Submitted a talk about detection-as-code to the @nsec.io Call for Papers! You have until feb 2nd if you’re interested in submitting :)

🎅h0h0h0day CTF tickets are now on sale! 🎅 The idea is simple: Create a CTF challenge, send it to us, then solve other participant’s challenges in a festive ambiance! 🍕 and 🍺 offered thanks to NorthSec! 🎟️ h0h0h0dayctf2025.eventbrite.com/ 📜 montrehack.ca/2025/12/16/h...

🔗 Conférence complète/Full Talk: youtu.be/pq0NMN9HHOY 🎟️ Billets/Tickets NorthSec 2026: nsec.io #NorthSec #cybersecurity #infosec

NorthSec 2025 - Wendy Nather - Keynote: A Tabletop As Big As the World

YouTube video by NorthSec

youtu.be

Learning about color mapping and LUT (cube files) and trying all sorts of ffmpeg tricks to make bland videos look good at 2 am.. Yup, it's about @nsec.io and trying to leverage cool video shots that we were given for free, but they were raw... Then you realize a phone does a lot of work for you...

I worked on a thing at work. One small cog in a huge team effort. www.newswire.com/news/flare-l...

Flare Launches Identity Exposure Management to Combat 50 Million Weekly Breached Identities and Stop Account Takeovers in Seconds

New solution enables organizations to detect, validate, and remediate leaked credentials and active sessions - before attackers strike.

newswire.com

Quick analysis of today's chalk / npm supply chain story. It requires the `window` object so it needs to be deployed and run in a browser. It means front-end projects would only be affected if the site itself was a cryptocurrency website. CLI projects unaffected. 1/3

📸 𝗟𝗲𝘀 𝗽𝗵𝗼𝘁𝗼𝘀 𝗼𝗳𝗳𝗶𝗰𝗶𝗲𝗹𝗹𝗲𝘀 𝗱𝗲 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟱 𝘀𝗼𝗻𝘁 𝗱𝗶𝘀𝗽𝗼𝗻𝗶𝗯𝗹𝗲𝘀! • 𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟱 𝗣𝗵𝗼𝘁𝗼𝘀 𝗔𝗿𝗲 𝗢𝘂𝘁! Revivez les meilleurs moments de NorthSec avec notre album photo officiel! ⚓️ photos.app.goo.gl/bMCHe366jdP1...

My advice for people who are applying to big conference for abstracts are: imagine that your reviewer is under a deadline of less than twelve hours and they are deeply deeply angry. Write to impress that person, but write the talk you'd be proud to give.

Here is all the cool stuff I brought back from @bsideslv.org, @blackhatofficial.bsky.social and @defcon.bsky.social. Was thrilled to do the trio! Chrono order: Sponsor at BSides LV, speaking at BlackHat USA and DEFCON. I wasn't even trying to bring stuff back, it just happened! 🙏 cool people I met!

I caught up on a lot of tasks tonight, but I still haven’t written my post–HackerWeek LinkedIn update or caught up on the NorthSec Slack and emails 🙃

Met @malwarejake.bsky.social in real life! Glad I got to talk to him about Estelle and I recent work on stealer logs with incident response use cases

Look at this nice hardware badge! Real filament tubes!

Free give-aways all week during Hacker Summer Camp! I'll be at the Flare booth during @bsideslv.org, I'll be roaming around and giving a talk at @blackhatofficial.bsky.social (brag) and I'll also be roaming around + giving a talk at @defcon.bsky.social (brag). Come and see me. Let's chat! Cheers

🔐 This could reshape privacy engineering. Google open-sourced their zero-knowledge proof (ZKPs) age verification libraries on Jul 3 called "Longfellow" letting you prove you're 18+ without revealing birthdate, name, or any PII. blog.google/technology/s... (1/8) 🧵

Opening up ‘Zero-Knowledge Proof’ technology to promote privacy in age assurance

Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.

blog.google

Missing the NorthSec community already? We made you a starter pack to help you quickly find us on Bluesky! Saw someone missing from this starter pack? Let us know! go.bsky.app/JZeo2ad

A dream come true: I wrote POC-level code that I thought would be a good addition to our platform, and someone rewrote it and integrated it. We are now protecting more customers automatically with it! Now onto the next POC!

Another law enforcement takedown announced today. Operation Deep Sentinel targeted the Archetyp darknet forum (drug). These takedown videos keep getting better! Go watch: operation-deepsentinel.com

I have two student tickets to give away for BlackHat USA as part of their student scholarship program: www.blackhat.com/us-25/speake.... Let me know if you are interested.

Black Hat

Black Hat

blackhat.com

Wanted to show a snippet of how I made the mechanical component of the #Northsec 2025 slot machine for the CTF www.youtube.com/watch?v=WCLc...

Northsec 2025 Slot Machine Mech Assembly [Preview]

Quick 60 seconds summary of the assembly process of for the lever of the slot machine

youtube.com

Estelle Ruellan and I were accepted at BlackHat USA!! "Hackers Dropping Mid-Heist Selfies: LLM ldentifies Information Stealer Infection Vector and Extracts loCs" Couldn't be happier sharing what we did on a worldwide stage! p.s.: picture of us celebrating from Botconf after our talk today #BHUSA

NorthSec is delivered. It was an incredible edition! Great keynotes, our best party so far and our world-class in-person CTF scenario and huge set of diverse and accessible challenges were a great success! I didn't take much photos, I'll report back later. ✈️🇫🇷 to botconf now! 😅

Quite a few SAO to solder and collect this year at Northsec 😍 See you Thursday

80+ volunteers have worked on this all year. It's time for another NorthSec and it's going to be epic!

Forget about the waitlist! 😎 You can once again buy tickets for the CTF. 🤩💫 Hurry up, the limit to buy tickets is may 12th! This edition will be our biggest to date, be it in physical tracks, number of challenges and integration with the scenario. ⛴️⚓ tickets.nsec.io/2025/ #ctf #nsec2025 #infosec

NorthSec 2025

May 10th – 18th, 2025

tickets.nsec.io

Achievement unlocked: presenting on a cinema screen The movie starts in 15 minutes in theatre 14! Thanks @bsidessf.org for having me!

On my 4th day in Europe I finally woke up at a normal hour. And unfortunately it is my last full day here 🙃 I'll be in San Francisco Friday. I wonder how I'll hold this weird schedule...

Due to work travel, I had to vote in advance this year. The ballot is in 🗳️☑️ The experience was quite smooth. A 5 minute wait maybe. Now I hope my candidate and his leader don't do anything extremely stupid until the actual vote date 😆

⚠️ Freezing CTF registrations soon ⚠️ There are about 40 garanteed tickets left for the CTF. When this limit is reached, we'll open a waitlist. If you have not bought your CTF ticket yet, hurry up! And don't hesitate to register on the waitlist when it opens. tickets.nsec.io/2025/

NorthSec 2025

May 10th – 18th, 2025

tickets.nsec.io

I’m looking for on-demand virtual lab platforms that can spin up full Active Directory environments (8 vCPUs, 64GB RAM, nested virt). It needs to support complex enterprise scenarios to showcase Remote Desktop Manager with other Devolutions products. Any recommendations? 🙏

AtlSecCon is an incredible event! That's it. That's the post.