Smart people who get IT. Contact us: pages.hunterstrategy.net/con… NOW HIRING: #/careers">hunterstrategy.net/#/careers
Washington, DC
- Tweets 1,577
- Following 180
- Followers 710
- Likes 899
Pinned Tweet
In case you've missed it, we have a blog!
Every week, a Hunter Strategy expert shares their tips, opinions, and advice in an article.
These blog posts can help expand your knowledge and give you tools for success!
Read more here: medium.com/hunter-strategy
#blog #hunterstrategy #IT
2
5
TIL: Rotating every credential on your BeyondTrust appliance before evicting the attackers actually gives them a fresh set too. Remote Support CVE-2026-102764 has been exploited since August.
Rebuild first, then rotate.
9
HunterStrategy retweeted
Me, thinking PHP had been largely deprecated, looking around the internets this morning:
10
11
139
3,426
HunterStrategy retweeted
🚨 BREAKING: PHP is warning admins to prepare for emergency security updates tomorrow to fix two critical vulnerabilities rated CVSS 9.2.
However, security researchers at @watchtowrcyber rate the flaws CVSS 10.0 and say they are RCE vulnerabilities affecting PHP 5 through 8.
Information about the vulnerabilities has reportedly leaked ahead of disclosure.
No known exploitation in the wild.
🔗 bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
28
372
1,274
248,646
HunterStrategy retweeted
The number of times I've clicked Restart Now thinking updates were finished while updates were still installing...
I don't understand why we can't grey that option out while updates are in progress. Why is it like this? :(
29
14
156
8,845
Metabase’s "reset password" feature turned out to double as "become admin." It even worked on Metabase’s own cloud. CVE-2026-72898 is on KEV and the PoC is public, so maybe patch before lunch.
56
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
725
1,473
11,575
2,883,136
HunterStrategy retweeted
ConnectWise has an incident with compromise this weekend where they disabled backups in customer M365 environments.
Even if you're not a ConnectWise customer, you likely have third party risk management concerns here for those you do business with who are.
5
8
56
5,508
Funny how the tools we trust to manage everything else keep turning out to be the easiest way in. This time around, it’s pfSense, Metabase, Splunk, BeyondTrust, and FortiGate.
Details here: f.mtr.cool/h5x047yhq0
67
There’s no workaround for CVE-2026-102255. Your options are 12.4.3-03670, 12.5.0-03082, or hoping.
Full story on the blog: f.mtr.cool/o9danyhat4
#SonicWall
78
HunterStrategy retweeted
claude and I coming up with business ideas I know will never go anywhere
1
7
104
12,900
Getting an ATO is like registering a car, except every agency runs its own DMV and some of them are California. New episode of This Is Fine with Chris Sowards. 🎧f.mtr.cool/dwnjt3atjt
32
HunterStrategy retweeted
Today's Breach Please is out - somehow we kept this thing going to episode 50?!
Today we talk about a CVSS 10.0 vulnerability in SonicWall and then extend the discussion into lack of visibility in edge devices more generally. 1/2
2
2
14
3,509
HunterStrategy retweeted
Add a new tool to your cybersecurity toolbox this #CybersecurityAwarenessMonth. The @NIST CSF 2.0 Reference Tool allows users to dynamically explore, filter, and export the CSF 2.0 Core, Informative References, and Implementation Examples: csrc.nist.gov/Projects/cyber…
3
22
92
5,457
HunterStrategy retweeted
Very much experiencing this live as we build @HunterStrategy - our Funance team has built multiple tools in the last year that have transformed our ability to interact and deeply understand financials…and we’re just getting started.
The CFO job has gone from accountant to banker to builder, and the whole finance function is being rebuilt around it:
1. Data stopped being the bottleneck. AI pulls and reconciles data across systems, so teams spend more time acting on numbers instead of chasing them.
2. The finance stack is becoming part of the finance team. AI-native tools stand up in days, pull their own data, and turn a monthly close into a daily one.
3. The rise of the finance engineer. Finance people proficient in Claude Code or Codex are building their own tools.
4. The finance team gets smaller and higher leverage. The old heuristic of finance at 5% of headcount is heading to 2% for the leanest teams.
5. Planning becomes continuous. Usage-based revenue (tokens, API calls) moves too fast for a monthly forecast, so planning shifts from annual budgets to a live view.
6. Controls become a critical feature of the product. Every number an agent touches keeps an audit trail back to its source, and finance still owns sign-off.
7. Finance gets a bigger mandate. Compute spend, people versus software, and build versus buy are now finance decisions.
"The CFO is becoming a builder and architect of the company's operating system... The job is still finance, but more of the job now is designing how finance gets done."
a16z's @seemaamble, @IvanoMakSF, and David Borecky on why you need a new CFO: a16z.news/p/you-need-a-new-c…
1
1
70
HunterStrategy retweeted
We’ve lost an icon. Margaret Hamilton, a computer science pioneer best known for her work at MIT leading development of the flight software for the Apollo missions to the moon, has died at 90. Read about her legacy via MIT News: news.mit.edu/2026/margaret-h…
ALT Margaret Hamilton is reclined inside a NASA spacecraft module, surrounded by control panels and switches.
305
8,848
29,240
1,563,232
HunterStrategy retweeted
How are you monitoring your edge devices to ensure they are not compromised? How are you certain that a firewall implant hasn’t happened and you’re silently passing traffic while you’re FW reports it’s all good.
These are gaps in your program you should be thinking about.
BREAKING: Dutch intelligence says Chinese hackers hold secret source code of proprietary Western hardware and software they target, letting them dig deep into it for weaknesses.
AIVD and MIVD expect attacks on firewalls and VPN gateways to rise sharply in the coming years, with AI speeding up exploitation.
1
52
The government asked for a 10-day code challenge. It came with a weekend in the middle and about 30 days of scope.
🔥This Is Fine | Procurement Theater
New episode on procurement theater, code challenges, and orals:
f.mtr.cool/2f60k9nlzt
1
1
78
HunterStrategy retweeted
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
8
23
86
16,516