Chester Wisniewski 🇨🇦

Director, Global Field CISO at Sophos, frequent speaker and press go to. Said opinions are mine, not the company.

Co-host of the Security Take(s) Two (securitytaketwo (npub184g…l4x7)) podcast.

Website: https://www.chesterwisniewski.com/about/
Location: Vancouver Canada
Pronouns: He/Him

Public Key

npub1utwaxpsusk8wvswl6gkgctncppc8rfnunvuh35wyvxlx8p2mt6zq04c23y

NIP-05 Address

chetwisniewski_at_securitycafe.ca@momostr.pink

Profile Code

nprofile1qqsw9hwnqcwgtrhxg80aytyv9euqsur35e7fkwtc68zxr0nrs4d4apqppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7c5d58g

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub1utwaxpsusk8wvswl6gkgctncppc8rfnunvuh35wyvxlx8p2mt6zq04c23y

Show more details

Last Notes

2026-08-19 00:48:19 UTC

- reply

I'm not saying it is Russia but...

2026-08-19 00:48:00 UTC

- reply

This pattern somewhat matches earlier years. Very quiet in January (Russian Orthodox Christmas) and quiet in August as well, presumably the summer holidays at their dachas.

2026-08-19 00:44:31 UTC

- reply

I've pulled the data for 2026 and a somewhat random sampling of countries most frequently targeted by ransomware. The first includes the USA, which is always dominant as a victim country. I removed the USA for the second and only included CA, UK, DE, FR, IT, AU, and IN.
This is simply the public posts and doesn't include victims who may have paid before being exposed or were never publicly extorted.
I sourced this from the Sophos CTU (Cyber Threat Unit).
#InfoSec #Ransomware
https://securitycafe.ca/system/media_attachments/files/117/119/389/836/131/842/original/ffba03a726358b7a.png
https://securitycafe.ca/system/media_attachments/files/117/119/390/892/656/261/original/cc84bed9b3c1a6c8.png

2026-08-18 18:16:20 UTC

- reply

I'm checking with them now. I know we scrape any victim posts from the main ransomware actors over time, but my knowledge of what is stored in which database is not current sobi am asking for help. I think we store the amount of data, the country, etc.

2026-08-18 14:41:09 UTC

- reply

our CTU team should have the historic data for public leak site postings, I'll ask them to take a look.

2026-08-01 00:19:00 UTC

- reply

Thank you, was delicious
https://securitycafe.ca/system/media_attachments/files/117/017/379/343/929/691/original/52872575536c94e0.webp

2026-07-26 00:25:09 UTC

- reply

Can you share the recipe, that looks amazing?

2026-07-22 02:11:20 UTC

- reply

That's some damned fine looking produce!

2026-07-07 21:50:01 UTC

You can tell when the mounties are truly at work as they wear their safety vests instead of their red dress uniforms.
#Canada #FIFA #SportsBall
https://securitycafe.ca/system/media_attachments/files/116/880/893/683/186/523/original/5d3f1d40a88710fd.png

2026-06-06 01:25:06 UTC

- reply

I heard it was 53,412. The same as the number of r's in strawberry.

2026-05-14 22:07:05 UTC

Simon Fraser University, in beautiful Burnaby, British Columbia, Canada is looking for an Information Security Analyst. More info: https://tre.tbe.taleo.net/tre01/ats/careers/v2/viewRequisition?org=SIMOFRAS&cws=37&rid=7100
#FediHire

2026-03-20 22:24:08 UTC

RE: https://mastodon.social/@campuscodi/116263819407575175
That's right folks, it is now easier to buy a firearm than to load open source software on your phone in America.
#note1ghr…729r

2026-03-02 23:33:59 UTC

- reply

Not to diminish your point, but if that was only the dumbest thing an airline had done this hour we would all be far better off.

2026-02-07 21:51:51 UTC

Are there any artists on here I can commission a couple of logos from?

2026-01-24 00:47:34 UTC

RE: https://masto.ai/@meduza_en/115945545503793016
Is this the first time I have ever agreed with the Kremlin?
#note1r08…3ehw

2025-11-19 21:31:17 UTC

- reply

this is consistent with our Active Adversary Report. We are working on the next one now, but no signs of AI anything.

2025-10-24 20:05:39 UTC

I wish I had a nickel for every time I hear someone say this. It's just patently not true unless you are running the worst security program imaginable.
Who has only one layer of defence? Who does NO monitoring?
We have been talking about defence in depth for... 30 years?
FUD doesn't help anyone. It isn't selling more product and it isn't making your crappy paper any more important.
https://securitycafe.ca/system/media_attachments/files/115/430/925/578/287/557/original/640965c5c379633f.png

2025-10-16 22:33:18 UTC

- reply

Worth a shot :) Certainly interested if you see more. I will reach out to some friends at the GOOG and see if they can help.

