I respect Gossi’s skills and insight into the environments he knows about, but US public SecOps people are being eaten alive
November 2, 2026 at 1:22 AM
I respect Gossi’s skills and insight into the environments he knows about, but US public SecOps people are being eaten alive
No, they don't run their own data centers. Microsoft owns and runs Stargate, and they lease capacity from Oracle. The only metal they touch is dev/test, and per their disclosures, their SecOps and DevSecOps is a fucking clown show over there.
November 1, 2026 at 6:39 AM
No, they don't run their own data centers. Microsoft owns and runs Stargate, and they lease capacity from Oracle. The only metal they touch is dev/test, and per their disclosures, their SecOps and DevSecOps is a fucking clown show over there.
A practical guide to exporting Google SecOps logs through UDM search, the Data Export API, or the UI, with notes on permissions, raw versus normalized data, and CSV and result-limit constraints.
How to Export Google SecOps Logs for Investigation
A practical guide to exporting Google SecOps logs through UDM search, the Data Export API, or the UI, with notes on permissions, raw versus normalized data…
cyber.hendryadrian.com
October 30, 2026 at 9:00 PM
A practical guide to exporting Google SecOps logs through UDM search, the Data Export API, or the UI, with notes on permissions, raw versus normalized data, and CSV and result-limit constraints.
Chronicle Security Operations update on October 31, 2026 https://docs.cloud.google.com/chronicle/docs/secops/release-notes/#October_31_2026 #googlecloud Basic Mode search This feature is in public preview
November 1, 2026 at 6:40 AM
Chronicle Security Operations update on October 31, 2026 https://docs.cloud.google.com/chronicle/docs/secops/release-notes/#October_31_2026 #googlecloud Basic Mode search This feature is in public preview
Google SecOps Log Exporting: UDM Search, Data Export API, and UI Workflows + Video
Introduction: Making Security Telemetry Accessible Google Security Operations (Google SecOps) provides multiple ways to extract security telemetry for investigation, threat hunting, incident response, compliance,…
Introduction: Making Security Telemetry Accessible Google Security Operations (Google SecOps) provides multiple ways to extract security telemetry for investigation, threat hunting, incident response, compliance,…
Google SecOps Log Exporting: UDM Search, Data Export API, and UI Workflows + Video
Introduction: Making Security Telemetry Accessible Google Security Operations (Google SecOps) provides multiple ways to extract security telemetry for investigation, threat hunting, incident response, compliance, and external analytics. Security teams can export logs through Unified Data Model (UDM) searches, the Data Export API, or the platform's graphical interface. However, choosing the correct export method requires understanding the differences between normalized and raw data, access permissions, output formats, and platform-imposed result limits.
undercodenews.com
October 30, 2026 at 10:58 PM
Google SecOps Log Exporting: UDM Search, Data Export API, and UI Workflows + Video
Introduction: Making Security Telemetry Accessible Google Security Operations (Google SecOps) provides multiple ways to extract security telemetry for investigation, threat hunting, incident response, compliance,…
Introduction: Making Security Telemetry Accessible Google Security Operations (Google SecOps) provides multiple ways to extract security telemetry for investigation, threat hunting, incident response, compliance,…
AI agents IT SecOps Sales Tonight. (1/5) https://greyflows.com/use-cases
October 29, 2026 at 4:51 AM
AI agents IT SecOps Sales Tonight. (1/5) https://greyflows.com/use-cases
Maybe my grammar failing to parse, it could you clarify what you mean my “pushing out”? Could mean “hastily enacting” or “removing” - I think you mean the latter but wanted to be sure. Would love to use this mini thread in next week’s SecOps Weekly show - mirrors our points nicely.
October 28, 2026 at 7:37 PM
Maybe my grammar failing to parse, it could you clarify what you mean my “pushing out”? Could mean “hastily enacting” or “removing” - I think you mean the latter but wanted to be sure. Would love to use this mini thread in next week’s SecOps Weekly show - mirrors our points nicely.
This is pretty much how I learned my AI workflow. 👍 One thing I found useful, is create memory-less agents and give them roles like CEO, SecOps, etc. For fun I give them some character, 'elaborating architect', 'gruff but fair CEO'. For some reason AI seems to keep the perspective separate better.
October 31, 2026 at 2:01 PM
This is pretty much how I learned my AI workflow. 👍 One thing I found useful, is create memory-less agents and give them roles like CEO, SecOps, etc. For fun I give them some character, 'elaborating architect', 'gruff but fair CEO'. For some reason AI seems to keep the perspective separate better.
Babe wake up, new Linux Kernel CVE just dropped
thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#security #secops #hacks #linux
thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#security #secops #hacks #linux
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
thehackernews.com
October 30, 2026 at 9:20 AM
Babe wake up, new Linux Kernel CVE just dropped
thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#security #secops #hacks #linux
thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#security #secops #hacks #linux
Mozilla is hiring a Senior Security Engineer - SecOps at SEK 512,925–SEK 683,900/yearly.
Sweden · remote
open source/privacy/safety · salary listed · remote · posted 1d ago
Apply: https://jobicy.com/jobs/157401-senior-security-engineer-secops
Sweden · remote
open source/privacy/safety · salary listed · remote · posted 1d ago
Apply: https://jobicy.com/jobs/157401-senior-security-engineer-secops
October 28, 2026 at 4:08 PM
Mozilla is hiring a Senior Security Engineer - SecOps at SEK 512,925–SEK 683,900/yearly.
