Tony/Humpty (CJ)
@c-b.io
Lead SOC analyst | Malware enjoyer | Horrible dev
Ayo nerds, working less has been the best thing to happen to me in a while. MORE RESEARCH. c-b.io/cases/ransom...
Cloudy With A Chance Of Compromise: How A Skid Ransoms Your Buckets
Encrypting 250GB of S3 data with basic app permissions and barely leaving a trace. The skid approach to cloud ransomware and why your SOC probably wouldn't catch it.
c-b.io
Hey nerds, I'm still alive! Dropped a new blogpost today c-b.io/cases/s3-squ... An unnamed company probably won't be happy I mentioned this lol
New blogpost is out! This time we're getting SaaSy 💅 c-b.io/getting-saas...
Getting SaaSy with SIEMs - Introduction - Humpty's Blog
A field guide for SOC analysts drowning in SaaS audit logs. Learn how to turn nested JSON chaos into usable detections: normalization, stacking, common SaaS logging pitfalls, and how to avoid the clas...
c-b.io
Yo! Kinda forgot to post here but I created irchaos.club. I'll let yall discover it :)
Incident Response Chaos Club
Incident Response Chaos Club - embracing the chaos of cybersecurity through DFIR, incident response, and security research.
irchaos.club
Extremely grateful to have had the opportunity to not only give my first talk today but to do so alongside Josh Reynolds from @invokereversing.bsky.social In case you missed it, you can find our slides on GitHub here github.com/CoveoSec/tal...
Had a fantastic turnout for our talk at BSides Toronto about the scavenger malware today! Huge thanks to @c-b.io for co-presenting and thank you to everyone for attending!
A reminder that @c-b.io and Joshua Reynolds will be speaking at BSides Toronto this Sunday (Oct 5th) at 11:45AM about the Scavenger NPM supply chain attack. See you there!
We are excited to announce that our founder Joshua Reynolds and @c-b.io have been accepted to speak at BSides Toronto with their talk titled "When Prettier Gets Ugly: The Scavenger Supply Chain Campaign" more info here: pretalx.com/bsides-toron...
We did a full technical blog on the NPM eslint-config-prettier supply chain compromise that was used to distribute the Scavenger malware with @c-b.io check it out! invokere.com/posts/2025/0...
Scavenger Malware Distributed via eslint-config-prettier NPM Package Supply Chain Compromise
Technical blog detailing the eslint-config-prettier supply chain compromise used to distribute Scavenger malware
invokere.com
Hey folks! Here's my first technical deep-dive into a PE malware sample that touches on why including more information/proofs in threat intelligence reports is important. c-b.io/2025-06-29+-...
2025-06-29 - Supper is served - Tony/Humpty's RE blog
Recommend song to listen to while reading: If you find something off with what I say, please let me know. I'll gladly amend my content and credit you for the fix. Some thanks in alphabetical order
c-b.io
Yo nerds, if you're thinking about deploying canaries please read this deceptiq.com/blog/rethink...
Rethinking Deception: Why We're Moving from Product to Enablement
After years of building deception technology and watching SOC teams struggle with yet another dashboard, we've made a fundamental shift in how we deliver cyber deception.
deceptiq.com
In sum: an economically illiterate "conservative" institutes the biggest tax hike in history in an effort to revive the policies that led to the Great Depression. Cool.
CALLING ALL INCIDENT RESPONSE NERDS, MY TEAM IS LOOKING FOR A FRIEND www.coveo.com/en/company/c...
SOC Analyst | Province of Quebec (Canada) | Coveo
Here you'll find jobs in corporate cybersecurity, business law, corporate law, labor law, compliance and others!
coveo.com
Hello fellow nerds, here's my latest blogpost on how BlankGrabber targets Discord by injecting malicious JS to steal credit card info c-b.io/blog/dissect...
Dissecting a fresh BlankGrabber sample
Dissecting a fresh BlankGrabber sample BlankGrabber is nothing new. It’s been documented by multiple companies such as ThreatMon, K7Security and has even had it’s source code disclosed on GitHub. So w...
c-b.io
Does anyone know what's up with these brand spanking new youtube accounts posting bogus seed phrases here? Whats the scheme? 🤔
Do I have a ESC/POS nerd here? In desperate need of help to print f*cking nv bit images on a shitty rongta printer that's supposed to emulate the EPSOM ESC/POS spec. I'll pay a beer in exchange (the price of a beer in your country)
Absolutely insane video by @backwoodideas.bsky.social. I have no clue _why_ he would do something but he did and it turned out fucking amazing lol TL;DR: data transmission over a tincan phone. Very Michael Reeves pilled youtu.be/zUqPqg2jjro?...
This Video Was Uploaded Through a Fishing Line
YouTube video by Backwood
youtu.be
C++23 has "first-class UB": you, the language user, can make promises and let the program enter UB if you break them. int f(int x, int y) { [[assume(x == 27)]]; [[assume(x == y)]]; return y + 1; // May be optimised to `return 28`. }
Part 1 of my blogpost titled "Threat hunting for shits and giggles" is out! This is my very first blogpost of the kind so I'd really appreciate feedback :) Quick shoutout to @hunt.io for their pretty cool tool c-b.io/blog/threat_...
Threat hunting for shits and giggles [Part 1]
Threat hunting for shits and giggles [Part 1] I’ll start by saying this post is not endorsed by hunt.io. I just happen to be a really big fan of what they’re doing. Some hackers suck at OpSec Not all ...
c-b.io
So I most likely botched this but here's the latest decompiled XWorm source code: github.com/cyb3rjerry/x...
GitHub - cyb3rjerry/xworm-source: Decompiled-ish XWorm source code (most likely uncompilable)
Decompiled-ish XWorm source code (most likely uncompilable) - cyb3rjerry/xworm-source
github.com
