@jayjacobs

Founder, Partner and Data Scientist at Cyentia Institute. EPSS Author, https://xitter.cf/t.co/Mpv6tSyfo0 and Co-author of Data-Driven Security https://xitter.cf/t.co/JAzDtlMra5;

cyentia.com
Joined May 2008
  • Tweets4.1K
  • Following562
  • Followers3.4K
188Media
Doing anything at 11ET today? How about joining me and @wendynather for an encore presentation of our 2022 RSA Conference talk for tips on measurably improving infosec programs. rsaconference.com/library/to…

What (Actually, Specifically) Makes Security Programs EVEN MORE Successful?—Top-Rated Session...

rsaconference.com
2
3
jayjacobs retweeted
Chris Eng@chriseng9 Aug 2022
Your periodic reminder! #BHUSA
12
19
jayjacobs retweeted
Ed Bellis@ebellis9 Aug 2022
Looking forward to our Thursday panel on risk based vuln management with @allanfriedman, @jayjacobs, @mroytman & @JGamblin.
Kenna Security@KennaSecurity9 Aug 2022
Planning your #BHUSA schedule? Here’s what you need to know 👉 kennasecurity.com/black-hat-…

Kenna Security Is Part of Cisco

From risk-based prioritization pioneer to joining forces with the leader in enterprise management and security, Kenna.VM is now Cisco Vulnerability Management.

cisco.com
6
10
Join us at #SiRAcon22 where @jayjacobs will discuss a different approach, the Exploit Prediction Scoring System (EPSS), that improves measurement by collecting real-world data, using modern analysis, and mixing with domain expertise. More Info here: societyinforisk.org/SIRAcon2…
2
1
2
Anytime I hear superlatives like "worst vuln in recent history" my skepticalometer goes off. Heard that a lot in ref to Log4j and this chart from Fortinet 2H 2021 report seems to back it up. Log4j is like "Aw -Keep pushing Struts; you'll make it to the Big Leagues one day..."
1
1
EPSS v2 is the most important work done in the vulnerability world in the past 10 years. Free and open science to replace dogma:
Cyentia Institute@cyentiainst4 Feb 2022
You better look both ways because the Exploit Prediction Scoring System v2 #model is coming in hawt: sbee.link/c6wj7ym8va #EPSS #zoolander
2
6
3
11
Always a good time when you have @ebellis @wadebaker @jayjacobs on the 🎙
Kenna Security@KennaSecurity26 Jan 2022
Have you listened to the newest episode of #SecurityScience? We brought the gang back together for the first episode of the new year, this time focusing on P2Pv8: podcast.kennaresearch.com/pu…
3
5
jayjacobs retweeted
Dennis@DennisF8 Dec 2021
Heyoooo. New @DecipherSec podcast episode with @wadebaker and Ben Edwards of @cyentiainst talking about the @CiscoSecure Security Outcomes study, data, and other things. buzzsprout.com/228511/968551…
2
9
9
Very proud of this research effort between Cisco and @cyentiainst.
Cisco Security
@CiscoSecure7 Dec 2021
📣 HOT OFF THE PRESS – Our #SecurityOutcomes Study Vol 2 released today! Learn what the top 5️⃣ #security practices are and how to optimize them in your organization. Read the report to get the latest data and actionable insights now: cs.co/6012JSnAI
1
3
12
Lots of people ask how we're able to inject humor into the otherwise serious topics of our research. It doesn't happen naturally, folks. We train hard starting first thing every morning.
2
4
I think cyber insurance is one of the most interesting policy issues around. Identifying each of the stakeholders, understanding their equities and incentives, is so much fun.
John Hultquist
@JohnHultquist27 Nov 2021
Replying to @JohnHultquist
Especially interesting to see attribution worked into insurance language. Attribution burden is on the state where the targeted system is physically located. If the state fails to attribute, or takes too long, or says that it can't, the burden falls on the insurer. 3/x
2
4
1
11
Using zero-day exploits you discover without disclosing to the vendor for a year as part of your red team platform
15%White Hat
36%Gray Hat
49%Black Hat
2,596 votes • Final results
31
17
8
45
If you are a red teamer who finds a vuln and uses it to exploit organizations for months/years without disclosing it to the vendor so they can fix it, I have to congratulate you on perfecting your trade. Your actions are indistinguishable from the adversary.
3
19
Replying to @jayjacobs
@jayjacobs of @cyentiainst shares insights from his research and the 160,000+ vulnerabilities that have been published since 1999 (with most in the last 5 years) #kennakatalyst #cybersecurity @CiscoSecure @KennaSecurity
3
4
Be on the lookout early next week! Happy to share a preview with media or analysts.
Cyentia Institute@cyentiainst13 Oct 2021
We're looking forward to the release of our 3rd installment in the #CyentiaIRIS series. This one provides a deep dive into risk factors behind massive multi-party cyber loss events (aka "cyber tsunamis"). Join our #FAIRcon2021 presentation next week for an early peek!
1
3
6
Good piece by ⁦@SamanthaSchann⁩ covering research from ⁦@cyentiainst⁩ cybersecuritydive.com/news/r…

Ripple effects from a cyber incident take a year to develop: report

Organizations are likely to both generate and suffer the downstream consequences of cyber incidents because of the technological reliance companies have on one another.

cybersecuritydive.com
1
2
Replying to @cyentiainst
@cyentiainst Chief Data Scientist & co-founder @jayjacobs shares research findings form the “Prioritization To Prediction” reports at the #KennaKatalystWorkshop today in #Dallas #cybersecurity @KennaSecurity @CiscoSecure
3
4
Be sure to tune in 👉TOMORROW, 8/6, 12:30pm ET👈 when @wadebaker & @jayjacobs present A Year (of data-driven risk research) in Review. They'll explore the spectrum of high/low points from the research we’ve shared w/the sec community. sbee.link/4gk7bqmxej #SIRAcon21
1
1
2
You don't want to miss @wadebaker and @jayjacobs at #SIRAcon21 where they will be presenting A Year (of data-driven risk research) in Review. Click here for more details: siracon21.busyconf.com/sched…
3
2
3
Registered for #SIRAcon21? Be sure to tune in 👉Fri, 8/6, 12:30pm ET👈 when @wadebaker & @jayjacobs present A Year (of data-driven risk research) in Review. They'll explore the spectrum of high/low points from the research we’ve shared w/the sec community. sbee.link/4gk7bqmxej
2
7
Load more