Jeremiah Grossman

Cybersecurity. CEO, Root Evidence (@rootevidence) Founded WhiteHat Security, Bit Discovery. Investor. ( BJJ Black Belt.

[Root Evidence @rootevidence]

Black Hat starts today.

If vulnerability management is a task that your team is responsible for, make time tomorrow to stop by the Nucleus Security @nucleussec booth (#5533) and meet Robert Hansen @RSnake and Jeremiah Grossman @jeremiahg. They’ll be signing copies of their new book, “The End of Guessing,” which explores why the future of vulnerability management depends on evidence, not assumptions.

📍 Aug. 5 | 2:00–3:00 PM
📍 Aug. 6 | 10:00–11:00 AM

See you in Las Vegas.

#blackhat #BHUSA #cybersecurity #vulnerabilitymanagement #riskmanagement #bookdebut

[Jeremiah Grossman @jeremiahg]

@brennantom @HackingDave @JackBrennan77 @Kalshi @Polymarket Gotta be the DB5.

[Dr. Bilyana Lilly @BilyanaLilly]

The CISO Summit @BlackHatEvents started in style - mc @jeremiahg

[Jeremiah Grossman @jeremiahg]

So proper opsec now includes keeping a rogue agent on your computer.

[Jeremiah Grossman @jeremiahg]

@bill_e_ghote @wmf In this case, I'm not sure, I didn't ask. :) But, suspect Yahoo's ISP made a mistake and hosted them on a subnet that was registered to Yahoo. Those sorts of things are not uncommon with IP address assignment system.

[Jeremiah Grossman @jeremiahg]

Long ago, when I worked at Yahoo, I hacked into a system on our IP-range. I looked around trying to figure out what it was or whose it was, and realized it wasn’t ours. It belonged to another company!

Knowing about the CFAA, I was genuinely worried and explained the situation to my manager. He asked, “Do you think anyone noticed?”

I said, “Unlikely.”

He replied, “Then don’t tell anyone.”

How times have changed.

[Jeremiah Grossman @jeremiahg]

Only 15 spots left for our BJJ event during @BlackHatEvents USA (2026)! ~60 of us will be on the mat, with a great list of coaches. I just saw that Syndicate won Gym of the Year, and John Wood (one of our coaches) won Coach of the Year! https://t.co/8S8Ri4be0f

A personal l thank you to our sponsors for their support to make this happen: @nucleussec,@wirespeed_,@axariaistaff,@tailrisked @rootevidence, @whoisxmlapi, and Tail Risk.

Reg: https://t.co/vAqFavyBl2

[Jim Manico from Manicode Security @manicode]

Riddle me this. Why have actual breaches gone down in the age of Fable/Mythos/Sol?

[Jeremiah Grossman @jeremiahg]

We're changing it up this year and ordering up long-sleeve rash guards. They look really cool!

[Jeremiah Grossman @jeremiahg]

Reg open! Cyber-Security Brazilian Jiu-Jitsu Smackdown (2026). Held between @BlackHatEvents and @defcon.

(Thur, Aug 6), 60 cybersecurity pros on the mat, learning new moves, and making new friends. Instructed by @ForrestGriffin and several other elite level BJJ/MMA pros. BJJ first-timers always welcome!

Tickets: https://t.co/vAqFavyBl2

2025 Video: https://t.co/tLZnMdYDvO

Sponsored by: @nucleussec, @wirespeed_, @axariaistaff, @rootevidence, and @whoisxmlapi

[Jeremiah Grossman @jeremiahg]

Polymarket currently gives Mythos a 78% chance of discovering the remaining 22%.

[Polymarket @Polymarket]

BREAKING: The NSA confirms Mythos “broke into almost all of our classified systems, not in weeks, but in hours”

[Jeremiah Grossman @jeremiahg]

With all the AI hype and hysteria surrounding vulnerabilities and exploits, it’s time for vendors to stand behind their claims and put their money where their mouth is. At Root Evidence, we spent years analyzing breach investigations and claims data to identify the tiny percentage of CVEs responsible for a disproportionate share of financial losses. Then we built the technology to find them at scale. Today, we’re standing behind that work with a $5,000,000 warranty.
https://t.co/1IwtM94kWe

[Jeremiah Grossman @jeremiahg]

I give it the all clear.
https://t.co/sb910SbElL

[Anthropic @AnthropicAI]

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.

Access to all other Claude models is not affected.

We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.

Read our full statement: https://t.co/bwn0sximKZ

[Jeremiah Grossman @jeremiahg]

@thegrugq @CISAgov @ISC2 I'm assuming things, but that's not one of them.

[Jeremiah Grossman @jeremiahg]

CVE triage should be mandatory jury duty for CISSPs.

Backlog: ~26,000 CVEs.
CISSPs: ~170,000 worldwide.

Hey @CISAgov and @ISC2 , if every CISSP handled a few submissions, the queue could disappear in weeks!

[Jeremiah Grossman @jeremiahg]

@rvmNL @IceSolst @CISAgov @ISC2 See, I would give anything to be in that room!

[Jeremiah Grossman @jeremiahg]

@IceSolst @CISAgov @ISC2 That’s the beauty of the idea. We either eliminate the backlog or finally get an accurate count of practicing security professionals.

[solst/ICE of Astarte @IceSolst]

This site is the single most important contribution to cybersecurity in the last decade, it measures how rampant the destruction is

[Jeremiah Grossman @jeremiahg]

https://t.co/sb910SbElL