Sign in

David Oxley

@oxley.io
3.8K followers 574 following 632 posts

Interim head of information security at Anduril Industries. @CitizenLab.ca Research Fellow. Former federal agent. Fan of space, books, cyberpunk, sci-fi, espionage history, and storms. Personal account. 🇺🇸 🇺🇦 🇹🇼 #ThreatIntel Storm chasing 📸 🌪️: @wxdox.com

PostsRepliesMedia
David Oxley @oxley.io · 13/09/2026
Career achievement unlocked: someone is impersonating me on Gmail! Please note, I do not send professional email from “freemail” email addresses. If you’re contacted by someone, please feel free to message me with the details here. Thanks!
021
David Oxley @oxley.io · 05/06/2026
Hope to see many of you at @sleuthcon.bsky.social today!
041
David Oxley @oxley.io · 01/05/2026
Shame on the government of Zambia for buckling under Chinese government pressure over Taiwan and canceling this year’s @rightscon.org. www.rightscon.org/rc26-stateme...
rightscon.org
A statement to our community about why RightsCon 2026 will not take place in Zambia
Our official statement to the digital rights community about why RightsCon 2026 will not take place in Zambia
041
David Oxley @oxley.io · 30/04/2026
Anduril Industries’s Threat and Attack Research team is hiring a senior engineer. Multiple locations are available or *remote*! This is a highly technical role; ability to obtain a U.S. Secret security clearance required. Have questions? Let me know! job-boards.greenhouse.io/andurilindus...
job-boards.greenhouse.io
Senior Threat and Attack Research Engineer
Ashville, Ohio, United States
030
David Oxley @oxley.io · 21/04/2026
Excited to share my next chapter as Senior Director, Detection and Response at Anduril Industries!
170
Reposted by David Oxley
Meredith Whittaker @meredithmeredith.bsky.social · 14/04/2026
Notifications for deleted shouldn't remain in any OS notification database, and we've asked Apple to address this. In the meantime, you can prevent any preview text from your Signal messages from appearing in your notifications. Signal Settings > Notifications > Show “No Name or Content”
4423311033
David Oxley @oxley.io · 14/04/2026
As shared elsewhere…this is my last week with Amazon and AWS! I can’t recommend the good people with Amazon Cyber Threat Intelligence enough. At the same time, excited to share what’s next soon!
2160
David Oxley @oxley.io · 15/12/2025
Proud to share new research by Amazon Threat Intelligence detailing recent activity by Sandworm/APT44 🇷🇺 targeting US and European energy, critical infrastructure, and managed security provider networks via vulnerable and misconfigured network edge devices. #threatintel aws.amazon.com/blogs/securi...
aws.amazon.com
Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure | Amazon Web Services
As we conclude 2025, Amazon Threat Intelligence is sharing insights about a years-long Russian state-sponsored campaign that represents a significant evolution in critical infrastructure targeting: a ...
1178
David Oxley @oxley.io · 05/12/2025
A new blog this evening from Amazon Threat Intelligence detailing ongoing China-nexus cyber actors leveraging React2Shell (CVE-2025-55182): aws.amazon.com/blogs/securi...
aws.amazon.com
China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | Amazon Web Services
Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active exploitation attempts by multiple China state-nexus threat g...
0149
Reposted by David Oxley
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 19/11/2025
NEW: The classic anime "Ghost in the Shell" turned 30 years old this week. Despite coming out at the dawn of the internet, it was incredibly prescient in terms of imaginig a future where governments use hackers for espionage, people use malware to spy on their loved ones, and much much more.
techcrunch.com
How the classic anime 'Ghost in the Shell' predicted the future of cybersecurity 30 years ago | TechCrunch
The story of the Ghost in the Shell’s main villain the Puppet Master hinted at a future where governments use hackers for espionage, at a time when most of the world had never connected to the interne...
26730
David Oxley @oxley.io · 19/11/2025
On the heels of @dlshad.net and @davidmagnotti.bsky.social’s presentation at #CYBERWARCON, happy to share the associated AWS Security blog post (with IOCs) aws.amazon.com/blogs/securi...
aws.amazon.com
New Amazon Threat Intelligence findings: Nation-state actors bridging cyber and kinetic warfare | Amazon Web Services
The new threat landscape The line between cyber warfare and traditional kinetic operations is rapidly blurring. Recent investigations by Amazon threat intelligence teams have uncovered a new trend tha...
