Markus

Started the day with PHP2Shell info letters to leadership with calls to action. Let's see how long it will take for stuff to be escalated and patches / isolated. So far one business area has verified they are patched and all good.

Yesterday you were better off than you are today but it took today for you to realize it. But today has arrived, and it's too late...

People shitting on Xbox for the new patent, and are looking at the worst case scenarios, I see immense potential with this in bringing demo testing back, or making stuff more accessible with lower cost for those who wouldn't be able to, or want to invest 60 or 80 for a new game

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

Sounds of this baby life are sooo new that I'm actually considering looking into making music. - Dragging the crib across the room makes insane bass - Avent bottles releasing their vacuum make nice whine - Nightly high pitch screams out of nowhere <3 And all the others

Calling for a slow down of AI Industry. Yeah we all know you are all aware of the threats, but realistically most of you are there just to go for the competitive advantage being presented 😅 #ai #threat #anthropic #openai #claude #chatgpt

"Hey can we get approval to install Jianying to our local workstations for video editing?" Don't know if I've ever given a faster "No" in my life 😂 #cybersecurity #ip #copyright

I think I need to make my mission this week to actually properly read through the AI Act

Hot take, unless you work for a consulting firm, your employer shouldn't necessarily pay for your certifications, but they should promote incentivized learning. You still need to know the same shit, just not on paper. #IT #cybersecurity #learning #development #hottake

Because everyone loves filling security questionnaire Excels I started creating a new one for checking basic security controls for new business technology(IT) solutions. Basically to help form an initial risk profile. Next I need to create some scoring formulas. #cybersecurity #infosec #risk

How is secure by design not the de facto for cloud infrastructure and workloads?

First batch of apples now squeezed, now I have a 21 litres of juice bubbling away. Lets hope the cider comes out OK.

Just spent a few hours picking apples and assembling a fruit shredder and a juice press. I think I'll make myself a cider tomorrow 😋

I finally received a phishing email that actually did a pretty good job. * Pretends my payment method needs to be updated * GMail delivered it to me as "important" * All text looks legit If you're a @1password.bsky.social user then beware. The clues: domain name and email address (waterbabies?!)

From what I've heard there isn't much chatter towards Microsoft regarding the MFA SMS & Voice getting deprecated. I find it hard to believe that companies would have been able to migrate out already, or is everyone just waiting for the service providers to roll out? #mfa #microsoft #entraid #entra

I would say the core issue for many is not what to learn and in what order, but knowing what you are breaking into. I've received these questions many times and very often the person asking might not even know which side or role of security they want to get into.

A sad day Microsoft is retiring Entra ID dynamic membership "MemberOf" operator. Let's hope it comes back later more fine tuned. mc.merill.net/message/MC14...

Next week at this time I'll be back at work 😫 month has gone past so fast!

Buuuut is it really workaholism if it's also your hobby? #cybersecurity

Hmmm, what should I deploy next... expanding my lab and currently have Spiderfoot, Prism and theHarvester running on docker. Recommendations? #cybersecurity #osint #homelab

I started my weight loss journey a few months back and now I've lost a bit over 15kg. I think my scale hasn't shown these numbers since like 2019

We heard you. We agree. In light of recent developments in physical media, GitHub is proud to announce that you can now obtain your public repo on CD-ROM. Keep it. Lend it to friends. Pass it on to your children. Your code is physically yours, forever. Until you lose it, let's be real. gh.io/cd

My vacation starts tomorrow so I decided to get train tickets instead of driving to the office so I can grab a "few" afterwork beers. Also taking my personal haxxxor laptop instead of my work one, good way to ease into vacation, raise some red flags 😁 #cybersecurity #vacation

Spun up my first container yesterday and what I can say, surprisingly big pain in the ass without reading any documentation and only using Copilot on the side. After few hours ended up opening the documents and checking the forums, got everything working in 15min 😅 #cybersecurity #homelab #truenas

No nyt!

Umm yeah. This is my server tower. #cybersecurity #lab

Walk the walk! If you breach zero trust, separation of duties and principle of least privilege, for the love of... Don't make yourself the exception!!! #cybersecurity #admin #zerotrust #sod #polp

Finally some good news on this front! Vanguard in the future will only run when the game is running. www.riotgames.com/en/news/vang...

Back in my favourite activity, going through #cybersecurity feeds and muting all the news bot accounts 🔇

Finally some really good upgrade to my homelab setup! And finally spent the time to actually update the website to include open graph protocol tags

As the General Chair of ISC 2026, I’m currently seeking sponsors to support students, invited speakers, awards, and community events. If your organization is interested in cybersecurity research, I’d be happy to discuss opportunities. isc2026.github.io #cybersecurity #research #infosec #ISC2026

Microsoft been having some calendar issue with Exchange online that is supposed to affect shared calendars... Well it seems my calendar is a shared one I guess 😅 hopefully tomorrow I can start organizing all the meetings

Woah this is a new one. Ended up in a situation where I have to transfer one cyber security incident response process to our MSSP, got hit with ~10x increase in the price tag. Guess it is time to try and use FAIR for the first time to try and justify this #cybersecurity #risk #riskmanagement #FAIR

Unpopular opinion, white Monster is overrated

I wonder when Nightmare Eclipse will stop 🤔 I bet he has a stack of 0 days just laying around

As a security guy who has worked in environments with lots of technical dept I absolutely love when I'm given chances to build and implement architecture designs for new companies with a decent starting budget 🥰

The more and more I follow AI related discussions it becomes more clear how big the governance gap is for many organizations, I've also seen few orgs that have taken the bull of the horns immediately and are certified and everything, but this is still a big issue for the vast majority

Been a while since my last blog post, finally ended up writing something about my homelab #cybersecurity secmark.fyi/5/post

Been on a strict diet for a month, weight has gone down 10.1 kg. Now mentally preparing myself that the weight loss speed will start slowing down as well.

I've been pondering for a while now, should your antivirus and EDR configuration be behind your workplace/Intune team or behind your MSSP I can see benefits on both, but somehow I feel that this should be on MSSP while keeping workplace team informed through proper channels. What do you think?

Been a great investment so far, lots of memories now backed up and just in time for my Google account to start whining that it is full and cannot do any backups and is blocking my mail traffic... Server pays itself back in no time.

Yesterday I was finally able to set up TrueNAS, Surprisingly easy, took more time setting up the network than the actual OS and shares 😄

Slowly progressing with the DDoSsia Monitor tool github.com/secmark-tool...