Puns. Dad Jokes. Reefs. Management. Leadership. Infosec. Co-Founder @ExpelSecurity.
Vienna, VA
Joined November 2010
- Tweets2.5K
- Following276
- Followers426
- Likes1.9K
Yanek Korff retweeted
Welcome to the last month of 2022 🤯
Thinking of making a change, career or otherwise, for 2023 and beyond? When it comes to getting started in #infosec, we've got some great ideas, and by we, we mean @reefhack, @jhencinski, @The_Real_BenB.
Their guide: expel.com/blog/a-beginners-g…
Yanek Korff retweeted
In honor of #MarchMadness, we're hosting our own tournament of top email #phishing scams. Which of the below subject lines seem legit and which ones seem phish-y? Vote below ⤵️
Yanek Korff retweeted
Check out our latest blog post by my awesome teammate @pseudohvr! He shares details of a recent BlackByte #ransomware intrusion, and *of course* shared actionable detection opportunities. #threatintel
With help from our partners @KrollWire, #RCIntel analyzed a BlackByte ransomware sample and uncovered details about its initial access, post-exploitation, and exfiltration phases prior to encryption. redcanary.com/blog/blackbyte…
Yanek Korff retweeted
Attack trends for Sept '21:
TL;DR -
- #Solarmarker top detected malware family
- CVE-2021-26084 (Confluence) CVE-2020-36239 (Jira) exploited to deploy coin miners
- #BEC still rampant, 2FA/disable legacy protocols
- ~83% of malware used PS/DotNet fw
expel.io/blog/top-attack-vec…
Yanek Korff retweeted
Levar Burton can't be the new host of the show because Captain Picard would never willingly put a member of his crew in Jeopardy
Yanek Korff retweeted
These Kubernetes tabletop sessions with @petersilberman and I are going to be a lot of fun (and hopefully informative)! Excited that @bradgeesaman can join us for some extra /honk
This just in: @bradgeesaman will be joining the fray 8/25 & 9/1 for a little extra fun as your #Kubernetes "phone a friend" lifeline.
Still need to sign up? Here's that reg link info.expel.io/AugustHelloWor… cc @petersilberman @vac4n7 @kubernetesio
Yanek Korff retweeted
We're going to share incident data on a more regular cadence.
TL;DR - July '21:
- ~72% incidents cred theft/account TO in #O365/Okta
- 👀#SocGholish injecting WP sites
- User execution > exploitation to deploy ransomware
- Vishing is a thing
More ⬇️
expel.io/blog/top-attack-vec…
Yanek Korff retweeted
How does @Microsoft think about #security strategy?
How can you use Defender for Endpoint to investigate #ransomware?
What data sources/security services exist in @Azure?
How can you detect #BEC in @Office365?
Get answers to these @msftsecurity❓s & more! expel.brighttalk.live/?utm_m…
Yanek Korff retweeted
Unconfirmed at this point, but @HuntressLabs is reliable - I'd highly recommend hunting for what they shared. reddit.com/r/kaseya/comments…
Yanek Korff retweeted
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Yanek Korff retweeted
Don't use the word "egg" as password.
It's very easily cracked.
#LameJokeOfTheDay
Yanek Korff retweeted
Part of my role is ensuring we're *not* EDR-centric. We have to be able to detect threats w/o OS-level viz (e.g., control plane only), using auth/net events, or whatever data is in a SIEM
It's where we need to be to protect our customers
Tweet inspired by Q2 incident data ⬇️
Yanek Korff retweeted
Curious question, in your company where does the CSO/CISO report? Thanks in advance. (RT == good karma.)
34%CEO
8%CFO
33%CIO
24%CTO
669 votes • Final results
Yanek Korff retweeted
Recent #ransomware and supply chain attacks have been taking up the headlines, so let's put a few things in perspective. (a thread with some observations AND recommendations 🧵 ⬇️ )
Yanek Korff retweeted
You know those silly hacker movies where they're hacking so hard they type on two keyboards at once?
Such blatant stereo-typing.
Yanek Korff retweeted
Remember when Firefly was huge and lots of people were getting those long brown coats? It was infectious Mal wear.
Yanek Korff retweeted
Huge thanks to @SecHubb & @stephenahart for having me as a guest on SANS #BlueprintPodcast season 2.
We chatted about a subject I'm deeply passionate about:
SOCs can be a great place to work - but effective Ops mgmt is required!
Give it a listen 🎧
sans.org/blueprint-podcast/s…
🔷 SANS #BlueprintPodcast season 2, hosted by @SecHubb is available now. We need your help to tell #cyberdefenders 🔷
Subscribe, rate & review the #podcast on #ApplePodcasts to spread the word & enter for a chance to win FREE merch ➡ sans.org/u/14pb
#BlueTeam #InfoSec