1145
David Oxley @oxley.io · 18/11/2025
Hope to see many of you at #CYBERWARCON tomorrow! As always, if you see me in the AWS shirt, don’t be afraid to say hi, and please don’t be offended if I forget your name (it’s not you, it’s me). 😅
360
David Oxley @oxley.io · 17/11/2025
Come work with Amazon Cyber Threat Intelligence (ACTI) focusing on the threats targeting Amazon, AWS, and our subsidiaries! US citizenship required, in-office across multiple US locations. DM with questions! www.amazon.jobs/en/jobs/3120...
amazon.jobs
Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI
We are open to hiring candidates to work out of one of the following locations:Annapolis Junction, MD, USA | Arlington, VA, USA | Austin, TX, USA | Herndon, VA, USA | New York, NY, USA | Seattle, WA, ...
032
David Oxley @oxley.io · 17/11/2025
Listening to the #ThreeBuddyProblem podcast and, while I’m glad you’re hearing about Amazon threat intel for the first time, I can say we’ve been around doing a thing or two for a while @ryanaraine.bsky.social, @jags.bsky.social, and @craiu.bsky.social 😅 (but message received re: IOCs in the blog)
281
David Oxley @oxley.io · 12/11/2025
Excited to share another blog where Amazon Cyber Threat Intelligence (ACTI) discovered APT exploitation of zero-day vulnerabilities in Cisco and Citrix products. Proud of the team’s work! aws.amazon.com/blogs/securi...
aws.amazon.com
Amazon discovers APT exploiting Cisco and Citrix zero-days | Amazon Web Services
The Amazon threat intelligence team has identified an advanced threat actor exploiting previously undisclosed zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix systems. The ca...
092
Reposted by David Oxley
Better Things Are Possible @internethippo.bsky.social · 21/03/2025
If I give the bully my lunch money every day eventually he will die of old age
727070855
Reposted by David Oxley
chris! @unauthorized.computer · 30/10/2025
cyberscoop.com/cyber-schola... Will open my big mouth here and say as a participant in one of these programs in the great before time, this is a massive unforced error by USG and will have impacts that span probably decades on the gov cyber workforce
cyberscoop.com
Cyber scholarship-for-service students say government has pulled rug on them, potentially burdening them with debt
Some CyberCorps: Scholarship for Service participants have had federal agency job and internship offers rescinded this year due to cutbacks and freezes. It’s a condition of their scholarship contract ...
183
David Oxley @oxley.io · 08/10/2025
‼️ The @cyberwarcon.bsky.social agenda and presenters list is live. Proud that Amazon Cyber Threat Intelligence will be presenting for the first time on the intersection of Iranian cyber ops and kinetic strikes with Dlshad Othman and @davidmagnotti.bsky.social! www.cyberwarcon.com/ping-first-b...
cyberwarcon.com
Ping First, Boom Second — CYBERWARCON
3134
David Oxley @oxley.io · 26/09/2025
“James Comey’s rights and liberties are not the only ones at risk today. So is your own right to participate in free and fair elections in order to render a verdict on Trump’s invasion of those rights and liberties.” From @davidfrum.bsky.social apple.news/AX8_ub4UHR0G...
apple.news
The Comey Indictment Is Not Just Payback — The Atlantic
It’s an advance glimpse of Trump’s next attempted seizure of power
0176
David Oxley @oxley.io · 25/09/2025
Happy to share that Amazon Cyber Threat Intelligence (ACTI) is hiring our first role in Dublin, Ireland! 🇮🇪 This role will provide threat intel support for the AWS European Sovereign Cloud (ESC). Dublin-based, open to current EU citizens, and with relocation available. amazon.jobs/en/jobs/3089...
amazon.jobs
Sr. Security Intelligence Engineer , European Sovereign Cloud (ESC) Threat Intelligence team
We are open to hiring candidates to work out of one of the following locations:Dublin, IEThe European Sovereign Cloud (ESC) Threat Intelligence team, part of Amazon Cyber Threat Intelligence (ACTI), i...
030
David Oxley @oxley.io · 12/09/2025
Glad to see not every country is powerless to hold coup leaders to account - “Bolsonaro Sentenced to 27 Years in Prison for Plotting Coup in Brazil” www.nytimes.com/2025/09/11/w...
nytimes.com
Bolsonaro Sentenced to 27 Years in Prison for Plotting Coup in Brazil
190
David Oxley @oxley.io · 29/08/2025
This morning, Amazon Cyber Threat Intelligence published a report about a recent watering hole attack by APT29 🇷🇺 that we discovered targeting Microsoft device code authentication. Proud of the work of the team and the chance to share this with the community! aws.amazon.com/blogs/securi...
aws.amazon.com
Amazon disrupts watering hole campaign by Russia’s APT29 | Amazon Web Services
Amazon’s threat intelligence team has identified and disrupted a watering hole campaign conducted by APT29 (also known as Midnight Blizzard), a threat actor associated with Russia’s Foreign Intelligen...
