Jason Morrow

Husband, Father, Techie, and Security Guy

[Jason Morrow @jasonamorrow]

Overwhelmed with security vulnerabilities? My new blog post delves into the challenges of vulnerability management and equips you with practical strategies to stay ahead of the curve. https://t.co/CPVoeTHUI2 #cybersecurity #appsec #vulnerabilitymanagement

[Jason Morrow @jasonamorrow]

Not all vulns are created equal! ⚖ My new blog breaks down VDRs & VEX, tools helping transparency in the software supply chain. Standardize your responses & streamline communication with vendors & users. https://t.co/IWHrjuS0X4 #AppSec #VulnerabilityManagement #SoftwareSecurity

[Jason Morrow @jasonamorrow]

From ❄️frosty fractals to cozy fireplaces, the only limit is your imagination. Dive into my #StableDiffusion Christmas journey and spark your creativity in the new year: https://t.co/9XTqjyhB2m

#HappyNewYear #AIArt #DigitalArt #Art #GenAI

[Jason Morrow @jasonamorrow]

Cyber threats evolve fast! Stay ahead of the curve with my top picks for the best cybersecurity websites, podcasts, & YouTube channels of 2023: https://t.co/DSIn34x5eL #cybersecurity #infosec #staysecure

[Jason Morrow @jasonamorrow]

The #cybersecurity landscape is changing and companies will be tightening their belts. Will you adapt? This blog post explores the evolving roles of #security champions and security engineers with GenAI. #appsec #securitychampions

https://t.co/slcT9FbL8A

[Matt Johansen @mattjay]

Good security teams speak with developers.

Bad security teams speak at developers.

[NASA @NASA]

On flight day 13 of the #Artemis I mission, @NASA_Orion reached its maximum distance from Earth, 268,563 miles away from home.

Orion has now traveled farther than any other spacecraft designed to carry humans to deep space & safely return them to Earth. https://t.co/tt0x4YDkxZ

[Jim Manico from Manicode Security @manicode]

From my experience all software developers are now security engineers wether they know it, admit to it or do it. Your code is now the security of the org you work for. #GoldenAgeOfDefense

[Kostas @Kostastsale]

Another great report from the team!

Notice how they exfiltrated important documents, backups and internal certificates.

Also, notice that there were:

🚫No Ransomware
🚫No Cobalt Strike

We have come to a new ransomless and beaconless era…

[Jason Morrow @jasonamorrow]

@Hoshnasi Great related thread on the topic: https://t.co/WFoHMXbwfi

[ShadowBreak Intl. @sbreakintl]

Intelligence acquired since the beginning of the Russian military operation over Ukraine has shown an immense lack of logistic support, making this war one of the most unique in 2022 when it comes to surveillance.

A thread 👇🧵

[Jason Morrow @jasonamorrow]

@Hoshnasi This reports a Baofeng in use as well.
https://t.co/n7PD2nzNGW

[Мілітарний @mil_in_ua]

Окупанти користуються звичайними аналоговими раціями Baofeng😂
Все, що треба знати про вєлікую армію.

[Homeland Security @DHSgov]

All organizations should upgrade to Log4j version 2.15.0 or apply appropriate vendor-recommended mitigations immediately.

Read more from @CISAgov about how to protect your organization ⬇️

[Praveen Minumula @minumula]

@AccidentalCISO I love this model. It shows consequences if you miss any one of the six factors that bring change

[Jessica @jessicamalonso]

There are no truly flat organizations in tech.

The choices are: (1) an explicit hierarchy w/ clear responsibilities and accountability or (2) implicit hierarchies with no clear responsibilities or accountability.

And it's false that (2) is inherently more meritocratic.

[Christian Reilly @reillyusa]

Irony. The irony.

[Wassim Chegham @manekinekko]

Ever wondered what happens when you type in a URL in an address bar in a browser? Here is a brief overview...

#programming #web #sketchnotes

[Chris Wysopal @WeldPond]

Learn about Drovorub, the Russian swiss army knife attack tool. https://t.co/2EEY2x6eGu

[Frank McGovern - INACTIVE @FrankMcG]

CVE 2020-1472 - Netlogon (MS-NRPC)

Start down the path recommended to be using Secure RPC. The patch released today puts events into your DC logs to find where you need to fix.

Once all fixed, you then enable Enforcement Mode.

In Feb, it’s mandatory.

https://t.co/N4kGl4KshY