Smart people who get IT. Contact us: https://xitter.cf/t.co/sydYuXPcGN NOW HIRING: https://xitter.cf/t.co/GuohqldmDI
Washington, DC
Joined December 2015
- Tweets1.6K
- Following180
- Followers710
- Likes900
Pinned Tweet
In case you've missed it, we have a blog!
Every week, a Hunter Strategy expert shares their tips, opinions, and advice in an article.
These blog posts can help expand your knowledge and give you tools for success!
Read more here: medium.com/hunter-strategy
#blog #hunterstrategy #IT
Moving 500 MB across NIPR/SIPR: an hour or more.
Getting 5 GB of extra disk: a stack of forms.
Running Terraform after someone made manual portal changes: everything snaps back.
This week on This Is Fine, @trinertech talks about what DevSecOps actually looks like inside DoD.
Catch the full episode here: f.mtr.cool/6bwwabwh9g
HunterStrategy retweeted
PHP2Shell (CVSS 9.2) disclosed, and eight eMudhra certs could let anyone mint trusted certs for any site.
Thursday, Oct. 22, 11 a.m. ET: @MalwareJake, IANS Faculty, on what your security team should do now.
Register now: bit.ly/4dLHUh6
TIL: Rotating every credential on your BeyondTrust appliance before evicting the attackers actually gives them a fresh set too. Remote Support CVE-2026-102764 has been exploited since August.
Rebuild first, then rotate.
HunterStrategy retweeted
🚨 BREAKING: PHP is warning admins to prepare for emergency security updates tomorrow to fix two critical vulnerabilities rated CVSS 9.2.
However, security researchers at @watchtowrcyber rate the flaws CVSS 10.0 and say they are RCE vulnerabilities affecting PHP 5 through 8.
Information about the vulnerabilities has reportedly leaked ahead of disclosure.
No known exploitation in the wild.
🔗 bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
HunterStrategy retweeted
The number of times I've clicked Restart Now thinking updates were finished while updates were still installing...
I don't understand why we can't grey that option out while updates are in progress. Why is it like this? :(
Metabase’s "reset password" feature turned out to double as "become admin." It even worked on Metabase’s own cloud. CVE-2026-72898 is on KEV and the PoC is public, so maybe patch before lunch.
HunterStrategy retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
HunterStrategy retweeted
ConnectWise has an incident with compromise this weekend where they disabled backups in customer M365 environments.
Even if you're not a ConnectWise customer, you likely have third party risk management concerns here for those you do business with who are.
Funny how the tools we trust to manage everything else keep turning out to be the easiest way in. This time around, it’s pfSense, Metabase, Splunk, BeyondTrust, and FortiGate.
Details here: f.mtr.cool/h5x047yhq0
There’s no workaround for CVE-2026-102255. Your options are 12.4.3-03670, 12.5.0-03082, or hoping.
Full story on the blog: f.mtr.cool/o9danyhat4
#SonicWall
Getting an ATO is like registering a car, except every agency runs its own DMV and some of them are California. New episode of This Is Fine with Chris Sowards. 🎧f.mtr.cool/dwnjt3atjt
HunterStrategy retweeted
Today's Breach Please is out - somehow we kept this thing going to episode 50?!
Today we talk about a CVSS 10.0 vulnerability in SonicWall and then extend the discussion into lack of visibility in edge devices more generally. 1/2
HunterStrategy retweeted
Add a new tool to your cybersecurity toolbox this #CybersecurityAwarenessMonth. The @NIST CSF 2.0 Reference Tool allows users to dynamically explore, filter, and export the CSF 2.0 Core, Informative References, and Implementation Examples: csrc.nist.gov/Projects/cyber…
HunterStrategy retweeted
Very much experiencing this live as we build @HunterStrategy - our Funance team has built multiple tools in the last year that have transformed our ability to interact and deeply understand financials…and we’re just getting started.
The CFO job has gone from accountant to banker to builder, and the whole finance function is being rebuilt around it:
1. Data stopped being the bottleneck. AI pulls and reconciles data across systems, so teams spend more time acting on numbers instead of chasing them.
2. The finance stack is becoming part of the finance team. AI-native tools stand up in days, pull their own data, and turn a monthly close into a daily one.
3. The rise of the finance engineer. Finance people proficient in Claude Code or Codex are building their own tools.
4. The finance team gets smaller and higher leverage. The old heuristic of finance at 5% of headcount is heading to 2% for the leanest teams.
5. Planning becomes continuous. Usage-based revenue (tokens, API calls) moves too fast for a monthly forecast, so planning shifts from annual budgets to a live view.
6. Controls become a critical feature of the product. Every number an agent touches keeps an audit trail back to its source, and finance still owns sign-off.
7. Finance gets a bigger mandate. Compute spend, people versus software, and build versus buy are now finance decisions.
"The CFO is becoming a builder and architect of the company's operating system... The job is still finance, but more of the job now is designing how finance gets done."
a16z's @seemaamble, @IvanoMakSF, and David Borecky on why you need a new CFO: a16z.news/p/you-need-a-new-c…
HunterStrategy retweeted
We’ve lost an icon. Margaret Hamilton, a computer science pioneer best known for her work at MIT leading development of the flight software for the Apollo missions to the moon, has died at 90. Read about her legacy via MIT News: news.mit.edu/2026/margaret-h…
ALT Margaret Hamilton is reclined inside a NASA spacecraft module, surrounded by control panels and switches.
HunterStrategy retweeted
How are you monitoring your edge devices to ensure they are not compromised? How are you certain that a firewall implant hasn’t happened and you’re silently passing traffic while you’re FW reports it’s all good.
These are gaps in your program you should be thinking about.
BREAKING: Dutch intelligence says Chinese hackers hold secret source code of proprietary Western hardware and software they target, letting them dig deep into it for weaknesses.
AIVD and MIVD expect attacks on firewalls and VPN gateways to rise sharply in the coming years, with AI speeding up exploitation.
