Get short, timely messages from Richard Bejtlich.

Twitter is a rich source of instantly updated information. It's easy to stay updated on an incredibly wide variety of topics. Join today and follow @taosecurity.

Get updates via SMS by texting follow taosecurity to 40404 in the United States
Codes for other countries

Country	Code	For customers of
Two-way (sending and receiving) short codes:
Australia	0198089488 Telstra
Canada	21212 (any)
United Kingdom	86444 Vodafone, Orange, 3, O2
Indonesia	89887 AXIS, 3, Telkomsel
Ireland	51210 O2
India	53000 Bharti Airtel, Videocon
Jordan	90903 Zain
New Zealand	8987 Vodafone, Telecom NZ
United States	40404 (any)

taosecurity

@toddheberlein @tigercat6795 @mandiant it's in Redwood City. At some point when I'm visiting it I would be happy to host you. 12:36 PM May 26th via Twitter for iPhone in reply to toddheberlein
4n6ir I suspect we'll start seeing soft token cloning attacks in the very near future. Of course it won't be acknowledged until it's too late. 7:36 AM May 26th via web Retweeted by taosecurity and 11 others
Refusing to halt Facebook trades reminds me of asset owners refusing to implement short term incident containment for a compromised system. 5:49 AM May 26th via Twitter for iPhone
"Why didn't you just halt the stock?" This reads like an incident response gone bad. Need to extract lessons for blog. finance.yahoo.com/news/insight-m… 4:48 AM May 26th via Safari on iOS
Finally you might want to read @Mandiant M-Trend reports showing our client categories. They list targeted threat victims and tech types. 6:46 PM May 25th via Twitter for iPhone
I mentioned the Chinese five year plans as sources for their statements on targeted tech. Wikipedia has summary, links. en.wikipedia.org/wiki/Five-year… 6:44 PM May 25th via Safari on iOS
Next is the US China commission reports; recommend starting with the most recent Annual report to Congress. uscc.gov 6:42 PM May 25th via Safari on iOS
Note how DSS only talks "regions" doing "collection," e.g., "east Asia & the Pacific" is code for China, cited as worst offender (surprise). 6:39 PM May 25th via Twitter for iPad
Next is Defense Security Service report "Targeting U.S. Technologies: A Trend Analysis Reporting from Defense Industry" dss.mil/isp/count_inte… 6:37 PM May 25th via Safari on iOS
First is the site hosting the NCIX reports describing Chinese and Russian digital espionage. Read 2011 edition first. ncix.gov/publications/r… 6:29 PM May 25th via Safari on iOS
At the @forrester panel today I promised @rickhholland and @Kindervag I would provide links to the sources I mentioned, so I'll do that. 6:27 PM May 25th via Twitter for iPad
Devils power play goal where all five players passed the puck was one of the most amazing sequences I've ever seen in hockey. #NHL 5:36 PM May 25th via Twitter for iPhone
@rickhholland thanks Rick and @kindervag for inviting me to speak on your panel. Nice to see @Mandiant colleagues too. 3:18 PM May 25th via Twitter for iPad in reply to rickhholland
I'm not trading Facebook but I found the math in this article to be interesting. $13.80 is "fair?" We'll see. marketwatch.com/story/facebook… 9:36 AM May 25th via Safari on iOS
adschina List of US government cyber breaches & failures from Paul Rosenzweig and Heritage heritage.org/research/repor… 3:59 PM May 24th via Safari on iOS Retweeted by taosecurity and 5 others
@remor @Bro_IDS People, you need to watch Seth's talk just to see the new playoff beard he's rocking. I'm jealous!! 1:01 PM May 24th via web in reply to remor
tgjelten I talk to CIA analysts: They take heat for not saying Iran builds nukes, but they had bad Iraq experience Via @nprnews n.pr/JUF0ny 3:22 PM May 23rd via Tweet Button Retweeted by taosecurity and 1 other
Anyone use @blogshares ? I found my account recently and remembered my blog was listed blogshares.com/blogs.php?blog… What to do now? 2:12 PM May 23rd via web
@explanoit I wrote a post using that title taosecurity.blogspot.com/2009/07/you-do… in 2009 when I realized high profile sec people weren't aware of the issue. 1:50 PM May 23rd via web in reply to explanoit
@tigercat6795 Welcome aboard the @mandiant team! Nice to see you this week. Looking forward to seeing you run our new SOC in California. 8:49 AM May 23rd via web in reply to tigercat6795

Name Richard Bejtlich
Location Metro DC
Web http://taosecurit...
Bio Chief Security Officer, MANDIANT. TaoSecurity blogger. Author. Black Hat instructor.