Brian Krebs

Someone created a ton of fake LinkedIn profiles for people claiming to be CISOs at Fortune 500 firms. LinkedIn took several down after being notified, but the profiles garnered quite a few CISO connections. Highlights need for more reputation tools on LI. https://lnkd.in/gyHpRkz9 h/t Rich Mason

Spent the past 2 days reading 14 months worth of leaked chats from the Conti ransomware group (so you don't have to). Today's Part I focuses on the group's internal efforts to evade actions by law enforcement & intel agencies. This is a bottomless gold mine. Part II soon.

One of the more interesting graphics I've seen regarding the XZ backdoor is a representation of Jia Tan's commits over time. Notice how the commits in question were done well outside the normal times this user committed code in the past. Does this lend credence to the notion that somehow the Jia Tan account was hijacked? Maybe. Or maybe it just means the attackers got sloppy at the tail end of a 2 year op for unknown reasons, like they were up against a hard deadline that was tied to something happening IRL. I'm curious what the prevailing theory is here.