Jon Hencinski The biggest takeaway from his book is that he worked with what he had rather than trying to become something he was not. Funny enough, after his success, everyone tried to mimic his team. I made some key points in a review, but yeah, it's a great book. domedion.com/2022/04/06/bil…

Jon Hencinski AiTM phishing is def the rule more than the exception now over the last 2 years. Excellent tips. I'd also add to pull an Purview search on MailItemsAccessed if you have it enabled. Gives you good scope of what messages TA may have accessed. For info here learn.microsoft.com/en-us/purview/…

Big news! I've joined Rapid7 as VP of Threat Detection and Response. Energized to lead our #MDR into its next phase of growth. My focus: revolutionizing the #SOC by reimagining the analyst experience and pushing the boundaries of threat detection to deliver industry-leading

Today, we at OpenAI launched Deep Researcher and I wanted to share a deeply personal story about how amazing this tool is and how it will change the world. Trigger warning, related to cancer....1/9

In my journey, we’ve hired a lot of people into the #SOC who didn’t start in tech. One was an underwater welder. Another, a police officer. We’ve brought on videographers, retail specialists, accountants—even a bat scientist. What they had in common: grit, curiosity, passion

Attackers are exploiting CVE-2025-31324 (CVSS 10.0) in SAP NetWeaver Visual Composer to gain initial access. Rapid7 #MDR has tracked active exploitation since at least March 27: - Targets: mainly manufacturing orgs - Method: unrestricted file upload to deploy webshells 🛡️

What traits make a great #SOC analyst? I'll start... - Curious: Always digging to understand how things work. - Candid: Quick to say what they know – and what they don't. - Passionate about learning: Chases new knowledge beyond security. - Driven: Always asking, "How else

How often does your #SOC / #MDR conduct quality control checks? ⬇️

You just landed your first SOC/MDR analyst role. Here’s how to crush your first few months: • Be someone people want to work with. • Build strong connections with your team. • Build a relationship of trust with your manager. • Ask questions early and often. Write everything

I’m an Incident Responder on the AWS Customer Incident Response Team (CIRT). And I get asked a lot of questions, like: “Where do I even start with incident response in the cloud?” Here’s a beginner-friendly thread on AWS IR tips — with a few lessons I learned 🧵👇

What it’s like to be an #MDR analyst Rapid7: You start your shift and scan the queue. One alert stands out — and it follows a familiar ransomware pattern. A QuickAssist session was launched right after a conversation with an external Microsoft Teams user. You’ve seen this

A statement from Christiaan Beek, Rapid7 Senior Director, Threat Analytics, regarding the #LockBit ransomware group ⤵️