Jake Williams
101.8K posts

Jake Williams
@MalwareJake
Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
Odenton, MD Katılım Eylül 2009
1.8K Takip Edilen149.3K Takipçiler
Sabitlenmiş Tweet
Jake Williams retweetledi

Hey infosec folks, if you don't mind... can you give this a read?
I still have mad respect for @shenetworks
I still have mad respect for @BHinfoSecurity
Two things can both be true.
I'd like to share some info about my departure from BHIS
🧵
strandjs - [email protected]@strandjs
There has been a lot of talk about BHIS and our maternity and employment policies. Please check out the following site for more details. blackhillsinfosec.com/bhis-employmen… Thanks!
English
Jake Williams retweetledi

Yea, I'm less willing to assume someone was trying to hurt anyone, more the ball was dropped somewhere and legal needed a cop out.
People were likely harmed due to bureaucratic nonsense and unfulfilled paperwork adjustments. Not a good look for anyone, worthy of a reputational hit when it happens.
Which is why testimony like this is needed. Getting folks to stop assuming bad intentions, like myself, is going to require this kind of input.
English

I've seen some of the things behind the scenes that John and BHIS have done for employees over the years.
FAR above and beyond most firms even multiple times their size. I know several employees John bent over backwards to accommodate who would have been released anywhere else.
strandjs - [email protected]@strandjs
There has been a lot of talk about BHIS and our maternity and employment policies. Please check out the following site for more details. blackhillsinfosec.com/bhis-employmen… Thanks!
English



@CapitalOne called to "verify my information" and then got belligerent when I wouldn't. I asked for a publicly verifiable phone number I could call, instead they gave me an 800 number not on any Capital One website. But somehow *this* is on Capital One's website. Please make it make sense...

English
Jake Williams retweetledi

Tired of phishing? Not getting results with brute force?
Just exploit a mid-tier app role, add a federated domain, forge a SAML token, and you're a Global Admin.
This is the Entra ID attack path that should be keeping security teams up at night.
Full breakdown on the Hunter Strategy blog: f.mtr.cool/glrzdfiqdb
#EntraID #IdentitySecurity #CyberSecurity #InfoSec
GIF
English

@c7five @MalwareJake @SANSInstitute They chose to go after this … but it would still be a better choice to close up shop than become part of the oppressors.
English

Sad to see an org I was so involved with for so many years taking nearly $500k in blood money from ICE. Seriously disappointed with @SANSInstitute today.
I get that the economy is bad and sales are hurting. But taking money from ICE is *a choice*.
sam.gov/workspace/cont…
English

@c7five @SANSInstitute There's a world of difference between "picking a fight" by refusing registration from ICE and pursuing the award of a sole source contract.
English

@MalwareJake @SANSInstitute I’d imagine that a very good portion of their annual revenue comes from training and certification of DHS (and other US Gov agencies) employees. The choice was probably to stay in business rather than pick a fight with the US Gov over politics.
English

Tomorrow morning I'm keynoting the Southeast Cybersecurity Summit. Can't wait to see you there!
I'll also be talking on a panel about AI in security later in the day. I'll be around most of the day. Track me down - I'd love to talk!
secybersecurity.com
English

It floors me when people are like "we need to implement meaningful governance of all AI platforms in use by the organization without creating any friction to the business or adding headcount."
Um... What precisely are you expecting here? Please explain what you envision a solution looking like.
English
Jake Williams retweetledi




