SANS Principal Instructor & Author #SEC565 | #RedTeam | #PurpleTeam | #PenTest | #C2Matrix Creator | ATT&CK & Atomic Red Team Contributor | Published Authorhttps://bsky.app/profile/jorgeorchilles.bsky.socialhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3ln4hylgcvk2kSave the date and register for the official release of the 2025 Verizon Data Breach Investigations Report hashtag#DBIR aka THE REPORT on April 23: https://www.brighttalk.com/webcast/15099/63827618 Apr 2025 20:37 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3ln4hylgcvk2khttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lmamf2lmys26At VulnCon this week, if you are here, say hi. Already got a ton of value from this conference: did an SBOM workshop, a couple VEX talks from folks leading that effort in Cisco and Nvidia, and of course AI. Looking forward for the next few days!07 Apr 2025 18:41 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lmamf2lmys26https://bsky.app/profile/jorgeorchilles.bsky.social/post/3ljpjni5nis2sFormula 1 is back! If you played last year, you can rejoin without a passcode. If you would like to play, set up a team at fantasygp.com and DM me for the code to join #InfoSecF106 Mar 2025 12:46 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3ljpjni5nis2shttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbuputnbks22Excellent write up from the folks @volexity.com https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/26 Nov 2024 19:00 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbuputnbks22https://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbj3ydfog22gHi friends! Just switched over. Please connect so I can follow you back!22 Nov 2024 04:05 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbj3ydfog22ghttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvez4kje2uThis was before lights out. I took the pic and called it. #F1 #MexicoGP27 Oct 2024 20:14 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvez4kje2uhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvezmgdu2rI first met @bsdaemon when I was randomly put on the BRA (Brasil) team at Hack Cup too many years ago (we went on to win and get free tickets to INFILTRATE). I had no idea who he was other than just a kind, fun dude that played soccer. Here is his profile:...04 Sep 2024 14:56 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvezmgdu2rhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvezvwuj2gC2 via Microsoft Windows print functionality? Yes please: https://diverto.hr/en/blog/2024-05-03-MS-Windows-Printing-C2/ Thanks for @c2_matrix shout out09 May 2024 16:07 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvezvwuj2ghttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvf2dmje2uWe need to reset expectations. LLMs are not "discovering" novel attacks or 0days. They are lowering the barrier for entry for all types of hackers. Embrace it, let it help you. Criminals already are: https://thehackernews.com/2024/04/microsoft-warns-north-korean-hackers.html22 Apr 2024 17:23 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvf2dmje2uhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvf2qhad2hSpotted @BSidesTampa Learning some more Azure stuff with @SecurePeacock and a nice little demo @mrgretzky may recognize the tool06 Apr 2024 15:18 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvf2qhad2hhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvs6zoxs2eI should have stayed up for this race! My fantasy team did terrible but how about Ferrari!!!!! #InfoSecF124 Mar 2024 15:57 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvs6zoxs2ehttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvs7mwl22oSpent the last year @Verizon running the offensive security team (more accurately called Readiness and Proactive Security) One of the innovative things I got to do was build an AI Red Team with @teschulz We will share lessons learned and how to get...21 Mar 2024 16:58 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvs7mwl22ohttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvs7o2pc2oAnyone have an extra ticket for Wicys? I have a direct report that has booked flight and hotel but now needs a ticket. This will be her first time attending, please RT for reach.20 Mar 2024 21:27 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvs7o2pc2ohttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnvs7ywjl2r2nd race of the 2024 season in the books with @SecurePeacock taking P1. @paulpols and I sharing the podium with him. Paul manages to hold on to the lead but a long way to go with 22 more races this season! #InfoSecF111 Mar 2024 16:32 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnvs7ywjl2rhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnw6zdotb2rThe AI Red Team @Verizon is growing! Join me and @teschulz as we continue building one of the best AI Red Team in the industry: https://verizon.wd5.myworkdayjobs.com/verizon-careers/job/Basking-Ridge-New-Jersey/Principal-AI-Red-Team-Reseacher_R-102906906 Mar 2024 17:03 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnw6zdotb2rhttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnw6zqnab2eFirst #InfoSecF1 results are in! Congrats to @paulpols and @MarcOverIP for P1 and P202 Mar 2024 16:52 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnw6zqnab2ehttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnw732wqr2eWho is ready for #InfosecF1 fantasy league?? Sign up at http://fantasygp.com and dm me for the access code26 Feb 2024 19:58 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnw732wqr2ehttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnw73lr2i25Blink twice if you aren’t a deepfake23 Feb 2024 23:37 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnw73lr2i25https://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnwmkxbmc23AI/ML vulnerabilities aren't as ground breaking as you may think... https://protectai.com/threat-research/january-vulnerability-report19 Jan 2024 14:13 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnwmkxbmc23https://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnwmlazs62g15 years of being off and on this platform. Do you remember when you joined X? I do! #MyXAnniversary18 Jan 2024 22:33 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnwmlazs62ghttps://bsky.app/profile/jorgeorchilles.bsky.social/post/3lbnwmlww3h2rCVSS is for individual vulns, combine these two and you have a 10 that is actively exploited in the wild, no patch, but there is a workaround: CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways10 Jan 2024 21:26 +0000at://did:plc:qfuha4d2jzek2jhmemjkiui6/app.bsky.feed.post/3lbnwmlww3h2r