jayjacobs

Have you wondered how Elon's takeover of Twitter will or has affected cyber security discussions? I've been tracking CVE (vulnerability) discussions on twitter for two years now and the recent trend makes me question the future of "infosec twitter". #CVE cyentia.com/the-death-of-i…

@drivinginkorea The "headline" image on the blog post was a quick attempt at removing bots and it mimicked the overall trend (I also removed any labelling from this, but it's the last 3 months I think). Could use more time to research and dig in deeper.

@jayjacobs Interesting. Are you able to separate out bots from non-bots for the same timeframes?

Have you wondered how Elon's takeover of Twitter will or has affected cyber security discussions? I've been tracking CVE (vulnerability) discussions on twitter for two years now and the recent trend makes me question the future of "infosec twitter". #CVE cyentia.com/the-death-of-i…

@Gi7w0rm I honestly don't know. I don't have any data from any alternatives, just that this source has greatly diminished.

@jayjacobs Hey @jayjacobs , after reading your article I am wondering if you can disclose any numbers about new alternative platforms establishing as a Twitter alternative ? Still struggling to see the real alternative so I am wondering if your data indicates something in particular.

I deny any responsibility. The only wave I’ve brought is a wave of confusion when people mistake me for some politician.

We've been working hard on EPSS and the next version is going live in one week on March 7th, expect the scores to shift around a bit. Details on our process: arxiv.org/abs/2302.14172 and performance is vastly improved as we continue to expand data partners!

@andrewsmhay just remember to pause... :)

Somewhere @jayjacobs is screaming and he doesn't know why. Hint: it's because I'm creating a chart that's an average of percentages represented by another average of those percentage sums :)

Doing anything at 11ET today? How about joining me and @wendynather for an encore presentation of our 2022 RSA Conference talk for tips on measurably improving infosec programs. rsaconference.com/library/top-ra…

@fsmontenegro @dseverski @cyentiainst You all are so corny… ah.

@dseverski @cyentiainst Can you Eye-temize them for us?

And I stand by it.

Your periodic reminder! #BHUSA

Looking forward to our Thursday panel on risk based vuln management with @allanfriedman, @jayjacobs, @mroytman & @JGamblin.

@holisticinfosec @FIRSTdotOrg This is awesome Russ! I would love to reference it from the EPSS website if you don't mind. Really appreciate the time and effort you spent on it!

.@jayjacobs I made you something.😊EPSScall is an Exploit Prediction Scoring System app now in #toolsmith 147. An #RStats Shiny app to interact with the @FIRSTdotOrg EPSS API. Use of EPSS is vital: knowledge of vuln exploit contributes to org survivability holisticinfosec.io/post/epsscall

Tell him his mom says hi.

@JGamblin @mroytman @alexhutton @HubbardDecision Still may be too much as ask if you want to limit to only a few tears. There are several books that came out lately that look good but haven't read. So, as with many things, I would ask @BenJamesEdwards

@jayjacobs @mroytman @alexhutton @HubbardDecision Are there any books that may have a few tears but worth checking out?

What’s the best book for explaining Bayes rule to non technical staleholders? And don’t say that “theorem that won’t die” thing that’s a history novella. cc @alexhutton @jayjacobs @HubbardDecision

While I appreciate all constructive feedback, I imagine you meant to tag @JayJacobs28.

@JGamblin @SashaRomanosky Hard for me to dig in at the moment, which part isn't lining up? We rely on mitre's CVE list for everything except NVD specific fields, like CVSS, CPE, etc.

@jayjacobs @SashaRomanosky The data in the CSV isn't matching up to the graphs on this page? The published date listed here is the NVD published data. first.org/epss/data_stats

April 2022 CVE Recap: Total Number of CVEs: 2052 Average CVEs Per Day: 68.4 Average CVSS Score: 7.33 Growth Over March 2021 (1819): 12% or +223 Code and More Stats: github.com/jgamblin/month…

@JGamblin @SashaRomanosky Or something like this, showing that a handful of CVEs rise out of the crowd as being more likely to see exploitation activity

@jayjacobs @SashaRomanosky I am not sure, to be honest, @SashaRomanosky asked me to include it.