Cole Stokes
Sioux Falls, South Dakota, United States
355 followers
343 connections
About
Experienced Information Security professional with a demonstrated history of working in…
Activity
-
The guy writing the TeamPCP/CanisterWorm malware knows me by first name and is leaving little notes in his source code asking me to be…
The guy writing the TeamPCP/CanisterWorm malware knows me by first name and is leaving little notes in his source code asking me to be…
Liked by Cole Stokes
-
I'm starting at Owner.com on March 9. Thanks to everyone at SpotOn for the last three years. I'm a better engineer than I was in 2022, and the…
I'm starting at Owner.com on March 9. Thanks to everyone at SpotOn for the last three years. I'm a better engineer than I was in 2022, and the…
Liked by Cole Stokes
-
I recently reported a security vulnerability to Meta via their Bug Bounty Program. The issue involved a password reset mechanism, where a reset link…
I recently reported a security vulnerability to Meta via their Bug Bounty Program. The issue involved a password reset mechanism, where a reset link…
Liked by Cole Stokes
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
-
-
-
-
Licenses & Certifications
More activity by Cole
-
🚨 One phishing email just poisoned 2 BILLION weekly npm downloads. Not a typo. Maintainer Josh Junon (Qix) clicked a fake npm support email. Within…
🚨 One phishing email just poisoned 2 BILLION weekly npm downloads. Not a typo. Maintainer Josh Junon (Qix) clicked a fake npm support email. Within…
Liked by Cole Stokes
-
🚨 URGENT: I can't write much..... but... the largest supply chain compromise in npm, Inc. history just happened, packages with a total of 2 billion…
🚨 URGENT: I can't write much..... but... the largest supply chain compromise in npm, Inc. history just happened, packages with a total of 2 billion…
Liked by Cole Stokes
-
Splunk has recently released a honeypot called DECEIVE that utilizes AI to generate a realistic environment of users, services, data, etc. This is…
Splunk has recently released a honeypot called DECEIVE that utilizes AI to generate a realistic environment of users, services, data, etc. This is…
Liked by Cole Stokes
-
ChatGPT Killed OffSec. This is tasty bait, trust me: So OffSec are a predatory company in my opinion when it comes to their education, specifically…
ChatGPT Killed OffSec. This is tasty bait, trust me: So OffSec are a predatory company in my opinion when it comes to their education, specifically…
Liked by Cole Stokes
-
A sobering dose of Dark Web 💊 Over the weekend a threat actor was selling access to a German IT company with over 70 million dollars in revenue--…
A sobering dose of Dark Web 💊 Over the weekend a threat actor was selling access to a German IT company with over 70 million dollars in revenue--…
Liked by Cole Stokes
-
After nearly a year of persistent monitoring and with a bit of luck. I uncovered a hacking group in Asia responsible for selling vast amounts of…
After nearly a year of persistent monitoring and with a bit of luck. I uncovered a hacking group in Asia responsible for selling vast amounts of…
Liked by Cole Stokes
-
Now that I've had a few days to recover from and absorb DefCon... It was my first time attending DefCon and I could not have had a better first…
Now that I've had a few days to recover from and absorb DefCon... It was my first time attending DefCon and I could not have had a better first…
Liked by Cole Stokes
-
AppSec programs are all about 3 things. People, Process and Technology Most of us pay the most attention to Technology. But we forget that People…
AppSec programs are all about 3 things. People, Process and Technology Most of us pay the most attention to Technology. But we forget that People…
Liked by Cole Stokes
-
This seems so unreal, but I just started my first week of classes in Thailand! I’m a foreign exchange student this semester at Mahidol University…
This seems so unreal, but I just started my first week of classes in Thailand! I’m a foreign exchange student this semester at Mahidol University…
Liked by Cole Stokes
Other similar profiles
Explore more posts
-
Abhay Sharma
The most underrated skill for a Cyber Security Analyst? (It’s not Python). 🐍 I’ve spent years mastering SIEM tools, getting my [Insert Certification, e.g., CompTIA Security+ / CISSP], and learning to hunt threats. But the one skill that actually moves the needle in a real crisis? Communication. If you can’t explain a "Buffer Overflow" or a "Zero-Day Vulnerability" to a Board of Directors without using jargon, the best technical fix in the world won't get funded. As analysts, we are translators. We translate Binary Risks into Business Risks. My 3 rules for reporting: Lead with the Impact: Don't start with how it happened; start with what’s at stake (Data, Revenue, Reputation). Provide a Path, Not Just a Problem: Never report a vulnerability without a proposed mitigation. Know your Audience: The IT Manager wants the technical logs. The CEO wants to know if the company is in the news tomorrow. Call to Action: What’s one "non-technical" skill that has helped you the most in your cyber career? #CareerAdvice #CyberSecurityCommunity #TechCommunication #CyberAnalyst
4 Comments -
Adam Saeed
Well said, this really resonates. I’ve also noticed how many cybersecurity job descriptions read more like a “wish list” than a realistic role. I always advise my mentees to specialize and build depth in one or two areas, while maintaining enough breadth to collaborate across the wider security and GRC landscape. Strong teams are built when specialists align their strengths toward a common goal... #cybersecurity #GRC
-
Rachel G.
We ran a phishing and OSINT simulation. A few folks pushed back—"just let me do my job." But 93% of testers said it changed how they think about hackers. That’s not checkbox training. That’s the real stuff. Learn more about Huntress Managed Security Awareness Training https://okt.to/BIXwkv
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content