@Volatility Core Dev | Art of Memory Forensics co-author | Sr. Director of Adversary Tactics @HuntressLabs | #DFIR enthusiast/trainer | gleeda@infosec.exchange
remote
- Tweets 17,903
- Following 5,778
- Followers 10,083
- Likes 16,980
Pinned Tweet
PSA: Don’t forget to give a fuck. Give a fuck about what you do. Be intentional. Continue to better yourself. Remove things and people in your life who don’t add value.
And have a good day!
3
5
57
4,172
Jamie Levy🦉 retweeted
Wtf. This is beyond stupid...
Looks like @github suspended my account. I haven't used github for anything in the past couple of days.
Great. A bit frustrating. If anyone from the support team sees this my ticket is: #4903946
3
2
28
3,400
Jamie Levy🦉 retweeted
Why they calling me out like this 🤣
BREAKING:
Scientists confirm that an ADHD brain can hyperfocus for 4 hours straight on a complex hobby—but will physically freeze for 3 days over a chore that takes 90 seconds to finish.
Researchers baffled.
ADHD community: "Yeah, we know."
No clinical citation needed—every parent and kid staring at a pile of shoes by the door is the study. Here is why tiny tasks paralyze an ADHD brain, and how to trick yourself (or your kid) into starting.1/6
33
12
261
18,825
Jamie Levy🦉 retweeted
🚒 NEW POD UP! Two Buddy Problem - Episode 117 (Costin is traveling): We dig into the PHP2Shell meltdown and the long tail of pain, broken disclosure embargoes, who found it first, and the AI doomers taking an "I-told-you-so" victory lap.
📺 YouTube
piped.video/watch?v=BxodaPwF…
🍎 Apple Podcasts
podcasts.apple.com/us/podcas…
🎧 Spotify (with video)
open.spotify.com/episode/0Fo…
✍️ Transcript
docs.google.com/document/d/1…
🔎 Find your podcast platform: pod.link/1414525622
1
11
26
2,458
‼️ ok, this might be the first publicly documented, validated PHP2Shell RCE in the wild.
my agent did the analysis, published here: github.com/0x4D31/honeypot-d…
10
45
293
50,613
Jamie Levy🦉 retweeted
These two live to cast themselves as the main characters in a little soap opera of their own making.
It’s not the rise of skynet to find a fucking php vuln and your warnings mean jack when they don’t come with an effective mechanism for replacing technical debt at scale so go ahead and climb up off that cross.
We tried to warn the world and far too often, to be frank, we were yelled at for doing so. “Regulatory capture,” “marketing hype,” “doomer anxiety,” “fear-mongering about open source,” “why don’t you talk about the benefits?”
8
10
94
4,322
Jamie Levy🦉 retweeted
Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor obtaining privileged access to an organization’s cloud infrastructure – including multiple instances where the time from initial targeting to privileged access was less than 3 hours. Microsoft assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multi-tenant application.
microsoft.com/en-us/security…
1
20
58
4,395
Heading to @BSidesAugusta this Saturday, October 24? Catch @Volexity's Director of Research, Andrew Case (@attrc), at 10:00 AM (Track 1 - Plug N Play) for his talk, “Finding Evil Fast: Windows Memory Triage with Volatility 3”.
See the full conference schedule here: pretalx.com/bsidesaugusta-20…
#memoryforensics #dfir #volatility
4
5
849
Jamie Levy🦉 retweeted
I will be speaking at @BSidesAugusta this weekend on rapid triage of Windows systems with @volatility 3! Please come say hello if you will be around.
1
4
3
1,063
Jamie Levy🦉 retweeted
Get on this. He literally wrote one of the foundational documents on DFIR. You cannot learn from anyone better.
I'm working on a unique #DFIR training for next week.
You've never seen anything like it.
It's free. Invite only. But I'll invite anyone interested.
It's the highest professional risk training I've ever attempted.
I'm letting people in my head, in real-time, on a real thing, that can have real effects in the physical world.
Standby for the what, why, where, how....
4
15
218
14,475
Jamie Levy🦉 retweeted
Periodic reminder that for every serious, exploitable vulnerability that you find out about and patch, there was some level of exploitation of it *before* then.
Fascinating. Amazon says it has telemetry showing PHP2Shell was being exploited on Oct. 17—that is, four days prior to public disclosure.
Not known who was doing it. "It remains unclear how the actor acquired exploit information prior to disclosure."
aws.amazon.com/blogs/securit…
1
4
27
1,662
Jamie Levy🦉 retweeted
Someone told me last week to look for “signposts” that might indicate attacks were getting significantly faster and worse than the historical norm. Do you think we’re seeing any of those?
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
11
37
497
22,354
Jamie Levy🦉 retweeted
🤓 Our training Practical AI for CTI (renamed AI Threat Intelligence Bootcamp) is getting an update! You will learn methodologies for hunting adversarial AI agents, AI attackers infrastructure, prompt hunting and more!
The training will be available at @BlackHatEvents Europe (almost sold out) and Black Hat Asia.
I’ll share more updates in the next few weeks!
You can already book for Black Hat Asia! 👇
Cc: @SecurityBreakAI
blackhat.com/asia/training/s…
What's a good class to take for someone who wants to learn more about using AI in threat hunting? I know @fr0gger_ 's class is really good, are there some others that people would recommend?
1
1
8
1,351
What's a good class to take for someone who wants to learn more about using AI in threat hunting? I know @fr0gger_ 's class is really good, are there some others that people would recommend?
7
2
18
3,179
Jamie Levy🦉 retweeted
The PHP team released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to address two remote code execution CVEs. All PHP installations serving web requests are at risk, making patching urgent.
Read our updated blog for the latest: huntress.com/blog/php2shell-…
2
11
50
3,949
We’re officially at capacity! Thank you to everyone who registered for the upcoming @Volexity Cyber Sessions in Amsterdam. Registration is now closed.
If you’d still like to attend, join the waitlist and we’ll notify you if a spot opens up: luma.com/0qtkw49c
We look forward to seeing registered attendees on October 29 for an afternoon of DFIR talks, followed by an evening of dinner, drinks & networking!
#dfir
3
4
620
Jamie Levy🦉 retweeted
phucking patch
php.net/archive/2026.php#202…
github.com/php/php-src/secur…
github.com/php/php-src/secur…
16
146
784
60,824