Lightnews — Scholar-powered news

Nicole Hoffman @threathuntergirl.bsky.social · 22d

I’m speaking at VetSecCon next month! That’s so fetch! You CAN sit with us!

Linkie to register: events.ringcentral.com/events/vetse...

2

Nicole Hoffman @threathuntergirl.bsky.social · 24d

Today I am speaking at #UniCon Fall Edition hosted by Scythe at 2pm eastern with the legendary Trey Bilbrey. We are discussing how to avoid panic cycles in threat intelligence, hunting, and emulation.

The conference starts at 11am eastern.
scythe.io/unicon-2025-...

3

Nicole Hoffman @threathuntergirl.bsky.social · Sep 5

If you are just getting started in CTI, remember that the work is important, but so are you.

3

Nicole Hoffman @threathuntergirl.bsky.social · Sep 5

3. Soft skills are incredibly important and require just as much attention as technical ones. You have to continuously develop your communication, writing, and relationship-building skills if you want your technical insights to have impact.

1 3

Nicole Hoffman @threathuntergirl.bsky.social · Sep 5

2. There is always going to be something critical happening, and it will never stop. Your mental health matters more. Burnout is not worth it, and the world will not crumble if you set boundaries and maintain work-life balance.

1 4

Nicole Hoffman @threathuntergirl.bsky.social · Sep 5

Three things I wish I knew before starting in CTI:

1. You are going to repeat yourself a lot, and that is normal. You may often find yourself saying “remember I told you about this weeks ago.” It is easy to get frustrated when nobody reads your report, but repetition is part of the job.

1 2 7

Nicole Hoffman @threathuntergirl.bsky.social · Sep 5

Happy Friday, we made it through another week. Remember, if you find something today, no you didn't. That's the Monday's problem.

1

Nicole Hoffman @threathuntergirl.bsky.social · Aug 29

4

Nicole Hoffman @threathuntergirl.bsky.social · Aug 29

6

Nicole Hoffman @threathuntergirl.bsky.social · Aug 29

1 6

Nicole Hoffman @threathuntergirl.bsky.social · Aug 27

CTI be like

1 10

Nicole Hoffman @threathuntergirl.bsky.social · Aug 26

Brace yourselves, @scythe_io is allowing @TCraf7 and I to present together at #UniCon. Strap on your proton packs, it’s going to be a ghostly ride. 👻

📅 September 17, 2025
⏰ 11:00 AM - 5:30 PM ET
🔗 Register now: scythe.io/unicon-2025-...

1

Nicole Hoffman @threathuntergirl.bsky.social · Aug 18

CTI friends, what makes the career worth it to you? I’m collecting responses for an upcoming talk.

2

Nicole Hoffman @threathuntergirl.bsky.social · Jul 8

I’m not sure. It looks like it will be published by Wiley so I can imagine they will expand. I think there’s an audio book already

2

Nicole Hoffman @threathuntergirl.bsky.social · Jul 2

I’ve spent a majority of my career focusing on ransomware thanks to everything I learned while working under Kurtis Minder. He taught me so much from numerous ransomware negotiations.

I highly recommend adding his new book to your summer reading list. a.co/d/gZynHMp

1 3 8

Nicole Hoffman @threathuntergirl.bsky.social · Apr 19

I asked ChatGPT why it thinks there’s so many neurospicy people in infosec.
I feel seen 😅
-pattern recognition and deep focus are rewarded
-love of puzzles and systems
-refuge from rigid corporate roles
-shared experience of being outsiders
-love of helping or protecting others

2 4 27

Nicole Hoffman @threathuntergirl.bsky.social · Apr 17

Politics aside, this executive order is wrong and unconstitutional. I stand with Chris Krebs.

www.forbes.com/sites/tonybr...

Deafening Silence From The Cybersecurity Industry

Chris Krebs affirmed the 2020 election was secure. Now he's the target of an Executive Order—and the cybersecurity industry’s silence is enabling a dangerous precedent.

www.forbes.com

3 9

Nicole Hoffman @threathuntergirl.bsky.social · Apr 9

This is an amazing question 😅 but also if it did exist, most defenders probably wouldn’t turn it on due to the vendor setting it up poorly

Nicole Hoffman @threathuntergirl.bsky.social · Mar 17

It only takes one click to take down the entire organization and cost the company thousands of dollars. If you are unsure I would ask your security team to review suspicious attachments

1