Jay Jacobs

| March 15, 2024

Call for Sponsors: Inaugural Exploit Prediction Annual Report

Read More

/wp-content/uploads/2024/03/calendar-forblog.png 900 2100 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2024-03-15 13:13:072024-11-19 12:34:19Call for Sponsors: Inaugural Exploit Prediction Annual Report

| November 6, 2023

Why does EPSS score some CVEs on the KEV so low?

Read More

/wp-content/uploads/2023/11/kev_exploited_sep_2023.png 1167 2100 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2023-11-06 14:45:182024-11-19 12:34:32Why does EPSS score some CVEs on the KEV so low?

| July 18, 2023

The Death of Infosec Twitter

Read More

/wp-content/uploads/2023/07/twitter_thumbnail_plot.png 1200 1500 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2023-07-18 08:15:302024-11-19 12:34:47The Death of Infosec Twitter

| June 15, 2023

Exploring Exploit Intelligence Service (EIS): Tracking Exploit Code

Read More

/wp-content/uploads/2023/06/EIS-June-1st-Plot.png 800 1600 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2023-06-15 12:15:122024-11-19 12:34:48Exploring Exploit Intelligence Service (EIS): Tracking Exploit Code

| June 5, 2023

Why your MTTR is Probably Bogus

Read More

/wp-content/uploads/2023/05/first_six_months_survival.png 901 2100 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2023-06-05 12:15:552024-11-19 12:34:48Why your MTTR is Probably Bogus

| February 14, 2022

EPSS version 2 is out!

Read More

/wp-content/uploads/just_epss2_venn_by_coverage.png 1080 901 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2022-02-14 09:20:302025-08-18 11:15:25EPSS version 2 is out!

| December 3, 2021

Probability of Zero-Day Co-Discovery at Scale

Read More

/wp-content/uploads/probability_with_50_0day.png 901 2100 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2021-12-03 12:06:582025-08-18 11:15:25Probability of Zero-Day Co-Discovery at Scale

| July 6, 2021

Revisiting GitHub as a Source for Exploits

Read More

/wp-content/uploads/three_sources_over_time_thumbnail.png 901 1050 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2021-07-06 17:56:482024-11-19 12:35:05Revisiting GitHub as a Source for Exploits

| January 6, 2021

GitHub: A Source for Exploits

Read More

/wp-content/uploads/rawcount_by_date_github.png 750 750 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2021-01-06 13:52:432024-11-19 12:35:16GitHub: A Source for Exploits

| November 20, 2019

Application Security and "Typical" Fix Times

Read More

/wp-content/uploads/fig23-1-e1574273871823.png 330 389 Jay Jacobs /wp-content/uploads/Cyentia-Logo-Institute-White-Green@05x.png Jay Jacobs2019-11-20 12:58:512024-11-19 12:35:17Application Security and "Typical" Fix Times