2025-10-16 22:31:14 UTC

@npub1lcc…lcye Any chance you have any of those HEIF spam samples you mentioned last week? I'm interested in doing some testing, but don't have any in my spam trap.

2025-07-31 02:17:06 UTC

- reply

The CD-ROM drive would certainly require a caddy.

2025-07-22 00:51:13 UTC

- reply

I understand that tech bros in their 20s think I am old and slow and stuck in my ways of thinking and they're right. I've made most of the mistakes, embraced technologies before they were ready and believed the con artists promising me things they can never deliver. Now I am old and I know better.
Buy a fucking clue. In fact, I won't even charge them, just use your head and listen for once.

2025-07-16 04:32:54 UTC

- reply

Please don't spread misinformation... https://www.snopes.com/fact-check/la-tow-truck-drivers-ice/

2025-05-27 23:34:57 UTC

- reply

Considering the improvements to Shor's algorithm and the advances in quantum computing, it is inevitably going to be worthless, is it not?

2025-03-28 18:15:54 UTC

- reply

I met my wife on IRC in 1995 and I concur.

2025-03-27 20:15:10 UTC

- reply

They did the same thing when they bought Symantec. They only want the Fortune 1000, everyone else can pound sand. Odd strategy. We had customers telling us (Sophos) that Symantec wouldn't even accept their POs as they were too small and unwanted.

2025-02-11 20:30:17 UTC

Hi Canadian friends, can I recommend Peace by Chocolate? (Slogan, "One peace won't hurt"). Homemade chocolates from a Syrian refugee family in Nova Scotia. Proudly Canadian and very delicious.
https://securitycafe.ca/system/media_attachments/files/113/987/127/495/697/523/original/9ed87463871804c6.jpeg
https://securitycafe.ca/system/media_attachments/files/113/987/127/495/908/530/original/9d947ead99e91a1a.jpeg

2025-02-09 02:43:51 UTC

Life's too short for Nazi bullshit.

2025-02-03 22:08:47 UTC

- reply

If you're traveling around the area (especially East of Hope) watch for their enormous nests on top of the utility poles, especially in Manning Park. We love our bald eagles.

2025-02-03 06:31:13 UTC

- reply

I'm so sorry to hear that, I hope you find peace and love with your loved ones.

2025-02-03 02:09:52 UTC

- reply

I am currently recovering from COVID, so I can't say that Vancouver is a safe place to be this week. I mean, sure, avoid me, but I barely leave the house and always mask, but . . . Stay safe out there.

2025-02-03 02:07:16 UTC

- reply

Shields up!

2025-02-03 00:07:57 UTC

- reply

If you want to avoid the nightmare that is Ruby, Hugo is great and similarly well supported and old. I have been using it after using Jekyll and I find it easier.

2025-01-23 06:10:12 UTC

@npub1pwn…33tq I finally received my calendar on Friday the 17th due to the Canada Post strike from Mid-November to Christmas. Thank you for the kind hand written note. The photos are great.

2025-01-16 01:04:01 UTC

- reply

Are they Fortiproxy? That was affected.

2025-01-16 00:26:52 UTC

- reply

0-day confirmed https://www.csoonline.com/article/3802722/fortinet-confirms-zero-day-flaw-used-in-attacks-against-its-firewalls.html

2024-12-13 19:14:37 UTC

h/t to @npub1l4z…n8dl
https://securitycafe.ca/system/media_attachments/files/113/647/101/876/080/146/original/d31deb7e93b36628.png

2024-12-04 19:13:31 UTC

Is it just me or should all journalists be seriously looking at the Fediverse as the only sensible home? Now with Threads being able to follow accounts here and Threads banning political and news content on their own platform, it seems like the perfect workaround. Add in a bridge to BSky and Bob's deep throat's uncle.

2024-11-28 02:38:31 UTC

- reply

I need to do more testing, but that seems odd. It shouldn't trigger a hit unless it needs to generate the thumbnail. (I will test and confirm)

2024-11-28 02:23:19 UTC

- reply

I'm not seeing this behaviour if I paste a picture into the toot?

2024-10-20 01:39:57 UTC

- reply

I am now at 167mm here in Yaletown. That's double the original prediction. Still coming down... #BCStorm #YVR

2024-08-31 06:04:24 UTC

- reply

My understanding is when I create content on the job it belongs to my employer. When I choose to do things outside of work that may be confused with things I am paid to do, I inform my employer ahead of time of which work is on the clock and which is mine. Doesn't seem complicated?

2024-08-31 03:12:22 UTC

- reply

They've also turned Tom's Hardware into an affiliate revenue generating cesspool. For shame.

2024-08-31 03:03:47 UTC

- reply

Another great pub erased by Future PLC. Still waiting for my refund of Maximum PC magazine they also abruptly killed without notice. Terrible firm.