Immanuel Chavoya

Founder of RiskHorizon AI | Former @NASA SOC Lead | Product Security Leader | Threat Researcher | #GCIH | #GCSA | #CISM | @ISSA Board Member |

[Immanuel Chavoya @FullM3talPacket]

SOC Analysts DO NOT NEED A CISSP.

$52k? That would be low for the midwest, let alone IRVINE,CA!

And of course "you need to work on weekends 2 to 3 days a month (but you can get day offs when you work on weekends)"🧐

So much wrong with this, and yet this isnt even abnormal

[Immanuel Chavoya @FullM3talPacket]

@UK_Daniel_Card

[Immanuel Chavoya @FullM3talPacket]

@garrytan Finding the right balance between minimum viable product (MVP) and dedication to our craft can be challenging. However, true commitment to excellence involves not only being particular but also listening to feedback and evolving our skills to achieve Product-Market Fit (PMF).

[RiskHorizon @Risk_Horizon]

🚀Exciting Breaking News! Our CEO, Immanuel Chavoya, the founder and CEO of RiskHorizon AI, was highlighted in a recent InfoSec piece from #RSAC that clarified the serious issues raised by the #NVDbacklog.
Read full article : https://t.co/V22wpnG9FU

[Immanuel Chavoya @FullM3talPacket]

@UK_Daniel_Card 👀

[Immanuel Chavoya @FullM3talPacket]

@BushidoToken @LabsSentinel @SentinelOne My guess is someone in marketing got sent your image as a reference (its a great image) and literally just made a sentinel grade version and in the rush to make a "report", it got through without validation of provenance.

But it is blatant plagiarism. No excuse.

[Immanuel Chavoya @FullM3talPacket]

@BushidoToken @ConnorSecurity Hardbound - so us cybers can have a coffee table book for guests.

[vx-underground @vxunderground]

Because nerds keep asking us about alleged Sony ransomware incident

tl;dr Threat Actors did not deploy ransomware, no corporate data was stolen, services not impacted. Data was exfiltrated from Jenkins, SVN, SonarQube, and Creator Cloud Development. They're extorting Sony

[vx-underground @vxunderground]

All ALPHV ransomware group did to compromise MGM Resorts was hop on LinkedIn, find an employee, then call the Help Desk.

A company valued at $33,900,000,000 was defeated by a 10-minute conversation.

[Immanuel Chavoya @FullM3talPacket]

@r0wdy_ But that being said - putting cologne in your iron is wild. You're gonna smell terrible

You don't need more than 5 sprays and if you do - it's probably a good idea to try a parfum over toilette/cologne and keep it to 5 sprays or less.

[Immanuel Chavoya @FullM3talPacket]

@r0wdy_ Common misconception

Contemporary fragrances are sythetnics - spray them where you want.

In the past fragrances were made with natural oils (some niche fragrances still are), and THOSE need your skin to dry down - and mix with your oils. Spraying on clothes might stain them

[Immanuel Chavoya @FullM3talPacket]

Malicious LLM's are on the rise, sparking AI Threat concerns👀. Many articles lack real context and countermeasures. I've tried to provide both in my guide.

Read the guide: https://t.co/AJvU0l7mVL

#AI #Cybersecurity #StayInformed

[Immanuel Chavoya @FullM3talPacket]

@uuallan Details on one of victim orgs of this #0day
(Ivanti sat on a lot of information but its finally coming out)
https://t.co/UsLBbNDPod

[Immanuel Chavoya @FullM3talPacket]

🚨Actively Exploited #ZeroDay Vulnerability in Zimbra Collaboration Suite (ZCS)🚨

➡️A XSS vulnerability has been discovered by Google TAG & is actively exploited in ZCS email servers

➡️ Apply the manual workaround provided by Zimbra to stop the bleeding

https://t.co/FefsaYRpU8

[Zimbra @Zimbra]

A security vulnerability in Zimbra Collaboration Suite Version 8.8.15 that could potentially impact the confidentiality and integrity of your data has surfaced.
Read the blog for steps to apply the fix. https://t.co/qJW6ntL1CB

[Immanuel Chavoya @FullM3talPacket]

Is the difference between us cyber defenders and threat actors simply how we chose to be paid?

https://t.co/I1KLZMKOsW

[Immanuel Chavoya @FullM3talPacket]

@UK_Daniel_Card Already a better title than "cybersecurity for dummies"

[Tom Ough @tomough]

North Korea test-fired 10+ missiles last month. Expensive stuff for a country cut off from the global economy.

How do they do it? Via the world's most successful crypto hacking programme.

My piece 👇

https://t.co/trxAGjsXMa

[Allan “Ransomware Sommelier🍷” Liska @uuallan]

Two things are true:
1. Better firewalls alone are not going to stop ransomware attacks against schools.
2. Jesus Christ, we don’t even allocate enough funding to schools to buy next generation firewalls? WTF?

@johnnysaks130 or @samsabin923 am I reading this correctly?

[vx-underground @vxunderground]

The administrator of BreachedForums, Pompomurin, has been arrested by the FBI.

More information: https://t.co/eYsc1kHI12

[Dominic Chell 👻 @domchell]

Following some additional testing of #CVE-2023-23397 - I can confirm MS have only partially fixed this. You can still trigger auth to systems in trusted zones - ie other AD joined systems, which can then be relayed for privilege escalation 🔥https://t.co/6cZWHiNDjJ