Ex-fed hacker turned startup guy. co-founder & CEO at @sevcosec; previously CTO/COO @jasklabs and founding team @CarbonBlack_Inc
Austin, TX
Joined November 2008
- Tweets605
- Following246
- Followers637
- Likes502
News flash: your top security priorities in a world where attackers move faster thanks to AI tooling are...
...the exact same as they are today. CIS Top 20 is still the CIS Top 20. Execute those well, you'll be better prepared than your peers. And remember: attackers are lazy.
People shouldn’t be scared by this CrowdStrike report. I don’t even know why they added the “AI-enabled ransomware” part -probably a PR idea that nobody stopped
The real issue is wrong risk perception. CISOs worry about what sounds new instead of what actually causes incidents. AI-enabled ransomware” isn’t really a thing. Maybe an AI written phishing email here and there, but the rest is still human work.
Meanwhile, most orgs lack asset visibility, detection on legacy or OT systems, have exposed RDP without 2FA and poor monitoring. Yet somehow this gets less attention than a buzzword in a report.
It’s like when everyone panicked about tracking pixels in emails around 2018–2021 simply because PR people pushed it as a serious issue.
It generates distorted perception of risks. Our job as a community is to make people aware of this distortion.
csoonline.com/article/407591…
.@SevcoSec product reviews meet generative AI. 🔥
Get the full track list at songmyreview.com
A preview of what's coming soon from @SevcoSec. SO MUCH fascinating and never before seen data to dig through!
J.J. Guy retweeted
📣 @jjguy will be talking Vulnerability Management & Asset Inventory at #ThursdayDefensive tomorrow. We hope to see you there! reconinfosec.com/thursday-de… #cybersecurity
J.J. Guy retweeted
🧙♀️ CISO Story Time
This is not exaggeration.
I have a good friend. He's a CISO of a multinational organization in the technology sector. We talk often.
Market trends, sales, and business regulations had the business decide to open an facility in China.
a 🧵 👇
J.J. Guy retweeted
Hey #cybersecurity companies, send us your tagline and we’ll write/record an acoustic jingle for your company. Here’s one I just did for @SevcoSec
Have you heard these crazy cybersecurity jingles? My favorite is Carbon Black: sodiumhalogen.com/jingle-car… #CyberJingle #Cybersecurity
Congrats @mauderestaurant - you win the prize for being the first restaurant _ever_ to tell me “we can not accommodate your food allergy.”
@CurtisStone you have work to do if you want to keep that new @MichelinUSA Star. That is not PF Changs-caliber service, much less Michelin
Mad respect for @aionescu. Having gone from three letter agency to security vendor myself, I am stoked and humbled to see a senior former @CrowdStrike’er go the other direction - our community needs more of this!
Today, CSE welcomes @aionescu as Technical Director, Platform Operations and Research. Alex's world-class operating system expertise will help advance CSE's cyber security interests both at home and abroad, and promote cyber-safe practices for all Canadians. Welcome Alex!
ALT Headshot of Alex Ionescu.
J.J. Guy retweeted
"If the CISO is responsible for the security of the industry, it stands to reason that same person should be responsible for both security and the IT infrastructure," writes J.J. Guy (@jjguy), CEO and Co-Founder at @SevcoSec: informatech.co/3HA417z
Working on the statistically relevant dataset, but I’ll give you the anecdata:
10-20%.
Your security and patch endpoint agents are under deployed by 10-20%.
Let me say that another way: an attacker has to send just 5-10 emails to hit a user missing those protections.
Reality check: Your security hygiene is worse than you think it is - helpnetsecurity.com/2021/11/… - @SevcoSec @jjguy #cybersecurity #security #infosecurity #itsecurity #CISO #cybersecuritynews #securitynews
J.J. Guy retweeted
As one of my last doctoral coursework presentations, I spent time talking to my colleagues about the ethical dilemmas surrounding offensive security tool release. The outsider input was fascinating. Here's a thread to share some of that... 1/
