
Senior Security Engineer, Blue Team @betterhelp ✨
Los Angeles, CA
Joined January 2014
- Tweets1.5K
- Following463
- Followers4.6K
- Likes2.8K
Jessica Crosby retweeted
The future of offensive security tooling for web is around augmentation (automation, detection, scripting, collaboration, recurring tests...) not the best scanning engine.
Jessica Crosby retweeted
When I ask for 2 accounts for each role in your application, I'm not doing it to make your life difficult. I'm doing it because I need 2 accounts for each role in your application.
Broken access control is #1 in the OWASP Top Ten for a reason.
Jessica Crosby retweeted
I am once again asking privileged tech bros to stop giving life advice
This quoted post is unavailable.
Jessica Crosby retweeted
Hey all! I'll be at @BSidesCleveland teaching an Intro to RE class on June 21! Only $100! Check out the other great courses that day as well!
Jessica Crosby retweeted
It's Friday, my twitter stream seems mostly happy. Here are some notes on breaking into exposed Docker API - carnal0wnage.attackresearch.…
Jessica Crosby retweeted
Me: *going through TSA taking my laptop/iPad/etc out of my bag*
TSA agent: *sees stickers on laptop* "ok put everything in it's own container so it's easy to handle just like in the cloud ok?"
Me: was ... was that a docker joke?
Him: I'll be here all night
Jessica Crosby retweeted
Ever had to wrestle with an executive about why your company needs a risk and security assessment? Director of Risk Services Stephen Marchewitz has you covered in our latest blog.
hubs.ly/H0g79Cp0
Jessica Crosby retweeted
⚡ ⚡ Binary Defense continues to be a leader in the EDR service industry and we are proud to be acknowledged, again, as a Representative Vendor in the Gartner November 2018 Market Guide for Endpoint Detection and Response Services. bit.ly/2Swqxos
Jessica Crosby retweeted
In RedTeaming/PenTesting/Hacking, its more then what you know that makes you dangerous. Its your capacity to learn things quickly & make that learning applicable. Its developing an ability to quickly find what you need & weaponize it, making all the data in the world your sword
Jessica Crosby retweeted
The @OWASP Application Security Verification Standard (ASVS) 4.0 is coming out soon. Here is the current version. @vanderaj has been working his butt off.
github.com/OWASP/ASVS/tree/m… – at Pune, India
Jessica Crosby retweeted
Hire people who can figure things out, not people who know everything.
Hire people who can work alone and with others.
Hire people for where they are going, not where they are.
That means hiring for the ability and desire to grow and learn and improve.
This is compounding.
Jessica Crosby retweeted
OK, folks, I hear that John McAfee claims to have invented cyber security. (I don't know; he has blocked me.)
Gather 'round the fire, kids, for a short story, because I was around at the time.
Jessica Crosby retweeted
achievement unlocked: I got a sneak peek at an early mock-up of next year’s @defcon badge @deviantollam @brownteaming @k8em0 @munin
Jessica Crosby retweeted
Remember folks, when you're @defcon it's not about what badges you wear, it's about the conversations they start and the friends you discover. #badgelife
Jessica Crosby retweeted
Hey blue team, when was the last time you went to a red team talk to know new attacks and prepare defences?
Hey red team, when was the last time you went to a blue team talk and offered suggestions for defences?
We're all one team.
Jessica Crosby retweeted
Just published a blogpost about JNDI Injection in Jolokia #CVE-2018-1000130 #CVE-2018-1000129 blog.gdssecurity.com/labs/20…























