iiinova — where your digital self keeps evolving

ThinkstCanary @thinkstcanary.canary.tools · 23/02/2026

It’s no secret that adversaries love (ab)using security tooling . So.. Rad just shipped our latest Canarytoken to exploit this: a CrowdStrike API Key Canarytoken! Attackers who find it, have to use it - and when they do, they expose themselves. blog.thinkst.com/2026/02/intr...

092

ThinkstCanary @thinkstcanary.canary.tools · 19/02/2026

The best thing about Canaries & Canarytokens, is when they surprise you: "printed some and put them round the office" "but then they were put into the bin, and at 21:43 someone scanned them… looks like this place has dumpster divers" "never thought that was still a thing"

072

ThinkstCanary @thinkstcanary.canary.tools · 16/02/2026

You can grab the latest copy of our quarterly security research roundup at thinkst.com/ts ¹ For this issue, we selected work from over 1,370 talks & 1,200 blog posts. Available as PDF, ePUB (or audio highlights) __ ¹ As always, completely free

024

ThinkstCanary @thinkstcanary.canary.tools · 13/02/2026

We've always been all about the love.. From all of us, to all of you 💚💚💚

010

Reposted by ThinkstCanary

Whitney Champion 🍪 @whit.zip · 30/01/2026

these guys. always full of adorable surprises. love @thinkstcanary.canary.tools 💚 cc @haroonmeer.canary.love

1132

ThinkstCanary @thinkstcanary.canary.tools · 11/12/2025

The org. running the SA Computer Olympiad ran out of money & shut it down.. So we bought it from them¹ The Olympiads will run as normal in 2026 (and hopefully we will make 'em run even better going forward). 2026 Registration is Open (www.olympiad.org.za) __ ¹ www.itweb.co.za/article/comp...

050

Reposted by ThinkstCanary

clarkee.co.uk @clarkee.co.uk · 01/12/2025

Prevention alone isn't enough. In real networks, credentials leak, assets sprawl, and blind spots exist. Canaries provide high-confidence early detection of internal movement. I wrote some stuff here: clarkee.co.uk/assume-breac... @thinkstcanary.canary.tools

clarkee.co.uk

Assume Breach, Detect Early: The Power of Canaries

Why canary signals outperform conventional detection and reduce mean-time-to-discovery

042

ThinkstCanary @thinkstcanary.canary.tools · 20/11/2025

You can grab our Q3-2025 issue of ThinkstScapes at thinkst.com/ts For this issue, we tracked over 1,500 talks/papers, and almost 1,300 security blog posts. As always, available in PDF, ePub or a brief audio summary. (As always: completely free).

042

ThinkstCanary @thinkstcanary.canary.tools · 05/11/2025

Every year, we try to give our customers a small gift from Thinkst Canary. Previously we did the Canary Swiss Army Knives¹. This year, it's the awesome Mako kit from iFixit All told, we've shipped just under a ton of them 🤯 __ ¹ x.com/ThinkstCanar...

130

ThinkstCanary @thinkstcanary.canary.tools · 30/10/2025

This quarter we announced two new platforms for Canary: Oracle Cloud Infra. (OCI) & Nutanix. Our v1 was a hardware device, but today, Canary also runs on - GCP, - AWS, - VMware, - Azure, - Docker, - Tailscale, - OCI, - Nutanix. Still dead simple. Still "just works!"

094

ThinkstCanary @thinkstcanary.canary.tools · 20/10/2025

US-EAST-1 (AWS) is currently "degraded". This affects the following Canary services directly: - Creating AWS Canarytokens (both free and commercial) ; - Launching new Tailscale Canaries. Sorry! We will send a message when service returns to normal.

030

ThinkstCanary @thinkstcanary.canary.tools · 24/09/2025

Leighton & Sharukh just snuck a quick update into canarytokens.org to allow you to easily manage all the tokens you've previously created. Still just $0.00 Still one of the best things you can do to detect attackers before they dig in...

072

Reposted by ThinkstCanary

Mostafa Moradian @mosi.bsky.social · 23/09/2025

Thanks @thinkstcanary.canary.tools for making this awesome platform! 🙌 If you still haven't read my blog post, here it is: grafana.com/blog/2025/08...

