Greg Notch

CISO @ Expel

[Louis Nyffenegger @snyff]

By age 30, You Should Have a Drawer with a Raspberry PI you don't use and a dozen USB cables.

[Chris Eng @chriseng]

Wow, @halvarflake managed to capture the security "old-timer" experience in three succinct bullet points.

[Greg Notch @GregNotch]

@gdead The good news is that most federal agencies have already purchased java6 and the mainframes they’re running the country on.

[Greg Notch @GregNotch]

@halvarflake our coding style guide uses 80 character terminal widths, and variables are 5 characters or less “for efficiency reasons”. inline comments are forbidden to keep the code readable

[Greg Notch @GregNotch]

@halvarflake Our billing application is implemented in a single file perl4 script. It renders html by hand. We use visual sourcesafe for version control.

[Jon Hencinski @jhencinski]

>50% of the incidents we detect are identity-based.

Right now, we’re seeing #BEC activity focused on payroll fraud via Workday.

Attack paths:
- Compromise #O365 account via 🎣, recon, gain access to Workday
- Compromise #Okta (SSO) account via 🎣, access Workday via SSO

[Expel @ExpelSecurity]

Dontcha hate those #phishing scams where someone texts/emails you, posing as your #CEO?

#CISO @GregNotch covers why people fall for 'em, how to recognize (and stop) 'em, and how a supportive/educational #infosec culture can help prevent 'em. https://t.co/sehQfx73nC @securityblvd