0102
David Oxley @oxley.io · 07/07/2025
“The driving principle here is obvious: In a free society, people should know who is policing them.” apple.news/ATQz-Wb-hQom...
apple.news
Show Us Your Face — The Atlantic
The federal government should prohibit the wearing of masks by ICE agents and require them to properly identify themselves.
052
David Oxley @oxley.io · 03/07/2025
How Trump’s ‘Big, Beautiful Bill’ Will Make China Great Again www.nytimes.com/2025/07/03/o...
nytimes.com
Opinion | How Trump’s ‘Big, Beautiful Bill’ Will Make China Great Again
010
Reposted by David Oxley
Meredith Whittaker @meredithmeredith.bsky.social · 16/06/2025
Use Signal. We promise, no AI clutter, and no surveillance ads, whatever the rest of the industry does. <3
Image of a screenshot of news headline, saying, "WhatsApp is getting ads using personal data from Instagram and Facebook
Forced Consent & Consent Bypass
/
16 June 2025
Meta announced today that it also wants to introduce ads on WhatsApp, which will be based on personal data from Facebook and Instagram. This further integrates WhatsApp into other Meta services - an originally independent app, which initially was available for just $1 per year without ads or data usage. This also means that Meta is consolidating its social networking monopoly. EU law was actually supposed to prevent this."
8061811538
Reposted by David Oxley
Mark Cuban @mcuban.bsky.social · 14/06/2025
😳😮😲. As the Joe Turns
1237122692603
David Oxley @oxley.io · 12/06/2025
Well-done by @billmarczak.org and @jsrailton.bsky.social at @citizenlab.ca! citizenlab.ca/2025/06/firs...
citizenlab.ca
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted - The Citizen Lab
On April 29, 2025, a select group of iOS users were notified by Apple that they were targeted with advanced spyware. Among the group were two journalists who consented to the technical analysis of the...
0113
David Oxley @oxley.io · 11/06/2025
Many moons ago, I was a federal agent. I arrested people. And you know how many times I did that while hiding my face and refusing to identify myself? Never. apple.news/A8NMRFx2mRua...
apple.news
Opinion | The secret police descending on Small Town, U.S.A. — The Washington Post
Masked immigration officials are storming towns and arresting people.
060
David Oxley @oxley.io · 06/06/2025
Happy @sleuthcon.bsky.social SLEUTHCON Day to those who celebrate! Hope to see many of you there! #SLEUTHCON
082
David Oxley @oxley.io · 05/06/2025
👌
020
David Oxley @oxley.io · 30/05/2025
One week until @sleuthcon.bsky.social! Hope to see many of you at the best cybercrime conference of the year. (And grab a ticket while you still can!) #SLEUTHCON
1102
Reposted by David Oxley
Chris Krebs @thekrebscycle.bsky.social · 26/04/2025
“I dOn’T ThInK I eVeR MeT hIm”
611856363
David Oxley @oxley.io · 18/04/2025
David Brooks gets it. “It’s time for a comprehensive national civic uprising. It’s time for Americans…to form one coordinated mass movement. Trump is about power. The only way he’s going to be stopped is if he’s confronted by some movement that possesses rival power.” www.nytimes.com/2025/04/17/o...
nytimes.com
Opinion | Time for a Civic Uprising
It will take a concerted effort by every sector of our society to respond to Trumpism’s threat.
021
Reposted by David Oxley
David DiMolfetta @ddimolfetta.bsky.social · 16/04/2025
NEW: In an 11th hour move, CISA spokesperson says the agency extended the contract for the MITRE-backed CVE Program last night:
58430
David Oxley @oxley.io · 23/03/2025
I was traveling when @sleuthcon.bsky.social’s CFP and registration opened (and when this amazing challenge coin came in the mail). Sign up to present and/or attend and join the best cybercrime conference each year, bar none!
053
Reposted by David Oxley
Kara Swisher @karaswisher.bsky.social · 23/03/2025
World’s worst parent and it’s a high bar.
