Alex Moss

CEO @NorthStar_IO | I tweet about RBVM, VPT, vulnerabilities and fishing.

[Alex Moss @AlexMoss0101]

@thesamparr It’s easy to work long days when you can sustain momentum and realize return on your efforts.

[NorthStar.io @NorthStar_IO]

How can vulnerability prediction work for you?

@Rapid7 recently highlighted 14 CVE’s posing widespread threats in 2020 and beyond.

2 - categorized as zero-days
12 - predicted by @NorthStar_IO an average of 36 days in advance of threat intel sources seeing them in the wild.

[NorthStar.io @NorthStar_IO]

Analyst Craig Lawson talks about RBVM on @techradar:
"Cybersecurity and risk leaders should tie vulnerability management practices to their organization's specific needs, not a mythical standard."

https://t.co/eBNM859IOY

#rbvm

[Alex Moss @AlexMoss0101]

@iamthefrogy Ah...gotcha...the good ol' 'I don't know the answer so I'll say AI/ML' approach...not the best sales tactic...

[Alex Moss @AlexMoss0101]

@iamthefrogy 3- That entire process needs to be automated to support scalability (collection, correlation/de-dupe, reporting)

[Alex Moss @AlexMoss0101]

@iamthefrogy Modern Vulnerability Management/Prioritization programs ten to have common needs:
1-Need to collect from multiple streams of partially overlapping vulnerability scan data
2-Need to be able to correlate and de-duplicate those results into actionable and meaningful data

[Alex Moss @AlexMoss0101]

@sawaba @J4vv4D @ThomLangford @2A_ Absolutely perfect.

[Alex Moss @AlexMoss0101]

@JGamblin I wish, as an industry, we could settle on this terminology...I’ve always viewed a 0day as a new exploit against a previously unknown vuln while viewing a day0 as a new exploit against a known vuln.

[Alex Moss @AlexMoss0101]

@sawaba I had an f10 550 until recently... it was dubbed ‘The Fast Couch’. Beautiful car...no doubt you’ll enjoy it.

[Alex Moss @AlexMoss0101]

@saranormous It’s all the scripts...use Firefox and get noscript add on. Will take a little time to configure your common sites...but you’ll quickly appreciate the performance return

[Alex Moss @AlexMoss0101]

@aliqasim Ahi & soy sauce

[Alex Moss @AlexMoss0101]

@312isaacs @Skittles Shocked that a candy company would make a product that would induce vomiting. Talk about a gimmick gone wrong.

[Alex Moss @AlexMoss0101]

@ar4v3n Sticker mule

[Alex Moss @AlexMoss0101]

@RMB @semil Truth!

[Alex Moss @AlexMoss0101]

@semil @fredwilson Measuring margins within a software company can also cause challenges...eg an enterprise software company trying to achieve 70% margins on support & implementation services..

[Alex Moss @AlexMoss0101]

@anton_chuvakin @apbarros This actually made me laugh!

[Alex Moss @AlexMoss0101]

@saranormous My mother's ability to find an agreeable compromise.

[Alex Moss @AlexMoss0101]

@AlyssaM_InfoSec @bryanbrake @n0pbear @InfoSystir @IanColdwater @msredmond @ComradeEevee @shehackspurple @Encr1pted I was going to suggest that the best role model is someone that will invest the time to be a good mentor...but you not only beat me to the punch...you took it another step!

[Alex Moss @AlexMoss0101]

@semil skip college <> debt financing....gap year <> bootstrap