Sweden · remote
open source/privacy/safety · salary listed · remote · posted 1d ago
Apply: https://jobicy.com/jobs/157401-senior-security-engineer-secops
Sweden · remote
open source/privacy/safety · salary listed · remote · posted 1d ago
Apply: https://jobicy.com/jobs/157401-senior-security-engineer-secops
Standard guest access doesn't stay restricted for long if misconfigured. Here is how privilege escalation leads to full server takeover and how to stop it. Full analysis at klytron.com #Cybersecurity #PrivilegeEscalation...
#klytron #cybersecurity #infosec #privilegeescalation #secops #klytron
#klytron #cybersecurity #infosec #privilegeescalation #secops #klytron
October 31, 2026 at 4:01 PM
Standard guest access doesn't stay restricted for long if misconfigured. Here is how privilege escalation leads to full server takeover and how to stop it. Full analysis at klytron.com #Cybersecurity #PrivilegeEscalation...
#klytron #cybersecurity #infosec #privilegeescalation #secops #klytron
#klytron #cybersecurity #infosec #privilegeescalation #secops #klytron
SOC Prime says LogTotal now automatically detects formats and maps fields for exports from Google SecOps, CrowdStrike, MDE, and Sentinel. The tool also sanitizes parsed events locally in the browser before upload.
SOC Prime’s LogTotal Adds Support for Four SIEM and EDR Platforms
SOC Prime says LogTotal now automatically detects formats and maps fields for exports from Google SecOps, CrowdStrike, MDE, and Sentinel. The tool also…
cyber.hendryadrian.com
October 30, 2026 at 2:12 AM
SOC Prime says LogTotal now automatically detects formats and maps fields for exports from Google SecOps, CrowdStrike, MDE, and Sentinel. The tool also sanitizes parsed events locally in the browser before upload.
Chronicle Security Operations update on October 29, 2026 https://docs.cloud.google.com/chronicle/docs/secops/release-notes/#October_29_2026 #googlecloud Operations in Emerging Threats Center General Availability The Operations feature in the Emerging Threats Center feed is
October 30, 2026 at 6:20 AM
Chronicle Security Operations update on October 29, 2026 https://docs.cloud.google.com/chronicle/docs/secops/release-notes/#October_29_2026 #googlecloud Operations in Emerging Threats Center General Availability The Operations feature in the Emerging Threats Center feed is
AI agents IT SecOps Sales Tonight. (1/5) https://greyflows.com/use-cases
October 27, 2026 at 4:29 PM
AI agents IT SecOps Sales Tonight. (1/5) https://greyflows.com/use-cases
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
www.darkreading.com
October 27, 2026 at 6:22 PM
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
The atlas and phone number comparison is the useful part. Those skills faded because practice moved elsewhere, not because they were useless. The same risk sits in SecOps when AI takes over the daily reps that keep core capabilities sharp.
October 30, 2026 at 10:40 PM
The atlas and phone number comparison is the useful part. Those skills faded because practice moved elsewhere, not because they were useless. The same risk sits in SecOps when AI takes over the daily reps that keep core capabilities sharp.
⚡ Remote Senior Security Engineer – SecOps at Mozilla.
✅ Apply here: https://jobicy.com/jobs/157401-senior-security-engineer-secops
#RemoteJobs #CyberJobs #ApplicationSecurity #InfoSec #Cybersecurity
✅ Apply here: https://jobicy.com/jobs/157401-senior-security-engineer-secops
#RemoteJobs #CyberJobs #ApplicationSecurity #InfoSec #Cybersecurity
Remote Senior Security Engineer – SecOps at Mozilla - Jobicy
Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering...
jobicy.com
October 27, 2026 at 2:22 PM
⚡ Remote Senior Security Engineer – SecOps at Mozilla.
✅ Apply here: https://jobicy.com/jobs/157401-senior-security-engineer-secops
#RemoteJobs #CyberJobs #ApplicationSecurity #InfoSec #Cybersecurity
✅ Apply here: https://jobicy.com/jobs/157401-senior-security-engineer-secops
#RemoteJobs #CyberJobs #ApplicationSecurity #InfoSec #Cybersecurity
I remember one of the OG SecOps complaints about JavaScript is that it's mystery meat that is just downloaded and executed without necessarily knowing what it's doing.
I wonder if any of the ones holding that opinion have bothered to create an LLM-enabled inspector & observer to assess scripts yet?
I wonder if any of the ones holding that opinion have bothered to create an LLM-enabled inspector & observer to assess scripts yet?
October 28, 2026 at 3:16 PM
I remember one of the OG SecOps complaints about JavaScript is that it's mystery meat that is just downloaded and executed without necessarily knowing what it's doing.
I wonder if any of the ones holding that opinion have bothered to create an LLM-enabled inspector & observer to assess scripts yet?
I wonder if any of the ones holding that opinion have bothered to create an LLM-enabled inspector & observer to assess scripts yet?
#TechiesJournal #Cybersecurity #NetworkSecurity #FirewallSecurity #InfoSec #IncidentResponse #ThreatIntelligence #SecOps #IdentitySecurity #BlueTeam #SystemAdministration #ITSecurity #CyberResilience #PrasadKukkala
www.techiesjournal.com/firewall-con...
www.techiesjournal.com/firewall-con...
Your Firewall Config Is a Password File: What Leaves With It and What to Rotate
Researchers say one actor copied firewall configuration files and used the saved logins to walk into company networks. Here is what a config file holds, why a patch does not fix that, and what to rota...
www.techiesjournal.com
October 30, 2026 at 2:37 AM
