Jori VanAntwerp (@CSecDaemon) header
Jori VanAntwerp (@CSecDaemon) profile picture

Geek, Gearhead, & Founder

Joined February 2017
Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)Photo by Jori VanAntwerp (@CSecDaemon)
Jori VanAntwerp retweeted
Happy Halloween from EmberOT! 🎃 May your network diagrams be current, your alerts meaningful, & your "temporary" vendor connections actually temporary. Special shoutout to everyone working the night shift, keeping the lights on & the processes running. We appreciate you! 🤘🔥
1
1
5
Jori VanAntwerp retweeted
Today from 2-3pm! End your SAINTCON experience with a fun, hands-on reptile room adventure.
One more adventure after @SAINTCON wraps up today! 🦎 Join us from 2-3 PM MT for a private, hands-on visit to Clint’s Reptile Room in Springville. Free to attend, but please RSVP so we know how many to expect: soberincyber.org/events-1/po… #SoberInCyber #SAINTCON
1
1
23
Jori VanAntwerp retweeted
One more adventure after @SAINTCON wraps up today! 🦎 Join us from 2-3 PM MT for a private, hands-on visit to Clint’s Reptile Room in Springville. Free to attend, but please RSVP so we know how many to expect: soberincyber.org/events-1/po… #SoberInCyber #SAINTCON
2
1
6
126
Jori VanAntwerp retweeted
OT horror stories hit differently. Zombie vendor connections. Stolen credentials. 10,412 alerts. Untested isolation plans. Phantom PLCs. Five fictionalized nightmares, real-world problems, and helpful tips for surviving them. emberot.com/resources/blog/o… #OTsecurity #ICSsecurity
1
2
19
Jori VanAntwerp retweeted
At @SAINTCON tonight? Come find us after dark. 🌙 Dirty sodas 🍹 Tasty treats 🥨 Alcohol-free networking 💬 Limewire Brute-Force music trivia 🎶 Starting at 6 PM at Hyatt Place Provo. No signup needed! soberincyber.org/events-1/so… #SAINTCON #SoberInCyber
2
1
5
470
Jori VanAntwerp retweeted
We're excited to announce our strategic partnership with @FoxGuardInc! Together, we're expanding access to practical OT visibility, asset discovery, and threat detection for critical infrastructure operators. Full announcement: emberot.com/newsroom/emberot…
1
1
2
19
Jori VanAntwerp retweeted
Mosey on up and join @SoberInCyber at the Deadwood Soda Saloon tonight from 6-9:00 PM during the Sponsor Stampede at @BHinfoSecurity @WWHackinFest! 🥤 Handcrafted sodas & a sparkling good time await ya. soberincyber.org/events-1/so… #WWHFDeadwood2026
4
7
118
Jori VanAntwerp retweeted
If AI lets one person do the work of five, who’s training the next generation? @CSecDaemon joins @aaronccrow on the @protectitall podcast to discuss why skipping junior talent today could mean no senior expertise tomorrow. 🎧 protectitallpod.com/ep123/ #OTSecurity #ICSsecurity
1
1
11
Jori VanAntwerp retweeted
We’re at @BlueTeamCon! Join #SoberInCyber at 9 PM CT in the alcohol-free board games room & wind down after opening day with games, mocktails, good company, and zero pressure to drink. 🎲 soberincyber.org/events-1/al… (Blue Team Con badge required)
5
8
282
Jori VanAntwerp retweeted
#CIRCIA starts with a scope question to see if the rule even applies to your org. This week we go through the proposed covered entity criteria, including SBA size standards & sector-based triggers. emberot.com/resources/blog/c… #OTsecurity #ICSsecurity
1
2
19
Jori VanAntwerp retweeted
Siemens S7 detection needs more than a rule that recognizes protocol traffic. @CSecDaemon looks at S7comm production traffic in light of AA26-231A & why source, controller, timing, role, authorization, & baseline context matter. emberot.com/resources/blog/s… #OTsecurity #ICSsecurity
1
2
55
Jori VanAntwerp retweeted
There may be a path out of your OT network that nobody wrote down. A vendor tunnel. A cellular gateway. A radio link. An old modem, still getting billed. Let's talk about how to find undocumented OT external connections. emberot.com/resources/blog/o… #OTsecurity #ICSsecurity
1
1
2
70
Jori VanAntwerp retweeted
Today at DEF CON: Sober in Cyber founder @the_jvan is leading a group discussion in The Diana Initiative Village at 1:00 PM. Stigma Is Stupid: Talking About Recovery, Mental Health, and Hard Stuff Without Making It Awkward 🕐 1 PM 📍 LVCC – L2 – W209 Join the conversation!
2
1
4
233
Jori VanAntwerp retweeted
A security assessment fills the report, but the work after the assessment builds the program. @CSecDaemon writes about why OT findings need ownership, prioritization, operational buy-in, and controls that teams can actually sustain. emberot.com/resources/blog/s… #OTsecurity #ICS
1
1
2
27
Jori VanAntwerp retweeted
A #CVSS score tells you how severe a vuln looks on paper. Context (+ a seasoned operator) tells you whether it's reachable, patchable, process-adjacent, vendor-managed, segmented, or realistic to fix this week. From @CSecDaemon: emberot.com/resources/blog/o… #OTsecurity #ICSsecurity
2
2
46
Jori VanAntwerp retweeted
CIP-015 compliance doesn't have to start with a 40-site rollout. In @Ember_OT's latest article, @CSecDaemon shares a realistic 90-day path for utilities that need INSM, real visibility, and budget discipline. emberot.com/resources/blog/c… #OTsecurity #CIP015 #ICSsecurity
1
1
29
Jori VanAntwerp retweeted
The future OT analyst needs more than cyber fundamentals. They need OT/ICS depth, protocol fluency, & enough AI literacy to challenge model output instead of trusting it blindly. New article by @CSecDaemon on why the cross-disciplinary OT analyst wins: emberot.com/resources/blog/o…
2
2
26
Jori VanAntwerp retweeted
When remote OT environments span hundreds (or thousands) of miles, teams need usable data they can act on. Better visibility helps operators reduce blind spots, improve detection, & support safer, more reliable operations. New article from @CSecDaemon emberot.com/resources/blog/p…
1
2
26
Jori VanAntwerp retweeted
New #OT Vuln Intel Report w/@AdvisoryIcs . 2,203 High/Critical vulns tracked 2024-2025. 29 (1.32%) confirmed weaponized via CISA KEV. Five-lens prioritization method: exploit evidence, reachability, asset criticality, operational impact, patch feasibility. emberot.com/ics-ot-vulnerabi…
1
2
58
Jori VanAntwerp retweeted
IT lets you move fast. OT requires you to move carefully. Vendor contracts, validation cycles, legacy PLCs, and operators who know every edge case. Security changes can affect real-world processes. Part 2 of our OT Curious series: emberot.com/resources/blog/v…
1
2
41