@MITREcorp - #D3FEND creator/lead. Opinions my own. 🇺🇸🇬🇷Opa! (only deploys on Fridays)
Colorado, USA
Joined May 2010
- Tweets1.4K
- Following622
- Followers621
- Likes8.3K
Pinned Tweet
This week, we released the first domain extension for the D3FEND Ontology, Operational Technology. D3FEND 1.3 has additional goodies. 🧵
Peter Kaloroumakis retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Peter Kaloroumakis retweeted
Or, defense has to provide a layered system that the attacker doesn't know about. Goes both ways. I agree with this btw, just saying we can flip that script also.
Attackers only have to get it right once. Defenders have to get it right every time.
At #HumanX, @nikesharora explains why that imbalance and vulnerabilities across enterprise infrastructure will drive a major IT overhaul in the years ahead.
Peter Kaloroumakis retweeted
The Department of War has commissioned the @MITRECorp, a nonprofit that leads Federally Funded Research and Development Centers (FFRDCs), to execute PROJECT MERIDIAN.
MITRE’s National Security Engineering Center FFRDC will manage and direct the completion of the project, convening leading business, policy, and technology experts to assess the capabilities, emerging technologies, and operational concepts needed to sustain U.S. military advantage across next-generation warfighting domains.
MITRE will author and deliver an independent, unclassified final report, not to exceed 30 pages, with classified annex(es) at the conclusion of the 120-day project period.
PROJECT MERIDIAN: THE FUTURE OF WARFARE
Peter Kaloroumakis retweeted
‼️Do not npm install or deploy anything right now
Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.
Pin versions or wait until this is resolved
@npmjs @GHSecurityLab there is an active supply chain attack on [email protected] which pulls in a malicious package published today - [email protected] - someone took over a maintainer account for Axios
Peter Kaloroumakis retweeted
Prediction: In less than 90 days, all channels that we thought were safe from spam & automation will be so flooded that they will no longer be usable in any functional sense: iMessage, phone calls, Gmail.
And we will have no way to stop it.
Peter Kaloroumakis retweeted
best time to buy a mac mini
is 3 weeks from now on reseller marketplaces
Peter Kaloroumakis retweeted
Seeking hardcore engineers & designers to fix the most broken user experiences on Earth
Apply at ndstudio.gov
Another feature of pathfinder is to verify all the edges of the graph and interpolate missing nodes.
We also have a getting started guide for D3FEND for OT, big shout out to the amazing @holtorama for all of her hard work on the OT content. It is not easy to build a unified technology ontology!
d3fend.mitre.org/blog/gettin…