Jerry Hoff

[Jeremiah Grossman @jeremiahg]

Adversaries pursue objectives with the least cost and effort. They have little incentive to exploit every vulnerability or race to exploit each new one. When old exploits stop working, they’ll then look to exploit more.

[Nucleus Security @nucleussec]

Finding vulnerabilities is becoming easier but driving remediation remains hard.

Join us July 23 to learn how leading organizations prioritize, assign, and track remediation at scale.

https://t.co/mLVnTPN5WF

[Kelly Santalucia @KellySantalucia]

🤖➡️🕵️ When AI agents act like insiders.
Nov 19, 12pm ET OWASP Virtual Chapter w/ Dan Glass
Topic: Agentic Misalignment
RSVP: https://t.co/Yh3Mksz5RX
#OWASP #AppSec #AI #AgenticAI @jerryhoff

[InfoSecMap @InfoSecMap]

📅 All things #AppSec? Don’t miss #PlanetCyberSec #AppSecSoCal by @Layer8Masters on June 11!

Featuring keynotes from @manicode and @DustinLehr1, plus sessions by @jerryhoff, @TheMikeWylie, @RAGreenberg, @EranMedan, @JustinRuth, @uttej_, and many more.

🔗 Secure your spot today!

[Jerry Hoff @jerryhoff]

The OWASP Virtual Chapter reboot kicks off TODAY at 12 PM ET with a powerful talk by @planetlevel Jeff Williams of @contrastsec fame - Singapore: Adopting the Three Ways of Effective AppSec.” 

Sign up today on our meetup: https://t.co/uB0RAbVCEd

The OWASP Virtual Chapter is meant to be a free resource for everyone - feel free to send this out to your colleagues and friends who you think should learn more about #AppSec and #OWASP!!

[Jerry Hoff @jerryhoff]

@jeremiahg you often point out how a small number of CVEs disproportionally represent the vast majority of cybersecurity insurance claims. Is there reasonable overlap of those CVEs and this list?

[Cybersecurity and Infrastructure Security Agency @CISAgov]

With U.S. and international partners, we published an advisory on #CVEs routinely exploited with associated #CWEs. 🛡️All orgs, protect your networks by implementing mitigations. Vendors & developers, urged to apply #SecureByDesign. Read our advisory: https://t.co/XDcWDqiLfJ

[Picus Security @PicusSecurity]

💡 Zero Trust security insights, now on-demand! Missed our webinar? Watch Jerry Hoff, Kevin Brink, and Gürsel Arıcı discuss how BAS validates and enhances your defenses.

🎥 Watch On-Demand now: https://t.co/2IHUXYiICu

Access the video today!

#ZeroTrust #Cybersecurity

[Jim Manico from Manicode Security @manicode]

The @OWASP_ASVS working group iput a lot of work into the access control section (v4) to make it verifiable. We removed a lot of the “should’s and design issues” to just the basic list of “musts”.

Your feedback is always appreciated.

https://t.co/BRfUv6BwOU

[Jonathan Marcil @jonathanmarcil]

About to jump in on stage with the one and only @jerryhoff to host Brain Battle Spectacula sponsored by Promon at @OWASP Global AppSec San Francisco 2024

[Jonathan Marcil @jonathanmarcil]

OWASP Jeopardy collective quiz with @jerryhoff at @owasp #AppSec Global DC 2023

[Jerry Hoff @jerryhoff]

@matt_tesauro @owasp @OWASP_podcast Thank you Matt, was a very fun conversation.

[Matt Tesauro @matt_tesauro]

Brace yourself: May episode of @owasp podcast is now live!
I speak with Jerry Hoff who provided great conversation around AppSec at scale and from a CISOs perspective. Lots to learn in this one:
https://t.co/RpZBBCelq4
#owasp #appsec #DevOps #DevSecOps #CISO #ai @OWASP_podcast

[Mary Lee @MaryKPIX]

This Valentine’s Day, the FBI has a big warning for daters. Watch out for romance scammers!
Check out the link to my full @KPIXtv story:⬇️
https://t.co/60iolyaRgt

[Jerry Hoff @jerryhoff]

@manicode @engineering_bae @StephenNorthcut @jullrich @wichers @jeremiahg I hope this is not an April fool's joke my friend! 😁 I'm grateful to you just as much - thank you @manicode for everything.

[Jerry Hoff @jerryhoff]

Nice password storage write up: https://t.co/3mGxew50wr

[Frank @dfwmutiger]

@jerryhoff. From St. Louis too! Go Cards! #appsecbootcamp

[Phil Derasmo, CISSP @philderasmo]

Lack of security forethought before building #webapplications @jerryhoff #appsecbootcamp shows how protect web apps using threat modeling

[Ryan Price 🍻 @RyanPriceDotCa]

@j_brad_harris @jerryhoff Post a message in the chat, they'll give you a 1-800 number to call that is much more clear