š¢ The Defenders Initiative, šļø Enterprise @secweekly Podcast, š¤ Founder @bsidesknoxville, š£ļø Faculty @IANS_Security, š³ Cooking, šļø F1, ā°ļø Hiking
Knoxville, TN
Joined September 2008
- Tweets65.1K
- Following2.2K
- Followers9.3K
- Likes41.3K
Pinned Tweet
I've been working on a talk tentatively titled "Myths and Lies in InfoSec"
Some of the research I'll be referencing in the talk was inspired by one particular stat: "60% of small businesses go out of business within 6 months of a data breach"
How do we know a stat is fake? š§µā²ļø
Adrian Sanabria (@[email protected]) retweeted
Save your seat for the #OpenSourceSecuritySummit on September 17th! Adrian Sanabria, founder of The Defenders Initiative, will moderate a fireside chat with Cult of the Dead Cow author Joseph Menn. Register today: btwrdn.com/4pIpIJZ
Adrian Sanabria (@[email protected]) retweeted
Post-quantum cryptography is coming ā but deployment wonāt be smooth.
This clip breaks down the uneven readiness between client software and enterprise systems, and why organizations are concerned about breaking production environments during rollout. While some systems can be updated immediately when inactive, the real challenge is managing live infrastructure without disruption.
Is security modernization worth the operational risk it introduces?
#Cybersecurity #PostQuantum #Cryptography
Adrian Sanabria (@[email protected]) retweeted
Cyber 'Home Alone' Part 1: Fight Back with Digital Traps!
Canary Tokens are a simple yet powerful tool for cybersecurity, providing alerts when an attacker interacts with a bait file, URL, or service. Perfect for improving your detection capabilities.
Watch Adrian Sanabria @sawaba demo a web bug Canary Token in his Free Upskill Challenge (UC), Detection via Deception. buff.ly/NgR873G
All 50+ UCs are FREE! Try one, try them all. š
#Cybersecurity #HackingTips #InfoSec #DigitalForensics #EthicalHacking
Adrian Sanabria (@[email protected]) retweeted
ConversingLabs: Adrian Sanabria (@sawaba) on why cyber needs to start learning from its failures. xitter.cf/i/broadcasts/1nxnRRqWvā¦
Adrian Sanabria (@[email protected]) retweeted
Breaches Donāt Kill Companies. Being Unprepared Does (wisdom from @sawaba and @adamshostack). cybrsecmedia.com/breaches-doā¦
Please check support inbox at terminal dot shop pls @thdxr @adamdotdev @ThePrimeagen @teej_dv @iamdavidhill
i need help with my subscription
pleeeeeease
ordering coffee over SSH was hilarious, did it live on a podcast, but it won't let me manage my subscription
Adrian Sanabria (@[email protected]) retweeted
š”ļø Securing access to data alone is no longer enough in an AI-driven world.
On this @SecWeekly episode learn what is driving renewed interest in hybrid architectures and how a #SASE platform is adjacent to #DSPM and vice-versa.
bit.ly/49WS9wi
#SkyhighSecurity #AI
Adrian Sanabria (@[email protected]) retweeted
ICYMI: Mandiantās Principal Security Consultant Ryan Fried and @Googleās Principal Strategic Security Consultant JosĆ© Toledo joined @SecWeekly podcast to explore how cyberattacks can derail organizational spendingāand (cont) bit.ly/4pYHZRH
Adrian Sanabria (@[email protected]) retweeted
Why does security keep failing despite massive investments in tools and compliance? Adrian Sanabria (@sawaba), Principal Researcher at The Defenders Initiative and Main Host of Enterprise Security Weekly (@secweekly), explores this uncomfortable truth in our latest episode of the Be Fearless Podcast.
Adrian discusses with @JohnCarse why checklist-focused security keeps defenders behind, how cyber insurance might force real change, and why AI has become the attacker's number one accomplice in 2025.
Hear the conversation: open.spotify.com/episode/5FSā¦
#cybersecurity #browsersecurity #enterprisesecurity
Adrian Sanabria (@[email protected]) retweeted
Exposure is everywhere now ā cloud, SaaS, IoT, shadow IT, vendors you donāt control.
Replay the @SCMagazine webcast with @sawaba, @hdmoore & @todb to learn why continuous discovery matters and how attackers exploit what you canāt see.
š runzero.com/resources/asm-coā¦
Adrian Sanabria (@[email protected]) retweeted
Another Controversial Point Of View That I agree with
The End of Legacy Vulnerability Scanning?
