ThinkstCanary
@thinkstcanary.canary.tools
Know. When it matters. https://canary.tools
It’s no secret that adversaries love (ab)using security tooling . So.. Rad just shipped our latest Canarytoken to exploit this: a CrowdStrike API Key Canarytoken! Attackers who find it, have to use it - and when they do, they expose themselves. blog.thinkst.com/2026/02/intr...
The best thing about Canaries & Canarytokens, is when they surprise you: "printed some and put them round the office" "but then they were put into the bin, and at 21:43 someone scanned them… looks like this place has dumpster divers" "never thought that was still a thing"
You can grab the latest copy of our quarterly security research roundup at thinkst.com/ts ¹ For this issue, we selected work from over 1,370 talks & 1,200 blog posts. Available as PDF, ePUB (or audio highlights) __ ¹ As always, completely free
We've always been all about the love.. From all of us, to all of you 💚💚💚
This week's show is up on YouTube (presented by Thinkst Canary @thinkstcanary.canary.tools) WATCH www.youtube.com/watch?v=fvKM...
From Epstein to Notepad++: Redactions, Zero-Days and Supply Chain Attacks
YouTube video by Three Buddy Problem
youtube.com
these guys. always full of adorable surprises. love @thinkstcanary.canary.tools 💚 cc @haroonmeer.canary.love
The org. running the SA Computer Olympiad ran out of money & shut it down.. So we bought it from them¹ The Olympiads will run as normal in 2026 (and hopefully we will make 'em run even better going forward). 2026 Registration is Open (www.olympiad.org.za) __ ¹ www.itweb.co.za/article/comp...
Prevention alone isn't enough. In real networks, credentials leak, assets sprawl, and blind spots exist. Canaries provide high-confidence early detection of internal movement. I wrote some stuff here: clarkee.co.uk/assume-breac... @thinkstcanary.canary.tools
Assume Breach, Detect Early: The Power of Canaries
Why canary signals outperform conventional detection and reduce mean-time-to-discovery
clarkee.co.uk
You can grab our Q3-2025 issue of ThinkstScapes at thinkst.com/ts For this issue, we tracked over 1,500 talks/papers, and almost 1,300 security blog posts. As always, available in PDF, ePub or a brief audio summary. (As always: completely free).
You can catch our @haroonmeer.canary.love on this weeks episode of Risky Business complaining about security vendors approach to security. It's worth a listen. risky.biz/RB814/
Risky Business #814 -- It's a bad time to be a scam compound operator - Risky Business Media
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:* The KK Park scam compound in Myanmar [Read More]
risky.biz
Every year, we try to give our customers a small gift from Thinkst Canary. Previously we did the Canary Swiss Army Knives¹. This year, it's the awesome Mako kit from iFixit All told, we've shipped just under a ton of them 🤯 __ ¹ x.com/ThinkstCanar...
This quarter we announced two new platforms for Canary: Oracle Cloud Infra. (OCI) & Nutanix. Our v1 was a hardware device, but today, Canary also runs on - GCP, - AWS, - VMware, - Azure, - Docker, - Tailscale, - OCI, - Nutanix. Still dead simple. Still "just works!"
US-EAST-1 (AWS) is currently "degraded". This affects the following Canary services directly: - Creating AWS Canarytokens (both free and commercial) ; - Launching new Tailscale Canaries. Sorry! We will send a message when service returns to normal.
Leighton & Sharukh just snuck a quick update into canarytokens.org to allow you to easily manage all the tokens you've previously created. Still just $0.00 Still one of the best things you can do to detect attackers before they dig in...
Thanks @thinkstcanary.canary.tools for making this awesome platform! 🙌 If you still haven't read my blog post, here it is: grafana.com/blog/2025/08...
Today we released our new (free) AWS Infrastructure Canarytoken on canarytokens.org. It catches attackers in your AWS account by putting tempting assets in their way and alerting you if they get probed. (1 of 3)
Introducing keynote spreaker: Marco Slaviero! 🚀 A #PyConZA veteran and the ingenious CTO of ThinkstCanary, Marco is redefining the security landscape. Don't miss out on his insights! Grab your ticket today: za.pycon.org/tickets @marcoslaviero.bsky.social @thinkstcanary.canary.tools
Most of the company is in CapeTown this week for our annual ThinkstCon. This means lots of green stuff, and lots of padel. 💪💚
It's our birthday, so we created a tiny skunk(worksy) game for you to play.. Complete all 7 continents, and we will send you a limited-edition, 10-year t-shirt. Have fun!! (but watch out for the Canaries) canary.tools/10-year
In April this year, @grafana.bsky.social had a security incident due to an insecure GitHub Action. The attackers even tried covering their tracks. How were they discovered? Canarytokens.. Check out their post¹ on how they use our tokens at scale.. __ ¹ grafana.com/blog/2025/08...
Canary tokens: Learn all about the unsung heroes of security at Grafana Labs | Grafana Labs
Learn why the use of canary tokens let us spot a recent intrusion and swarm quickly in response, and find out why you should be using canary tokens to prevent serious security incidents in the future.
grafana.com
How do you know you're compromised? Read my newest article to see how we used canary tokens to detect an attack on our infrastructure. grafana.com/blog/2025/08...
Canary tokens: Learn all about the unsung heroes of security at Grafana Labs | Grafana Labs
Learn why the use of canary tokens let us spot a recent intrusion and swarm quickly in response, and find out why you should be using canary tokens to prevent serious security incidents in the future.
grafana.com
"We had good success with your canaries at ..." "I would like to intro my (new) team at ...." 10 years in && we still do 0 outbound sales. We've had the best customers since day-1! 💪💚
A friendly reminder from your Canary Console that if you are in the Northern Hemisphere, you can probably check out the Perseid meteor shower this week.. 💪💚💫
just when you thought @thinkstcanary.canary.tools couldn't get any cooler they go and do this 🥹🌠💚 omggggg i love it www.space.com/32868-persei...
BlackHat boothing was great. We got to hang-out with customers & chat Canary with a bunch of new folks.. Our booth has changed, our tech has levelled up (by orders of magnitude) but it's the same price¹ as always, & still "just works!" __ ¹ Still never increased prices since year-1
The 2025, Q2 edition of ThinkstScapes is now available for download¹ at thinkst.com/ts If you are in Vegas for BlackHat, swing by our booth for a hard copy. This edition tracks "over 1,450 talks & papers & almost 1,400 blog posts" __ ¹ As always, completely free
