BreachQuest

Rendition has been acquired by @Breachquest.

[BreachQuest @renditionsec]

We spoke with @ZDNet about the recent JNDI vulnerability in H2 Database consoles found by @jfrog researchers.

https://t.co/6oMNPID9gV

[BreachQuest @renditionsec]

Our CTO @MalwareJake speaks with @lisavaas at @threatpost about the recent cyberattack effecting the data of 80K fertility patients.
https://t.co/xhoqYq4A5V

[BreachQuest @renditionsec]

Wishing all our followers near and far a Happy Thanksgiving

[BreachQuest @BreachQuest]

Check out what @MalwareJake had to say about joining @BreachQuest and our mission to help companies in "preparing for the inevitable."

https://t.co/J5oSH5Ok5o

[BreachQuest @renditionsec]

If you're going to be attending @BSidesAugusta be sure to check out the CTF - "Bluez Cluez" a DFIR focused CTF!

[BSidesAugusta @BSidesAugusta]

.@BreachQuest is the #bsidesaugusta 2021 Capture the Flag (CTF) sponsor #AugustaGA #CSRA #tech #cybersecurity #LoveAugusta #DowntownAugusta #AugustaGeorgia #CyberAugusta

[BreachQuest @renditionsec]

If you are at @Blueteamcon, and you rush, you can hear our founder @MalwareJake Speak on ""Stop talking nerdy to me: translating the value proposition of the blue team to the C-Suite"

[BreachQuest @renditionsec]

Hey, if you are at @Blueteamcon, at 5 PM check out our founder @MalwareJake. He is speaking. "Stop talking nerdy to me: translating the value proposition of the blue team to the C-Suite."

[BreachQuest @renditionsec]

Thanks @DarkReading for covering our recent 4.4M$ seed financing from Slow Ventures and the founders of Lookout and Tinder. We are so excited about building Priori - the Incident Response Platform of tomorrow. https://t.co/ZbwqrvyY7G

[BreachQuest @renditionsec]

Big news! Announcing our $4.4m seed round to speed the development of the Priori Platform and enable us to grow our incident response. Partnering with Slow Ventures, Lookout's Kevin Mahaffey, and Tinder's Sean Rad and @justinmateen https://t.co/UQzsV0DsXw https://t.co/SrLiAWnnfx

[BreachQuest @renditionsec]

Hey, this is our CTO and Co-Founder! https://t.co/6XEWRWno2e

[wallofsheep @wallofsheep]

7/
Seeing the Forest Through the Trees – Foundations of Event Log Analysis, by Jake WIlliams (@MalwareJake)

Login events, service creation, and process execution. Task scheduler logs for lateral movement/privs escalation. New event logs available in Windows 10.

[BreachQuest @renditionsec]

We now know that employees at Kaseya warned of multiple security risks.
It doesn't have to be this way. BreachQuest's CISO @ScrumWhat weighs in. https://t.co/JszGDjVh5c @scmagazine

[Jake Williams @MalwareJake]

If you work in incident response today, what's thing do you have the hardest time tracking during an incident? Where are your challenges keeping stakeholders in sync?

I'm trying to get a pulse on the state of the field outside of my bubble. Please RT for reach.

[BreachQuest @renditionsec]

We take care of our people!

If you're a DFIR guru and looking for a place to call home where you get to work with some of the best people in the world (admittedly we're biased) check out our careers page!

https://t.co/f38x7jtK4f

[BreachQuest @renditionsec]

If you're a CISO or aspiring CISO with solid leadership experience - shoot @ScrumWhat a DM!

[Andrew King (AJ) @ScrumWhat]

We have a client that is looking for a CISO, preferably someone that is experienced with the medical technology industry, HIPAA, CCPA, and ISO27001.

You will be a direct report to the Chief Legal Officer who is an amazing person. Building the program from almost nothing.

[BreachQuest @renditionsec]

The Federal Government has provided a comprehensive website to help you take the first steps to protect your network.https://t.co/fjb9rxTzxp

[Blumira @blumirasec]

How do you know that your #SIEM will alert you about threats when they inevitably appear?

In Thursday's livestream, Blumira's @InfoSystir and @EricaMix, along with @ScrumWhat, CISO at @BreachQuest, will go over 5 easy ways to test your SIEM. Join us: https://t.co/2trSIF36jf

[BreachQuest @renditionsec]

We're growing! If you know someone that is interested please have them apply directly or DM @ScrumWhat for more details.

[Andrew King (AJ) @ScrumWhat]

I'm looking for a DFIR Team Lead to come work with me @BreachQuest.

Must believe in servant leadership, be cool under pressure, and want to develop a strong, diverse, global team. (+tech duh😉)

If you're interested please apply here: https://t.co/enkrSeZMVj

RT's appreciated!

[BreachQuest @renditionsec]

Said: 1 in 4 employees surveyed still have access to accounts from past employers
Unsaid: the other three didn't have any third party accounts at the past employer

You can't do security without a joiner/mover/leaver program. Period.
https://t.co/bTb5yi8u9F

[Jake Williams @MalwareJake]

So @KaseyaCorp is having a "service interruption." In reality, they've almost certainly been hit by ransomware.

We're seeing multiple customers who use Kaseya hit with Sodinokibi ransomware. If you get to celebrate this weekend, talk to your friends about supply chain security.

[Jake Williams @MalwareJake]

If you want to detect exploitation of #printNightmare/CVE-2021-1675 (and you most certainly do) enabling PrintService-Operational event logging (not default), was the most reliable method we found in the @BreachQuest lab.

Here's how to script enabling the logging: