
Head of Adversary Engagement @GreyNoiseIO
Joined June 2009
- Tweets215
- Following395
- Followers597
- Likes1.1K
Come join our team at @GreyNoiseIO and help us disrupt attackers around the world!
Hopefully you listened when I said get your resumes ready. @GreyNoiseIO is hiring Threat Researchers who will develop and exploit first, second, and third-party access and sources to produce cyber threat intelligence that practitioners will use to detect, disrupt, and impose cost on adversaries. job-boards.greenhouse.io/gre…
Mark Mager retweeted
I opened a role for a manager reporting to me, focused on detection engineering and threat hunting. Before I post the link, here are the inflexible criteria:
- US-based
- detection engineering expertise in data-constrained environments
- leadership of high-performing teams
Mark Mager retweeted
**OFFICIAL** EDR Tier List for 2026! Based on nothing but the people in chat, vibes, guests, opinions and limited experience. Thanks to
@EmericNasi
@ShitSecure
@_JohnHammond
and
@domchell
for jumping in as guests to help me out this time around!
The @elastic Endpoint Protections team is expanding in Japan! We are looking for #security researchers well-versed in C / C++ and modern attacker techniques to help build our #EDR product and enhance its detection coverage. Come join our team! job-boards.greenhouse.io/ref…
Come see @EricF0r73 and I present tomorrow afternoon @MSFTBlueHat
Introducing a few more of our incredible #BlueHat speakers:
Mark Mager (@magerbomb) and Eric Forte (@EricF0r73) from @elastic will co-present “When the Levee Breaks: Exposing Critical Flaws in Wi-Fi Camera Ecosystems.” Mark leads the Endpoint Protections Team at Elastic and has extensive experience in malware analysis and reverse engineering. Eric is a Security Research Engineer with a background in embedded systems and streaming data analysis.
Miriam C. Wiesner (@miriamxyra) from Microsoft will present “Echoes of Intrusion: Demystifying MS Graph API Attacks.” Miriam is a Sr. Security Research Program Manager with over 15 years of experience in IT and IT Security. She is also known for creating open-source tools based in PowerShell.
Johann Rehberger (@wunderwuzzi23) will present “Breaking LLM Applications - Advances in Prompt Injection Exploitation.” Johann has over twenty years of experience in threat modeling, risk management, penetration testing, and red teaming. He has led Red Teams at Microsoft, Uber, and currently at Electronic Arts.
Mark Mager retweeted
The 2024 @elastic Global Threat Report just dropped! 🎉🎉
Check it out for some incredible insights. 🔥🔥
Amazing job team! 👏👏
Happy #cybersecurityawareness Month! To celebrate, we’re excited to release the 2024 @elastic Global Threat Report. Explore the top threats being deployed and review our threat landscape forecasts.
Download the 2024 Elastic Global Threat Report → go.es.io/4dnUjEM
The vulnerabilities @EricF0r73 and I discovered in Wi-Fi cameras connected to the AJCloud IoT platform affect millions of devices. See our blog for more details on our findings which we shared last month @defcon @IoTvillage elastic.co/security-labs/sto…
Mark Mager retweeted
Auditing Windows can be a complicated task, but data that’s resistant to manipulation certainly helps. Check out the new article from @jdu2600 and learn why Kernel ETW is the best: bit.ly/4d5xoOv
#ElasticSecurityLabs #cybersecurity #Windows
Mark Mager retweeted
Just finished watching @magerbomb and @EricF0r73 give an awesome talk on exploiting cameras and baby monitors 🔥🔥🔥
@defcon @IoTvillage
We have posted the slide deck from @EricF0r73 and I's @defcon @IoTvillage talk to our GitHub repository along with more tools, logs, and further research notes as promised. Thanks again to everyone who made it out this morning!
github.com/elastic/camera-ha…
Mark Mager retweeted
Join the IoT Village and @magerbomb and @EricF0r73 for their talk, What To Expect When You’re Exploiting: Attacking and Discovering Zero-Days in Baby Monitors and Wi-Fi Cameras at #defcon32! 👶
hubs.li/Q02GqB3l0
Mark Mager retweeted
Introducing a new Windows vulnerability class: False File Immutability.
👉 Bonus: a kernel exploit to load unsigned drivers.
elastic.co/security-labs/fal…
Next month @EricF0r73 and I will present our research on #hacking millions of Wi-Fi cameras at the @defcon @IoTvillage. We've put together some great content and can't wait to share it with you all! #IoT #security #exploit #zeroday #0day #infosec
defcon.org/html/defcon-32/dc…
Mark Mager retweeted
The #defcon32 talks schedules for both main stage talks and creator stage talks are LIVE for your examination on both defcon.org and #hackertracker.
defcon.org/html/defcon-32/dc…
defcon.org/html/defcon-32/dc…
It's getting real, people. less than a month to go now.
#LetsGo
Mark Mager retweeted
ok a lot have people have suggested a gofundme and idk i felt bad so i avoided it, but with the letter on my door letting me know im losing the house for sure now, and by extension my 35 cats ive had for a decade as well all i can do is put it out there, pray and hope god hears it
gofund.me/63a42f13
this one is under MY control though, so no one else has access. I still have so much i want to share and teach and i just hope it doesnt end like this
Mark Mager retweeted
23 new Windows endpoint behavior detections/protections added - covering a variety of TTPs (including #grimresource shellghost and more)
github.com/elastic/protectio…
The @elastic Threat Data Services team have an opening for a backend engineer. You'll get to work with @quixentric and other fantastic engineers on building out our automated threat intelligence and data analytics capabilities
boards.greenhouse.io/referra…
Not sure how I missed this five years ago, but this was such a fun video! Keep kicking ass @malwareunicorn youtube.com/watch?v=b52cfb6l…
I also really enjoyed watching the piece @jaysonstreet also did with @WIRED a few months ago youtube.com/watch?v=6i-84wqc…
The @elastic Endpoint Protections team is hiring in Europe and Canada! We're looking for a Senior Researcher well-versed in C++ and modern attacker tradecraft. Join us and shape the future of our #security product!
Europe: grnh.se/0c04df331us
Canada: grnh.se/6aee6e8a1us






























