Stephan Chenette

Author
Stephan Chenette, Co-Founder & CTO, AttackIQ, is a 20 year veteran of information security, servicing clients ranging from startups to multinational corporations as a pentester, security and risk consultant, solutions architect and head of research and development. He has presented at numerous conferences including RSA, Blackhat, ToorCon, BSides, CanSecWest, RECon, AusCERT, SecTor, SOURCE and PacSec.
Stephan Chenette

See other articles by Stephan Chenette

What To Do in the Case of Brand Reputation Impersonation
Cyberattack

What To Do in the Case of Brand Reputation Impersonation

Recently, AttackIQ was notified that an Iranian threat actor had created a fake domain and fraudulent website (attackiq[.]ir) impersonating AttackIQ and abusing the company brand. This blog is an account of what happened and how AttackIQ responded, and it aims to provide insights to help organizations prepare to deal with similar Brand Reputation Abuse situations.
Read More
2020 Verizon Data Breach Investigations Report: Analysis, Findings, and AttackIQ Commentary
Security Controls

2020 Verizon Data Breach Investigations Report: Analysis, Findings, and AttackIQ Commentary

This week, Verizon released it’s highly anticipated annual Data Breach Investigations Report (DBIR),…
Read More
Predicting Attack Behavior – Ransomware Patterns Strategic Leaders Need to be Aware of
Ransomware

Predicting Attack Behavior – Ransomware Patterns Strategic Leaders Need to be Aware of

This is a new series of blogs where I’m going to be writing about “Predicting…
Read More
Emulating Attacker Activities and The Pyramid of Pain
Security Controls

Emulating Attacker Activities and The Pyramid of Pain

Some of you might be familiar with “The Pyramid of Pain”, first introduced in…
Read More
Case Study – When Threat Intelligence and Red Team Get Married
Security Control Validation

Case Study – When Threat Intelligence and Red Team Get Married

As the Cybersecurity industry and the talent pool within it is in such high…
Read More
NASA JPL Breaches – A Reminder of Basic Cyber Security Hygiene
Security Controls

NASA JPL Breaches – A Reminder of Basic Cyber Security Hygiene

The recent audit report detailing numerous breaches of NASA’s Jet Propulsion Laboratory in the last…
Read More
Attack Paths and Kill Chains – AttackIQ Contributions to the Verizon 2019 DBIR Report
Credential Dumping

Attack Paths and Kill Chains – AttackIQ Contributions to the Verizon 2019 DBIR Report

AttackIQ Contributions “The Verizon Data Breach Investigations Report (DBIR) provides you with crucial perspectives…
Read More
Improving the Maturity of your Security Program
Security Control Validation

Improving the Maturity of your Security Program

CIOs, CISOs, SecOps, and IT teams of many organizations are often asked about their specific…
Read More
The 5 Keys to Success in Evaluating a Security Validation Platform
TTPs

The 5 Keys to Success in Evaluating a Security Validation Platform

I am routinely asked what the key areas of success are for an Enterprise to…
Read More
Rising Above the Noise at RSA
Cybersecurity

Rising Above the Noise at RSA

RSA 2019 was an incredible conference for AttackIQ. We had many reasons to be excited,…
Read More
Why We Are Releasing a Free FireDrill Edition
Security Controls

Why We Are Releasing a Free FireDrill Edition

Our existing customers have joined our community and are actively contributing to it, It…
Read More