admin pages. https://zeltser.com/plant-honeytokens

zeltser.comPlant Honeytokens to Detect IntrusionsPlant decoy credentials, configs, and URLs to surface an attack the rest of your stack might miss. Deployment scenarios include MCP server entries, AWS API keys, and Cloudflare Workers serving fake admin pages.

All but one of the Brazilian presidents from the last 20 years have been arrested at some point (considering Bolsonaro is about to get into that club). The only one who hasn't been arrested was the one who got impeached. As people there say, Brazil is not for amateurs.

Congratulations to @haroonmeer.canary.love and the Thinkst team

Zack Whittaker@zackwhittaker.com

For TechCrunch, I wrote about Thinkst Canary, a bootstrapped maker of honeypots (for catching hackers), which this month marks its 10th anniversary. The company now brings in $20 million in ARR without VC funding or an outbound sales team. Refreshing at a time when cyber is dominated by VC dollars.

My first job was at the helpdesk. It really helped me in many ways, from learning how to troubleshoot better to talking to people at their highest levels of anger and frustration. It's a valuable experience and I'm happy I was able to live it.

SwiftOnSecurity@swiftonsecurity.com

I got a message from someone today working in Helpdesk, wanting to move into Security, thanking me for publicly talking about how important my Helpdesk experience was in my career. You may not get it, but they do. And that's why.

The irony is the excessive focus on the whole civilization instead of individuals (make humanity interplanetary, fix global warming by electrifying transportation) is what makes Musk, this symbol of capitalism and meritocracy, so close to the Communist philosophy

Kee Hinckley@nazgul.infosec.exchange.ap.brid.gy

“The fundamental weakness of Western civilization is empathy, the empathy exploit,” Musk said. “There it’s they’re exploiting a bug in Western civilization, which is the empathy response.” -Elon Musk, March 6, 2025 “In my work with the defendants (at the Nuremberg Trials 1945-1949) I was […]

Augusto Barros reposted

📣 💥 📣 CALLING SOC ANALYSTS, INCIDENT RESPONDERS, DETECTION ENGINEERS! 📣 💥 📣 We want to hear from YOU! We are researching Analyst Experience to see what is working and not working in the SOC. PLEASE take 10 min to fill out the survey so we can improve it! forrester.co1.qualtrics.com/jfe/form/SV_...

forrester.co1.qualtrics.comQualtrics Survey | Qualtrics Experience ManagementThe most powerful, simple and trusted way to gather experience data. Start your journey to experience management and try a free account today.

Augusto Barros reposted

In cutthroat cultures, people kiss up and kick down. They protect themselves by currying favor with people in power and exploiting those without it. In supportive cultures, people speak up and shield down. They protect others who lack power by raising problems to those who have it.

Most SIEM replacement pitches are based on straw man arguments.

Oliver Rochford@cyberfuturists.com

💡 It took me a while to realize that most of the people who think you can replace SIEM easily mistakenly believe it's just something that's used to search through logs. 🤦‍♂️

This is a beautiful idea and should be further explored!

Mehmet Ergene@cyb3rmonk.bsky.social

Detectable by Design? We keep failing on "shift left", "secure by design", etc. to prevent malicious activities. How about "detectable by design" approach? It's certain your product will fail on the prevention side but you could design it in a way that makes it easy to detect malicious activities.

With interest rate drops and the economy optimism around Trump's administration I can see a lot of people going heavy into the stock market... exactly at the point when a big crash is expected; it will be quite ugly

And all that with those pesky vaccines causing harm! :-P

Max Roser@maxroser.bsky.social

Few people even know about this; when people are asked in surveys how child mortality has changed the majority says it has stagnated or increased. If you consider that many don't know about humanity's biggest achievement, then it's not surprising that many are so pessimistic about our future.

I was scrolling X this morning: Taking fluoride out of water, vaccines kill, communist conspiracies are everywhere...I'm done. Leaving account there as a placeholder, but this is my new microblogging home now