J.J. Guy

Ex-fed hacker turned startup guy. co-founder & CEO at @sevcosec; previously CTO/COO @jasklabs and founding team @CarbonBlack_Inc

[J.J. Guy @jjguy]

This is the essence of being a hacker.

[J.J. Guy @jjguy]

@zebriez British Special Forces uses the phrase "switched on."

[J.J. Guy @jjguy]

News flash: your top security priorities in a world where attackers move faster thanks to AI tooling are...

...the exact same as they are today. CIS Top 20 is still the CIS Top 20. Execute those well, you'll be better prepared than your peers. And remember: attackers are lazy.

[Florian Roth ⚡️ @cyb3rops]

People shouldn’t be scared by this CrowdStrike report. I don’t even know why they added the “AI-enabled ransomware” part -probably a PR idea that nobody stopped

The real issue is wrong risk perception. CISOs worry about what sounds new instead of what actually causes incidents. AI-enabled ransomware” isn’t really a thing. Maybe an AI written phishing email here and there, but the rest is still human work.

Meanwhile, most orgs lack asset visibility, detection on legacy or OT systems, have exposed RDP without 2FA and poor monitoring. Yet somehow this gets less attention than a buzzword in a report.

It’s like when everyone panicked about tracking pixels in emails around 2018–2021 simply because PR people pushed it as a serious issue.

It generates distorted perception of risks. Our job as a community is to make people aware of this distortion.

https://t.co/Mcj0S23KTO

[J.J. Guy @jjguy]

@jiratickets San Antonio

[J.J. Guy @jjguy]

.@SevcoSec product reviews meet generative AI. 🔥

Get the full track list at https://t.co/Oc2ZbrsaLW

[J.J. Guy @jjguy]

Hey @LinkedIn - your newly aggressive notification preferences are so loud and your UX for disabling the types so tedious I am on the precipice of turning off all notifications from everywhere.

That’ll make my experience worse, but right now lesser of two evils. Please fix.

[J.J. Guy @jjguy]

A preview of what's coming soon from @SevcoSec. SO MUCH fascinating and never before seen data to dig through!

[J.J. Guy @jjguy]

@jeremiahg @SevcoSec I was wrong. At least in this [one, small] sample it is ~25% differing results:

One org, ~10k devices, ~21k total CVEs, two sources of CVEs. ~75% of those CVEs reported by both.

More to come soon!

[J.J. Guy @jjguy]

@jeremiahg @SevcoSec I was wrong. At least in this [one, small] sample it is ~25% differing results:

One org, ~10k devices, ~21k total CVEs, two sources of CVEs. ~75% of those CVEs reported by both.

More to come soon!

[J.J. Guy @jjguy]

@jeremiahg @SevcoSec Overlapping. We’ll see what the actual numbers end up like, but in general I expect wider variance than most end users expect. Smaller variance on a single machine, increasing as count of assets compared increases.

[J.J. Guy @jjguy]

@stryde_hax @5twenty9 @scar_sec @HackingDave @MarcSlaughter Can’t be a phony if you lived in Raymond House!

[J.J. Guy @jjguy]

@5twenty9 @scar_sec @HackingDave @MarcSlaughter Gotta be that @stryde_hax guy

[Recon InfoSec @Recon_InfoSec]

📣 @jjguy will be talking Vulnerability Management & Asset Inventory at #ThursdayDefensive tomorrow. We hope to see you there! https://t.co/cgKxtfliwr #cybersecurity

[J.J. Guy @jjguy]

@HNStatus site is down

[J.J. Guy @jjguy]

@secprentice @TheSharp0ne Here's a screencap from the console showing the overlap between Crowdstrike, Active Directory and SentinelOne. (lifted from a client during their migration from S1 to CWRD)

https://t.co/o36FmA4dpS or DM me to get rolling

[J.J. Guy @jjguy]

@iggyf @TheSharp0ne @ryujin 👍👍❤️ I will never forget the plate of humility you served us!

We were a bunch of former VR guys whose sense of identity was strongly wrapped around finding non-pubs.

To have someone else find them in our own software hurt!

[J.J. Guy @jjguy]

Fixing this is @SevcoSec‘s mission.

[percival @0xP3rcy]

In six months of working for an MDR that services all manner of industries, I feel like any time I see an incident occurring it started on an asset that didn't have EDR installed.

[JS0N Haddix @Jhaddix]

🧙‍♀️ CISO Story Time

This is not exaggeration.

I have a good friend. He's a CISO of a multinational organization in the technology sector. We talk often.

Market trends, sales, and business regulations had the business decide to open an facility in China.

a 🧵 👇

[J.J. Guy @jjguy]

CISO: How many windows hosts do we have?

Sevco admin: "9,618 between EC2, AD and S1. That good or do you need something more specific, boss?"