Geek, Gearhead, & Founder

Joined February 2017
Jori VanAntwerp retweeted
Mosey on up and join @SoberInCyber at the Deadwood Soda Saloon tonight from 6-9:00 PM during the Sponsor Stampede at @BHinfoSecurity @WWHackinFest! 🥤 Handcrafted sodas & a sparkling good time await ya. soberincyber.org/events-1/so… #WWHFDeadwood2026
4
7
114
Jori VanAntwerp retweeted
If AI lets one person do the work of five, who’s training the next generation? @CSecDaemon joins @aaronccrow on the @protectitall podcast to discuss why skipping junior talent today could mean no senior expertise tomorrow. 🎧 protectitallpod.com/ep123/ #OTSecurity #ICSsecurity
1
1
10
Jori VanAntwerp retweeted
We’re at @BlueTeamCon! Join #SoberInCyber at 9 PM CT in the alcohol-free board games room & wind down after opening day with games, mocktails, good company, and zero pressure to drink. 🎲 soberincyber.org/events-1/al… (Blue Team Con badge required)
5
8
277
Jori VanAntwerp retweeted
#CIRCIA starts with a scope question to see if the rule even applies to your org. This week we go through the proposed covered entity criteria, including SBA size standards & sector-based triggers. emberot.com/resources/blog/c… #OTsecurity #ICSsecurity
1
2
18
Jori VanAntwerp retweeted
Siemens S7 detection needs more than a rule that recognizes protocol traffic. @CSecDaemon looks at S7comm production traffic in light of AA26-231A & why source, controller, timing, role, authorization, & baseline context matter. emberot.com/resources/blog/s… #OTsecurity #ICSsecurity
1
2
54
Jori VanAntwerp retweeted
There may be a path out of your OT network that nobody wrote down. A vendor tunnel. A cellular gateway. A radio link. An old modem, still getting billed. Let's talk about how to find undocumented OT external connections. emberot.com/resources/blog/o… #OTsecurity #ICSsecurity
1
1
2
70
Jori VanAntwerp retweeted
Today at DEF CON: Sober in Cyber founder @the_jvan is leading a group discussion in The Diana Initiative Village at 1:00 PM. Stigma Is Stupid: Talking About Recovery, Mental Health, and Hard Stuff Without Making It Awkward 🕐 1 PM 📍 LVCC – L2 – W209 Join the conversation!
2
1
4
228
Jori VanAntwerp retweeted
A security assessment fills the report, but the work after the assessment builds the program. @CSecDaemon writes about why OT findings need ownership, prioritization, operational buy-in, and controls that teams can actually sustain. emberot.com/resources/blog/s… #OTsecurity #ICS
1
1
2
27
Jori VanAntwerp retweeted
A #CVSS score tells you how severe a vuln looks on paper. Context (+ a seasoned operator) tells you whether it's reachable, patchable, process-adjacent, vendor-managed, segmented, or realistic to fix this week. From @CSecDaemon: emberot.com/resources/blog/o… #OTsecurity #ICSsecurity
2
2
45
Jori VanAntwerp retweeted
CIP-015 compliance doesn't have to start with a 40-site rollout. In @Ember_OT's latest article, @CSecDaemon shares a realistic 90-day path for utilities that need INSM, real visibility, and budget discipline. emberot.com/resources/blog/c… #OTsecurity #CIP015 #ICSsecurity
1
1
29
Jori VanAntwerp retweeted
The future OT analyst needs more than cyber fundamentals. They need OT/ICS depth, protocol fluency, & enough AI literacy to challenge model output instead of trusting it blindly. New article by @CSecDaemon on why the cross-disciplinary OT analyst wins: emberot.com/resources/blog/o…
2
2
26
The most dangerous AI take in cybersecurity right now isn't "AI will replace us." It's "AI will up-skill us." A thread on what most leaders are missing about AI in cyber.
1
1
14
The pitch: AI will up-skill your team. Juniors will operate like seniors. The reality: AI gives juniors access to senior-shaped output. Not the same thing. The senior can interrogate the output. The junior often can't yet.
1
7
Foundations first. AI second. The order matters more than people realize. Without the craft, AI is a confidence amplifier with no validation layer underneath. With the craft, it's a real multiplier. Full article here: linkedin.com/pulse/most-dang… #cybersecurity #AI
15
CIP-015 is not a loot drop. A matrix full of green checkmarks won’t help if you’re still blind at Levels 1 and 2. The real question: if an attacker were already inside your ESP, would you know? I wrote about the compliance trap here:emberot.com/resources/blog/c…
CIP-015 is not a loot drop. Checking every R1 through R3 box does not guarantee real detection. You can be compliant on paper and still stay blind where it counts. @CSecDaemon on alert floods, tool mismatch, and visibility gaps at Levels 1 and 2: emberot.com/resources/blog/c…
1
45
Jori VanAntwerp retweeted
When remote OT environments span hundreds (or thousands) of miles, teams need usable data they can act on. Better visibility helps operators reduce blind spots, improve detection, & support safer, more reliable operations. New article from @CSecDaemon emberot.com/resources/blog/p…
1
2
26
Jori VanAntwerp retweeted
New #OT Vuln Intel Report w/@AdvisoryIcs . 2,203 High/Critical vulns tracked 2024-2025. 29 (1.32%) confirmed weaponized via CISA KEV. Five-lens prioritization method: exploit evidence, reachability, asset criticality, operational impact, patch feasibility. emberot.com/ics-ot-vulnerabi…
1
2
58
#BSidesICS & #S4x26 week felt like the right time to share this... I wrote a bit of a manifesto about how I think OT security should be practiced, focusing on one idea: “No Noise. Just Signal.” Clear thinking. Respect for operations. Awareness of real-world impact.🤘🔥
3
111
Jori VanAntwerp retweeted
IT lets you move fast. OT requires you to move carefully. Vendor contracts, validation cycles, legacy PLCs, and operators who know every edge case. Security changes can affect real-world processes. Part 2 of our OT Curious series: emberot.com/resources/blog/v…
1
2
41