Senior Security Engineer, Blue Team @betterhelp ✨

Los Angeles, CA
Joined January 2014
Jessica Crosby retweeted
2
6
33
Jessica Crosby retweeted
🦬🦬🦬
8
18
109
Jessica Crosby retweeted
The future of offensive security tooling for web is around augmentation (automation, detection, scripting, collaboration, recurring tests...) not the best scanning engine.
1
6
34
Jessica Crosby retweeted
When I ask for 2 accounts for each role in your application, I'm not doing it to make your life difficult. I'm doing it because I need 2 accounts for each role in your application. Broken access control is #1 in the OWASP Top Ten for a reason.
3
19
1
139
I am once again asking privileged tech bros to stop giving life advice
This quoted post is unavailable.
28
98
925
Jessica Crosby retweeted
Hey all! I'll be at @BSidesCleveland teaching an Intro to RE class on June 21! Only $100! Check out the other great courses that day as well!
3
14
1
32
Jessica Crosby retweeted
Going live in about 10 minutes with @Jhyp3 and @cktricky on @absoluteappsec. Y'all ready for this?
4
3
Jessica Crosby retweeted
It's Friday, my twitter stream seems mostly happy. Here are some notes on breaking into exposed Docker API - carnal0wnage.attackresearch.…
3
83
2
192
Jessica Crosby retweeted
Me: *going through TSA taking my laptop/iPad/etc out of my bag* TSA agent: *sees stickers on laptop* "ok put everything in it's own container so it's easy to handle just like in the cloud ok?" Me: was ... was that a docker joke? Him: I'll be here all night
41
1,078
77
7,048
Jessica Crosby retweeted
Ever had to wrestle with an executive about why your company needs a risk and security assessment? Director of Risk Services Stephen Marchewitz has you covered in our latest blog. hubs.ly/H0g79Cp0
5
1
21
⚡ ⚡ Binary Defense continues to be a leader in the EDR service industry and we are proud to be acknowledged, again, as a Representative Vendor in the Gartner November 2018 Market Guide for Endpoint Detection and Response Services. bit.ly/2Swqxos
7
1
29
Jessica Crosby retweeted
In RedTeaming/PenTesting/Hacking, its more then what you know that makes you dangerous. Its your capacity to learn things quickly & make that learning applicable. Its developing an ability to quickly find what you need & weaponize it, making all the data in the world your sword
8
23
The @OWASP Application Security Verification Standard (ASVS) 4.0 is coming out soon. Here is the current version. @vanderaj has been working his butt off. github.com/OWASP/ASVS/tree/m… – at Pune, India
3
27
4
60
Jessica Crosby retweeted
Hire people who can figure things out, not people who know everything. Hire people who can work alone and with others. Hire people for where they are going, not where they are. That means hiring for the ability and desire to grow and learn and improve. This is compounding.
51
1,769
121
5,606
Jessica Crosby retweeted
OK, folks, I hear that John McAfee claims to have invented cyber security. (I don't know; he has blocked me.) Gather 'round the fire, kids, for a short story, because I was around at the time.
68
1,608
332
3,664
Jessica Crosby retweeted
achievement unlocked: I got a sneak peek at an early mock-up of next year’s @defcon badge @deviantollam @brownteaming @k8em0 @munin
7
76
6
299
Replying to @Jhyp3 @wisporg
Thanks boo. We miss you
1
1
1
Jessica Crosby retweeted
Remember folks, when you're @defcon it's not about what badges you wear, it's about the conversations they start and the friends you discover. #badgelife
9
28
2
107
Jessica Crosby retweeted
Hey blue team, when was the last time you went to a red team talk to know new attacks and prepare defences? Hey red team, when was the last time you went to a blue team talk and offered suggestions for defences? We're all one team.
14
117
13
366
Jessica Crosby retweeted
Just published a blogpost about JNDI Injection in Jolokia #CVE-2018-1000130 #CVE-2018-1000129 blog.gdssecurity.com/labs/20…
4
149
1
242