061

ThinkstCanary @thinkstcanary.canary.tools · 15/09/2025

Today we released our new (free) AWS Infrastructure Canarytoken on canarytokens.org. It catches attackers in your AWS account by putting tempting assets in their way and alerting you if they get probed. (1 of 3)

166

Reposted by ThinkstCanary

PyConZA @za.pycon.org · 08/09/2025

Introducing keynote spreaker: Marco Slaviero! 🚀 A #PyConZA veteran and the ingenious CTO of ThinkstCanary, Marco is redefining the security landscape. Don't miss out on his insights! Grab your ticket today: za.pycon.org/tickets @marcoslaviero.bsky.social @thinkstcanary.canary.tools

021

ThinkstCanary @thinkstcanary.canary.tools · 03/09/2025

Spotted at the U.S Open 🎾💪💚

020

ThinkstCanary @thinkstcanary.canary.tools · 01/09/2025

Most of the company is in CapeTown this week for our annual ThinkstCon. This means lots of green stuff, and lots of padel. 💪💚

141

ThinkstCanary @thinkstcanary.canary.tools · 29/08/2025

It's our birthday, so we created a tiny skunk(worksy) game for you to play.. Complete all 7 continents, and we will send you a limited-edition, 10-year t-shirt. Have fun!! (but watch out for the Canaries) canary.tools/10-year

082

ThinkstCanary @thinkstcanary.canary.tools · 27/08/2025

In April this year, @grafana.bsky.social had a security incident due to an insecure GitHub Action. The attackers even tried covering their tracks. How were they discovered? Canarytokens.. Check out their post¹ on how they use our tokens at scale.. __ ¹ grafana.com/blog/2025/08...

grafana.com

Canary tokens: Learn all about the unsung heroes of security at Grafana Labs | Grafana Labs

Learn why the use of canary tokens let us spot a recent intrusion and swarm quickly in response, and find out why you should be using canary tokens to prevent serious security incidents in the future.

052

ThinkstCanary @thinkstcanary.canary.tools · 15/08/2025

"We had good success with your canaries at ..." "I would like to intro my (new) team at ...." 10 years in && we still do 0 outbound sales. We've had the best customers since day-1! 💪💚

022

ThinkstCanary @thinkstcanary.canary.tools · 11/08/2025

A friendly reminder from your Canary Console that if you are in the Northern Hemisphere, you can probably check out the Perseid meteor shower this week.. 💪💚💫

1122

Reposted by ThinkstCanary

Whitney Champion 🍪 @whit.zip · 09/08/2025

just when you thought @thinkstcanary.canary.tools couldn't get any cooler they go and do this 🥹🌠💚 omggggg i love it www.space.com/32868-persei...

072

ThinkstCanary @thinkstcanary.canary.tools · 08/08/2025

BlackHat boothing was great. We got to hang-out with customers & chat Canary with a bunch of new folks.. Our booth has changed, our tech has levelled up (by orders of magnitude) but it's the same price¹ as always, & still "just works!" __ ¹ Still never increased prices since year-1

081

ThinkstCanary @thinkstcanary.canary.tools · 06/08/2025

The 2025, Q2 edition of ThinkstScapes is now available for download¹ at thinkst.com/ts If you are in Vegas for BlackHat, swing by our booth for a hard copy. This edition tracks "over 1,450 talks & papers & almost 1,400 blog posts" __ ¹ As always, completely free

031

ThinkstCanary @thinkstcanary.canary.tools · 02/06/2025

We published an internal post¹ that our @marcoslaviero.bsky.social recently wrote "on caring". It's worth a read, because as he writes. caring about what is built is surprisingly fragile (and shockingly absent). __ ¹ blog.thinkst.com/2025/06/on-c...

031

ThinkstCanary @thinkstcanary.canary.tools · 26/05/2025

When we first built @thinkstcanary.canary.tools we were proud that it took less than 4 minutes to be useful when bought. Now it takes less than two... Catching attackers is the game the whole family can play...

0241

Reposted by ThinkstCanary

Haroon Meer @haroonmeer.canary.love · 14/05/2025

Internal release naming is totally becoming serious business at @thinkstcanary.canary.tools

internal poll to decide on the next release name

041

ThinkstCanary @thinkstcanary.canary.tools · 07/05/2025

The Q1-2025 edition of ThinkstScapes is now available at thinkst.com/ts. To compile this issue, we tracked over 1350 talks & papers (and about 1500 blog posts). Available¹ in PDF, ePub and with a short audio summary. __ ¹ As always: Completely free/without reg-wall

033

Reposted by ThinkstCanary

F5 Labs @f5labs.bsky.social · 28/04/2025

Facing a policy deadline for CVSS 10s? Use our #F5Labs Canary Exploit tool to safely test your system. If vulnerable, reading the parquet file makes javax.swing.JEditorPane contact a specific URL (ex: ‘Web Bug’ URL @thinkstcanary.canary.tools) ➡️ Check out here: go.f5.net/aio3117o

Visual with a black background and white text.

