Founder, Partner and Data Scientist at Cyentia Institute. EPSS Author, https://xitter.cf/t.co/Mpv6tSyfo0 and Co-author of Data-Driven Security https://xitter.cf/t.co/JAzDtlMra5;
Joined May 2008
- Tweets4.1K
- Following562
- Followers3.4K
- Likes1.4K
Pinned Tweet
Have you wondered how Elon's takeover of Twitter will or has affected cyber security discussions?
I've been tracking CVE (vulnerability) discussions on twitter for two years now and the recent trend makes me question the future of "infosec twitter". #CVE
cyentia.com/the-death-of-inf…
I deny any responsibility.
The only wave I’ve brought is a wave of confusion when people mistake me for some politician.
We've been working hard on EPSS and the next version is going live in one week on March 7th, expect the scores to shift around a bit. Details on our process: arxiv.org/abs/2302.14172 and performance is vastly improved as we continue to expand data partners!
jayjacobs retweeted
Doing anything at 11ET today? How about joining me and @wendynather for an encore presentation of our 2022 RSA Conference talk for tips on measurably improving infosec programs. rsaconference.com/library/to…
And I stand by it.
"It controls the randomness so it is not overly random." - @jayjacobs, explaining something I will never understand.
jayjacobs retweeted
Looking forward to our Thursday panel on risk based vuln management with @allanfriedman, @jayjacobs, @mroytman & @JGamblin.
Planning your #BHUSA schedule? Here’s what you need to know 👉
kennasecurity.com/black-hat-…
While I appreciate all constructive feedback, I imagine you meant to tag @JayJacobs28.
This Post is from an account that no longer exists. Learn more
Sasha put a lot of work into making the EPSS API a reality. Current and historical EPSS scores are now available on demand!
Super happy to announce that the #EPSS API is now live! Please see first.org/epss/api for examples and more documentation. For example…
jayjacobs retweeted
Join us at #SiRAcon22 where @jayjacobs will discuss a different approach, the Exploit Prediction Scoring System (EPSS), that improves measurement by collecting real-world data, using modern analysis, and mixing with domain expertise.
More Info here: societyinforisk.org/SIRAcon2…
This isn't another post about Log4Shell. Instead it's about what Log4Shell can teach us about the Exploit Prediction Scoring System (EPSS) first.org/epss/log4shell
jayjacobs retweeted
Anytime I hear superlatives like "worst vuln in recent history" my skepticalometer goes off. Heard that a lot in ref to Log4j and this chart from Fortinet 2H 2021 report seems to back it up. Log4j is like "Aw -Keep pushing Struts; you'll make it to the Big Leagues one day..."
"EPSS v2 is out!" I wrote up a brief history of how the objectives of EPSS have shifted with this release: cyentia.com/epss-version-2-i…
jayjacobs retweeted
EPSS v2 is the most important work done in the vulnerability world in the past 10 years. Free and open science to replace dogma:
You better look both ways because the Exploit Prediction Scoring System v2 #model is coming in hawt: sbee.link/c6wj7ym8va
#EPSS #zoolander
Updated model released for the Exploit Prediction Scoring System #EPSS improved performance and 168,325 CVEs scored today. first.org/epss/model