Watch the full episode here: securityweekly.com/esw401
@sawaba @PyroTek3 @coffeewithayman @cyberriskall @SCMagazine
Adrian Sanabria (@[email protected]) retweeted
šŗ Live webcast Dec 3 with @SCMagazine!
Your attack surface doesnāt end at the firewall.
Join @hdmoore, @todb, and @sawaba to learn how continuous discovery + attack path mapping keeps you ahead.
š scworld.com/cybercast/attackā¦
Adrian Sanabria (@[email protected]) retweeted
Your attack surface is sprawling & full of blind spots.
š„ On Dec 3 at 2 PM ET, @SCMagazine brings together @hdmoore, @todb, & @sawaba to reveal how to operationalize attack surface management without losing your mind.
š Register here: scworld.com/cybercast/attackā¦
Adrian Sanabria (@[email protected]) retweeted
Why does security keep failing despite massive investments in tools and compliance frameworks? Adrian Sanabria (@sawaba), Principal Researcher at The Defenders Initiative and Main Host of Enterprise Security Weekly (@SecWeekly), explores this uncomfortable truth in our latest episode of the Be Fearless Podcast.
Adrian discusses with @JohnCarse why focusing on checklists keeps defenders perpetually behind, how cyber insurance might force real change in security practices, and why AI has become the attacker's number one accomplice in 2025. He also covers prompt injection attacks as the next big problem, using frameworks correctly to guide decisions, and why CISOs must avoid the "hoarding" mindset.
Watch now: youtu.be/n79YY-pqwBA
#cybersecurity #browsersecurity #enterprisesecurity
Adrian Sanabria (@[email protected]) retweeted
Wait..thereās more. If you liked @sawaba piece ā A Market for Lemonadeā, this insightful piece expands on it. The very astute Adrian writes that much of the funding in #cybersecurity industry is going to the lemonade makers. And that is not a good thing. defendersinitiative.substackā¦
Adrian Sanabria (@[email protected]) retweeted
When evaluating, buying & using #infosec products, it can be difficult to determine how well they work. You can discover #cybersecurity products that werenāt even functional after deployment. Cybersecurity - A Market for Lemonade, by the brilliant @sawaba. defendersinitiative.substackā¦
Thanks to @ericmigi and the team at Core Devices for bringing the Pebble back!
Charged up my old devices and they all work great with the new app!
After 48 hours of use, my battery is at 81%. I didnāt charge it to 100% before using it either. Too excited.
Adrian Sanabria (@[email protected]) retweeted
šļø Join @hdmoore, @todb & @sawaba for a live @SCMagazine webcast:
āFixing a Broken System: Why Legacy Vulnerability Management Tools Canāt Keep Upā
Learn whatās next for exposure & attack surface management.
š
Oct 29
ā° 2 PM ET
š scworld.com/cybercast/fixingā¦
Adrian Sanabria (@[email protected]) retweeted
šNew Upskill Challengeš Deception is an overlooked opportunity in SecOps! @sawaba intros how honeypots & honeytokens can be used as cheat codes for detection engineering. justhacking.com/uc/uc-detectā¦
Thereās a common phrase Adrian finds annoying: "Attackers only have to get it right once; defenders have to get it right every time."
Not only is this sentiment untrue, itās also demotivating and defeatist. This phrase is only correct for theĀ first step of the attack. Following that, the power balance flips, as the attacker is in the defenderās house. Much like Kevin in Home Alone, thereās no reason the attacker should have an easy time. Once in the defenderās environment, it is the attacker that has to evade detection 100% of the time, and the defender only needs to detect the attacker once.
Whatās an Upskill Challenge (UC)?
A UC is a free, bite-sized lesson from the JHT Team, our courseware developers as well as āfriendsā of JHT. They are meant to be short and to the point. UCs focus on a single tool or concept and are helpful in quickly providing useful skills that might be prerequisites for other types of educational content on the platform. Did we mention that they're FREE!? š¤Æ
Just Hacking Training is a platform providing "Focused Technical Training for All Levels" in 70+ affordable, hands-on options in 4 categories: Courses, Free Upskill Challenges, Hack-Alongs and CTFs. Wherever possible, JHT includes cloud-based, cyber ranges to safely practice what is taught.Ā With new content released twice a month throughout 2025, bi-monthly livestreams with John Hammond and our All-Star contributors and even some āName Your Priceā options, JHT will advance your career regardless of experience level or budget.
