1/ Thrilled to announce we’ve raised $150mm Series C at a $2.45bn post valuation led by Sequoia Capital alongside our existing investors Y Combinator, CrowdStrike, Craft Ventures, Atlassian, Workday, and HubSpot and new friends Goldman Sachs and J.P. Morgan. The terms on this round

Should CVE-2024-38063 be more widely discussed? It's a zero click IPv6 RCE (????). Am I just not reading this right? Normally there's a of panic about ITW exploitation, exposed hosts, and wormability for a vuln like this. I gotta be missing something. msrc.microsoft.com/update-guide/v…

The boring security management stuff. 🤣 Managing a quarterly security review: Feedback welcome as usual. medium.com/starting-up-se…

I wrote about how detection engineering should be prioritized in a security program. Feedback and discussion welcome! magoo.medium.com/prioritizing-d…

“Detection is a problem I describe as deceptively tractable.” Ryan McGeehan on 🔍 Prioritizing Detection Engineering Proposed implementation order: 1. Get logging in order, focusing on query-ability and minimum viable logs. 2. Spend time on hardening before formalizing detection.

My "Starting Up Security" writing correlates to my caffeine intake which has dropped off over the last few years. Today I got tricked into an actual coffee, so drafts are open. Taking any requests, just DM ☕️

In the wild exploit in Firefox, disclosed and fixed within 25 hours. blog.mozilla.org/security/2024/…

I'm thrilled to announce that I've joined as CISO, alongside Matt Knight, at OpenAI. Security is germane to OpenAI's mission. It is critical we meet the highest standards for compliance, trust, and security to protect hundreds of millions of users of our products, enable

Ramping up on bluesky 🦋: bsky.app/profile/mag00.…

I wrote about that moment every security team faces when someone asks if they can work from China for a while, and then everyone freaks out. magoo.medium.com/the-working-fr…

Securing Customer Support: medium.com/starting-up-se…