Hacker, founder, advisor, and pioneer of crowdsourced security. Founder of Bugcrowd, co-founder of disclose.io, principal of Tall Poppy Group. Board member at SRLDF.
vulnerability-disclosure
Wikileaks’ release of thousands of confidential CIA documents today is yet another demonstration of our just how vulnerable the cybersecurity domain is. Unless we do a better job identifying our vulnerabilities, attackers – be they criminals, hacktivists, hobbyist, or nation state agencies – can and will take advantage of them. What’s
Cybersecurity
If 2016 did anything for cybersecurity, it was to prove that truth can end up wayyyyyyy stranger than fiction (where fiction, of course, are end of year prediction pieces). I have plenty of opinions of where I think it’ll get weird next year, but instead I think Mike Mimoso’
business-strategy
When building a product or company that’s designed to disrupt a sleepy incumbent there are four phases of typical interaction you’ll have with your future competition.
Cybersecurity
99% of good infosec is equivalent to remembering to wash your hands after you use the bathroom. As an industry, we should be working to make that easier.
leadership
A great tip one of our board members gave me a while back was that, as leadership and influence grow, it becomes increasingly important to make sure your team knows the type of input you’re giving them.
mindset
…and I’m not just talking about those kick-ass Youtube videos that pop up each year. I have a core belief that people are intrinsically valuable. Sometimes the manifestation of that value — their extrinsic value — speaks to the intrinsic, sometimes it doesn’t. That’s irrelevant… the intrinsic value is
entrepreneurship
So, Bugcrowd announced some pretty big news today… We closed our Series B financing of $15M, announced some amazing new partners in Salesforce and Industry Ventures. Here’s what it looked like on the inside… For those who haven’t done this before, it’s the CEO’s job to
Cybersecurity
Cybersecurity has long been a challenge lead from the top down, but as heat increases in the consumer market and hacking becomes dinner-table conversation at non-geek dinner-tables, I wonder...
vulnerability-disclosure
My favorite thing about going to conferences is establishing the underlying trends behind the questions I’m asked. We’re only half-way through RSAC/BSides week, and already the dominant question is clear: When is the government going to start a bug bounty program? Here’s my answer: The government
entrepreneurship
I find that people are often ashamed, almost embarrassed to talk about sales and marketing. “Yeah, we’re going OK, we’re actually… kind of, you know thinking about how to get better at marketing.” OR “I’m thinking about personal branding… Nothing douchey or anything…” It’s mostly because
entrepreneurship
About 12 months after Bugcrowd started, one of our team pulled me aside and made a suggestion that truly altered the course of the company: Bugcrowd has such a strong set of operating principles and ethics, and they seem to impact everything we do — for customers, for the crowd, and
Cybersecurity
2012 was the year that almost every industry, banking, education, government, big tech and even security, was hacked. Many, if not all of these companies were doing “all” they could to protect themselves against these hacks, and yet they were still left vulnerable. In direct response to this, 2012 was