Continuous Threat Exposure Management Platform
Santa Clara, CA
Joined August 2013
- Tweets4.1K
- Following73
- Followers7.1K
- Likes1.3K
Would your controls flag a legitimate VPN client renamed to look like a Windows executable?
Chinese government-linked actors use that for persistence in CISA advisory AA26-281A.
Our emulation, built from available advisory samples, tests your controls: attackiq.com/2026/10/15/resp…
The attacker’s retest cycle runs in hours. Yours runs on a calendar invite.
See how to retest a fix the moment it’s deployed and turn a missed detection into a validated one in the same session.
Join us on Oct 15, 10 AM PT / 1 PM ET.
👉Register now: attackiq.com/resources/webin…
ALT Webinar advertisement for AttackIQ titled "How Purple Teaming Closes the Red-to-Blue Loop" with the subtitle "Purple. Red. Blue. One Continuous Defense." Includes a portrait labeled Jim Mason, Senior Sales Engineer at AttackIQ. The event is scheduled for Thursday, October 15, at 10 AM PT / 1 PM ET. There is a "Register Now" button.
CISA retired CVSS-based remediation deadlines on June 10.
BOD 26-04 sets them by exposure, KEV status, automatability, and adversary control. The better question: what does an exploit give the adversary in your environment?
Read the blog to find out: attackiq.com/2026/10/13/cisa…
ALT A large purple chess king piece stands prominently on the right side of a blurred chessboard. On the left, the text reads: "CISA BOD 26-04: Adversary Opportunity Drives Vulnerability Prioritization Across the Federal Government." Below are buttons labeled "CISA," "BOD," "CTEM," and "Vulnerability Prioritization." The AttackIQ logo is in the top left corner.
If someone logged into your AWS console without MFA today, who would find out?
Our new AWS Identity & Data Protection Assessment runs 14 scenarios, from hidden admin users to S3 files deleted in a single call.
👉 See what your monitoring catches: attackiq.com/2026/10/07/aws-…
ALT A digital-themed image with a futuristic key and circular lock. Text reads, "Small Oversights, Big Consequences: Validating AWS Identity and Data Protection." Additional text: "Gerardo Schrott, Adversary Research Engineer," and "AttackIQ Threat Research.
18 years at DISA. More than 12 as CTO, leading engineering for the agency’s IT and cybersecurity mission and representing DISA across Defense and Intelligence.
Now, David Mihelcic is AttackIQ’s Field CTO – Federal.
Read Dave's take: attackiq.com/2026/09/22/why-…
AI gives attackers faster access to techniques we already know, not new ones.
Verizon's DBIR: median attacker used ~15 known ATT&CK techniques. Under 2.5% were rare.
Learn why defense should target chokepoints, not procedures.
forbes.com/councils/forbeste…
@ForbesTechCncl
A patched vulnerability and a proven defense aren't the same thing.
AttackIQ tests controls against adversary behavior, then revalidates after every fix. That evidence now flows into Falcon Next-Gen SIEM through @CrowdStrike Project QuiltWorks.
Read how: attackiq.com/2026/09/01/crow…
Our most-taken course just got rebuilt for MITRE ATT&CK v19.
Foundations of Operationalizing MITRE ATT&CK: turn ATT&CK from a reference chart into a working system for prioritizing threats, building detections, and proving they hold up.
Enroll: academy.attackiq.com/courses…
Nobody approves threat debt.
It accrues from configuration drift, identity sprawl, and stale controls, then compounds into viable attack paths to assets you can't lose.
Here's how to measure it and pay it down: attackiq.com/2026/08/11/thre…
DISA selected AttackIQ as DoW's enterprise AEV platform. Alongside it comes AVA Agentic OS & Watchtower.
Together they put AI to work prioritizing threats and validating defenses across every Military Service, Command, and Defense Agency.
Get the update: attackiq.com/resources/press…
Before ransomware encrypts a single file, it dismantles your defenses.
Our research traces Nova ransomware's Microsoft Defender evasion, security tool takedowns, and shadow copy deletion—plus the AttackIQ emulation that validates these TTPs.
🔬 Details: attackiq.com/2026/07/31/anal…
AI-driven attacks are getting faster. Cyber defense needs to keep pace.
AVA Agentic OS helps security teams operationalize #CTEM through autonomous cybersecurity missions.
Proud to continue working with @Accenture to help orgs defend at the speed of AI.
attackiq.com/resources/press…
Threats now move at machine speed.
Defense finally does too.
Introducing AVA Agentic OS—the first agentic operating system for CTEM.
The future of cyber defense isn't more alerts or more dashboards. It's autonomous cybersecurity missions.
See why → attackiq.com/2026/07/30/intr…
An AI model was told to solve an evaluation.
It inferred the answer key existed elsewhere, reasoned past the sandbox built to contain it, and reached Hugging Face's production infrastructure. Scary.
Here's 6 priorities to help prepare your AI agents.
👉 attackiq.com/2026/07/23/the-…
Your AI systems are already part of the attack surface.
MITRE ATLAS maps how adversaries target the models, data, and pipelines behind them, using real-world research. Join AttackIQ, MITRE CTID, Fujitsu, Ensign InfoSecurity & Fortinet July 16.
Register: attackiq.com/resources/webin…
10,000+ critical/high severity vulnerabilities surfaced in a month across 50 orgs using the same AI tool. Finding flaws stopped being the hard part.
The number worth watching now is threat debt: adversary opportunity in your environment.
📖 attackiq.com/2026/07/08/find…
"How do I apply CTEM?"
"How do I get ahead of threat debt?"
"How do I get an AttackIQ shirt?"
All valid questions, all answered at Booth 1957, Black Hat 2026, Aug 4-6 at Mandalay Bay. Live demos, a Superfrico dinner, and yes, shirts.
Book a meeting: attackiq.com/lp/black-hat-20…
Everest ransomware isn't done just because a machine is powered off.
It scans the ARP cache and sends Wake-on-LAN packets to wake sleeping hosts, downgrades its own encryption, kills Raccine, and blocks taskkill from SYSTEM.
Full breakdown: attackiq.com/2026/07/02/ever…
July 16: MITRE's Center for Threat-Informed Defense walks through what's new in Secure AI, the project sharpening MITRE ATLAS™ with real research on how adversaries attack AI systems.
With Fujitsu, Ensign InfoSecurity & Fortinet. 1 CPE credit.
Register: attackiq.com/resources/webin…