021

ThinkstCanary @thinkstcanary.canary.tools · 25/04/2025

Tough/Awesome problem: Which quotes to include? "It’s a winning argument letting this solution speak for itself" "The product is what you describe.. No BS, no smoke and mirrors" "The effort in making it highly usable is evident... " __ * We have the best customers! 💪💚

032

ThinkstCanary @thinkstcanary.canary.tools · 31/03/2025

You can catch our @marcoslaviero.bsky.social on confused deserialisation¹ in the latest edition of Paged Out (with a MessagePack/pickle polyglot) 💪💚 We love Paged Out.. You should totally check it out.. __ ¹ pagedout.institute/download/Pag...

021

ThinkstCanary @thinkstcanary.canary.tools · 29/03/2025

Canaries.. Still our top sales person for the 10th year in a row... "Can we get a quote to add 5 additional Canaries to our current count?" "They’ve been absolutely stunning during our pentest..."

010

Reposted by ThinkstCanary

Haroon Meer @haroonmeer.canary.love · 25/03/2025

Volt Typhoon "hackers had been in the organization’s network since February 2023, for more than 300 days." Internal service scanning, Lateral movement.. Seriously - This reads like an ad for @thinkstcanary.canary.tools Deploy 'em. Forget about 'em. Know when it matters.

063

ThinkstCanary @thinkstcanary.canary.tools · 24/03/2025

Attackers love poking around SSO dashboards, so we gave them something to find! Drop a Fake SAML IdP App Canarytoken in your IdP -- if anyone opens it, you get an alert. Read more about it at blog.thinkst.com/2025/03/dete...

IdP app canarytoken nestled amongst others

0174

ThinkstCanary @thinkstcanary.canary.tools · 20/03/2025

"Kudos to Canary" "Our first true positive today" "Canary is awesome" 10 years of building Canary and we: - get these messages every week; - never get tired of them 💪💚 Come for the cute pictures, Stay for detection that actually works...

0152

ThinkstCanary @thinkstcanary.canary.tools · 20/02/2025

Our latest issue of ThinkstScapes is now available for download. For this issue (covering the last quarter of 2024) we tracked over over 1400 talks and scoured content from almost 1100 blog posts. As always, PDF, ePUB and an audio summary are available free (with no reg-wall) at thinkst.com/ts

064

ThinkstCanary @thinkstcanary.canary.tools · 13/02/2025

Matt gets the best emails: "We love our Canaries" "Our Canaries have caught the Red Teams in the last three engagements" Seriously.. You should be running @thinkstcanary.canary.tools

041

ThinkstCanary @thinkstcanary.canary.tools · 11/02/2025

This Valentines your Canary Console offers you a walk down memory lane, with our homage to flappy-bird.. It's a bit of a distance from what we do.. but.. it's also totally what we do 💪💚

032

ThinkstCanary @thinkstcanary.canary.tools · 06/02/2025

A blog post¹ by Jacob Torrey on a new feature we excluded from Canary. It’s easy to ship everything you build, but resisting it is worth the effort. Is the benefit worth the increased cognitive load? Does it introduce new risks? (This time it did!) __ ¹ blog.thinkst.com/2025/02/almo...

072

ThinkstCanary @thinkstcanary.canary.tools · 26/01/2025

Todays NYT Spelling Bee knows what's up..

0111

ThinkstCanary @thinkstcanary.canary.tools · 23/01/2025

"Dude, you need to cut some t-shirts with this..." Done!

1184

Reposted by ThinkstCanary

Haroon Meer @haroonmeer.canary.love · 12/01/2025

Academic work on honeypots and deception are often kinda disappointing, but this paper by Ashenden and Reeves is worth the skim (especially since it confirms lots of our @ThinkstCanary.canary.tools takes 😉) tl;dr : Canaries work, Use ‘em. — ¹ scholarspace.manoa.hawaii.edu/server/api/c...

0186