2387406804717
David Oxley @oxley.io · 05/03/2025
Happy to share that, as of next month, I’ve been promoted to Senior Manager (L7) with an expanded scope across Amazon CTI’s analysis teams. We’re looking for managers for two teams, AWS and incident response threat intel. Technical, in-office, US-based. DM with questions! amazon.jobs/en/jobs/2918...
amazon.jobs
Security Engineering Manager, AWS Threat Intelligence, ACTI
We are open to hiring candidates to work out of one of the following locations:Annapolis Junction, MD, USA | Arlington, VA, USA | Herndon, VA, USA | New York, NY, USAThe AWS Threat Intelligence (AWS T...
4132
David Oxley @oxley.io · 02/03/2025
No honor among this crowd. Cowards, all of them.
190
Reposted by David Oxley
Meredith Whittaker @meredithmeredith.bsky.social · 02/03/2025
It means a lot, to me and to everyone who works so hard to make Signal happen every day, to hear this from a legend like @matthewdgreen.bsky.social 💐
925325
Reposted by David Oxley
Matthew Green @matthewdgreen.bsky.social · 01/03/2025
So here’s a simple request to Apple. Apple iMessage needs to enable “disappearing messages.” And they need to do it soon. blog.cryptographyengineering.com/2025/03/01/d...
blog.cryptographyengineering.com
Dear Apple: add “Disappearing Messages” to iMessage right now
This is a cryptography blog and I always feel the need to apologize for any post that isn’t “straight cryptography.” I’m actually getting a little tired of apologizing for i…
47729
Reposted by David Oxley
David Frum @davidfrum.bsky.social · 01/03/2025
America First means America Alone. America First means America Amoral. America First means America Weaker. Abroad, America First means America aligned with dictators. At home, America First means government by plutocrats, crooks, and foreign stooges.
881614345
David Oxley @oxley.io · 01/03/2025
Both unsurprising given the administration’s swing toward the authoritarian bloc, and yet also so shocking. You can bet Russia has no such illusions and isn’t unilaterally backing down. therecord.media/hegseth-orde...
therecord.media
Exclusive: Hegseth orders Cyber Command to stand down on Russia planning
The secretary of Defense has ordered U.S. Cyber Command to stand down from all planning against Russia, including offensive digital actions, sources tell Recorded Future News.
34515
Reposted by David Oxley
Alexander Howard @digiphile.bsky.social · 28/02/2025
1776🇺🇸Revolution 1789📃Constitution 1863🖋️Emancipation 1865⛓️‍💥Liberation 1920🗳️Women’s Suffrage 1964🗳️Civil Rights & Universal Suffrage 2015❤️Universal Right to Marriage 2020🦠Corruption 2021💥Insurrection 2024🔥Regression 2026🗳️Resilience 2028🗽Restoration
626110731913
Reposted by David Oxley
Garrett M. Graff @vermontgmg.bsky.social · 28/02/2025
To be clear, I believe that the US should be thanking Zelenskyy and Ukraine for standing up and defending freedom. They’re the ones bearing this burden in lives and disruption. It’s only the small and insecure who think they should be thanking us.
582191415
Reposted by David Oxley
David Frum @davidfrum.bsky.social · 28/02/2025
Trump and Vance are not selling out Ukraine because of anything Zelenskyy said to them. Trump and Vance are selling out Ukraine because of things Putin and Musk said to them.
20368491751
Reposted by David Oxley
Aaron Rupar @atrupar.com · 28/02/2025
GLENN: Why don't you wear a suit? You're at the highest level in this country's office & you refuse to wear a suit. A lot of Americans have problems with you not respecting the office. ZELENSKYY: I will wear a costume after this war will finish. Maybe something like yours. Maybe something better.
113737077912441
David Oxley @oxley.io · 24/02/2025
I’m a fan of this being called the “Deconstruction Era” as well. No clearer sense of the damage being done than that.
021
David Oxley @oxley.io · 24/02/2025
Wish I could be in Taipei for @rightscon.org this week, but sadly travel schedules just didn’t work. Good luck and have a fantastic time to those who are there!
030
David Oxley @oxley.io · 22/02/2025
What a bunch of cowards. apple.news/AhxOFS1p-TWC...
apple.news
U.S. Pushes Kyiv to Kill Its U.N. Resolution Marking War’s Anniversary — The Wall Street Journal
In a new rift, Washington and Kyiv pitch competing texts, with Europe backing Ukraine and the U.S. refusing to blame Russia for the war
100