Devon

Custodian of Private Histories | Keynote Speaker | Creator of | Author of Diving In: An Incident Responder’s Journey 📖

[Devon @aboutdfir]

“Resilience is no longer defined by whether an incident occurs. It’s defined by how fast and how well you respond and contain when it does.“

https://t.co/vDMh5fXjEk via @levelbluecyber

[Devon @aboutdfir]

Some of these appear to have leveraged a multitude of CVEs chained together to include at least one new exploit now documented as CVE-2025-61882 with a CVSS score of 9.8 which can be exploited without requiring user credentials.

https://t.co/PVPCDGQMfF

[NetDiligence® @NetDiligence]

Understanding the path cyber intrusions take can help organizations detect them and mitigate the damage. Learn more about each step in this interview between NetDiligence’s Mark Greisiger and Cybereason’s Devon Ackerman. https://t.co/RdePEA6MSI

[Devon @aboutdfir]

@cybereason merges with @Trustwave enhancing #MDR and Consulting Services globally!

https://t.co/T22YAPlhMZ

[Josh Hickman @josh_hickman1]

https://t.co/JtStGpP5XN
#DFIR

[Devon @aboutdfir]

@ScottRDownie lol!

[Devon @aboutdfir]

87.120.241.2 - hammering away looking for vulnerabilities against internet facing webservers, specifically trying known CVEs in broad runs.

[Devon @aboutdfir]

65.108.99.115 is just having fun hammering away looking for vulnerabilities.

#naughtyIPs

[Devon @aboutdfir]

@Cellebrite @HeatherMahalik Nicely done @josh_hickman1

[Devon @aboutdfir]

Their platforms provides comprehensive protections against malware, ransomware, and other sophisticated cyberattacks.

My contact information is [email protected].

[Devon @aboutdfir]

I am excited to announce that I have joined Cybereason as their Global Head of Digital Forensics & Incident Response (DFIR).

Cybereason is a cybersecurity-focused company specializing in solutions for detecting and responding to cyber threats.

[Colin McCarthy @US_Stormwatch]

12-hour timelapse of American Airlines, Delta, and United plane traffic after what was likely the biggest IT outage in history forced a nationwide ground stop of the three airlines.

[Pirate Software @PirateSoftware]

Crowdstrike just put out steps to remediate the current outage on the end users side. They've emailed them out to every customer and partner. Go check your inboxes!

For those that don't understand what is going on there is a major outage of tons of services and businesses going on globally right now. There is a work around but it is more difficult for companies that encrypted their drives with tools like bitlocker. Some stuff won't work today and it may take a while to fix it all.

Steps are in the image attached:

[Devon @aboutdfir]

Fixing the #Crowdstrike issue

[Kroll @KrollWire]

ICYMI: Kroll Cyber Risk won 5 awards at #RSA this week! Come to booth 2239 to say hello and learn more about us.

📸: @aboutdfir, Global Head of Incident Response at Kroll

[Frank Marano @FrankMarano_]

Join cybersecurity experts at this year's virtual Incident Response Forum Masterclass on April 18, 10:25 a.m. EDT. @aboutdfir will be interviewing Joshua Blanchard from the FBI as part of the law enforcement spotlight. Use code KROLL77 to register now: https://t.co/oRDEI1q9NP

[Sayata @sayatains]

Tomorrow at @The_WSIA Insurtech. Panel discussion about cyber threats and how the insurance industry can protect insureds. Panelists are - @aboutdfir @KrollWire; Pasha Sternberg @Polsinelli; and Garrett Sprowls @TowerstoneInc.

Major news from Sayata after the panel!

[Ben Habing @benhabing]

Join cybersecurity experts at this year's virtual Incident Response Forum Masterclass on April 18, 10:25 a.m. EDT. @aboutdfir will be interviewing Joshua Blanchard from the FBI as part of the law enforcement spotlight. Use code KROLL77 to register now: https://t.co/PIxjarnuVG

[Kroll @KrollWire]

In @WSJ’s coverage of the #cyberattack on UnitedHealth Group, @aboutdfir discussed this important post-incident question: "what happened?"

Recovering operations after an attack is important, and so too is ensuring that evidence of the intrusion is intact: https://t.co/30ahOc9p47