CynicalSignals

CynicalSignals

Sign in Subscribe

Building an Unofficial Badge for GrrCon 2024

Building an Unofficial Badge for GrrCon 2024

Intro If you want to skip the rambling and see the list of components, you can jump down to them here. This year I decided to build interactive badges for roughly the roughly 30 friends I knew who were attending GrrCon, Grand Rapids, MI's premiere cybersecurity conference. 0:

Intel Update #6

The following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL Selfh.st - This Week in Self-Hosted Self-hosting Category https://selfh.st/ As always, if you have any suggestions please reach out using any of the contact methods at the top of this page

Getting a Novatel USB551L working in Linux by using Windows

Getting a Novatel USB551L working in Linux by using Windows

I recently received my ClockworkPi uConsole. It's a great Raspberry Pi-based console with tons of hackability and customization. When I originally ordered it several months ago, I foolishly did not pay the up-charge to get it with the included 4G modem module. Since the device is so portable,

Building a "Retro" LAN Party

Building a "Retro" LAN Party

I recently put together a small LAN party reminiscent of the late 90's/early 00's experience I had growing up and gaming with friends in my parent's basement. There's something about everyone at their own computer, playing games against each other that

Intel Update #5

An upgrade to FreshRSS was successful. The following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL Zack Whittaker's This Week in Security Security News Main Feed https://this.weekinsecurity.com/ Fixed Name Category Visbility URL Cofense Moved to Vendor Blogs Main Feed

Please Stop Piping URLs to Shells

Please Stop Piping URLs to Shells

I buy too many domains each year and occasionally I use them for something... purposeful (as long as you consider my personal pet peeves purposeful). Check out my latest spite-site here: https://stoppip.ing/

Intel Update #4

The following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL Entra News Vendor Blogs Main Feed https://entra.news/ As always, if you have any suggestions please reach out using any of the contact methods at the top of this page.

Intel Update #3

The following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL Safe Not Scammed Security News Main Feed https://safenotscammed.com/ Digital Forensics Now Good People Main Feed https://digitalforensicsnow.buzzsprout.com/ As always, if you have any suggestions please reach out using any of

Intel Update #2

This weekend the following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL MalwareTech Good People Main Feed https://malwaretech.com/ ANY.RUN Vendor Blogs Category Only https://any.run/cybersecurity-blog/ Fixed * BankInfoSecurity is now visible in its category only. As always, if you have

Intel Update #1

This weekend the following feed updates were made to https://intel.cynicalsignals.com Added Name Category Visbility URL Splunk Vendor Blogs Category Only https://www.splunk.com/blog/feed/ MITRE ATT&CK Vendor Blogs Main Feed https://medium.com/feed/mitre-attack Just Security Security News Main Feed https://www.

Introducing Cynical Intel

Introducing Cynical Intel

You can check it out here: https://intel.cynicalsignals.com When I ditched Twitter a few years ago, I found it had gotten less convenient staying up to date on everything going on in the world of Cyber Security. I had that finely tuned feed of trusted sources I could

PowerToys: A Microsoft Solution for a Microsoft Problem

PowerToys: A Microsoft Solution for a Microsoft Problem

By publishing PowerToys, Microsoft gets to avoid improving their products by allowing users to create bizarre workarounds for what seem like simple problems. For example, the lack of shortcut customization in Teams. There is no way to natively turn off CTRL+SHIFT+C from starting a call with whoever you’

Bikeshedding

Recently at work, I got the chance to give a presentation on any topic of my choice. As tempting as it was to stay within my comfort zone and come up with something technical or directly related to my role, I decided to pick something outside of my wheelhouse yet

The Importance of Local Accounts

The Importance of Local Accounts

This week, Ubiquiti (UniFi) had an outage. Among the systems affected were UniFi's Single Sign-on services. While the outage lasted less than an hour, I started to see reports of people online who were unable to log into their UniFi devices, even when directly connecting to them via

6(ish) iOS Apps for Security-Minded Individuals in 2023

6(ish) iOS Apps for Security-Minded Individuals in 2023

While still not on-par with Android, Apple has opened up iOS capabilities for app developers in recent years resulting in new apps filling gaps on the platform. This is a list of some of my favorite apps that provide security or privacy benefits. I am not affiliated with any of

Installing Portainer in a Proxmox LXC

Installing Portainer in a Proxmox LXC

This is a simplified guide to installing Portainer within a Proxmox LXC for homelab use based on my personal notes. Portainer is a handy tool to manage your Docker containers through a clean web interface. This guide assumes you have an functional Proxmox environment and knowledge on how to harden

Cyber Threat Modeling

Cyber Threat Modeling

As a cybersecurity program matures, threat intelligence can inform an exercise known as "threat modeling." At a high level, threat modeling is something people inside and outside of Information Security do daily, whether they realize it or not. Threat modeling is all about understanding a system/process/application/

Cyber Threat Intelligence Sharing

Cyber Threat Intelligence Sharing

Different organizations within the same industry will have different cyber defense capabilities for researching, detecting, and stopping threats. Government entities have another set of capabilities that private sectors do not. An organization trying to defend itself from advanced persistent threats does no good working in a bubble if other organizations

MITRE Frameworks

MITRE Frameworks

Frameworks are heavily relied upon across many industries. Often a framework is built upon best practice and expert knowledge to serve as the groundwork for others to follow, dramatically reducing the number of resources and time required for internal development. Some frameworks are open-source; others are proprietary. Either way, if

Cyber Threat Intelligence in the SOC

Cyber Threat Intelligence in the SOC

Last week was Halloween, and this week marks the end of Daylight Savings, so it's only appropriate we begin the transition of being afraid of every possible threat towards being more efficient and saving time by utilizing Cyber Threat Intelligence within a security program! The typical Security Operations

Cyber Threat Intelligence

Cyber Threat Intelligence

It's Halloween which makes it the perfect time to talk about what keeps Information Security professionals up at night -- threats! But not all threats should have you checking the closet and looking under the bed each night. So how do you know which bumps in the night