Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Mark Ernest
Using the Duo Admin API to Gather Cross-tenant Administrator Email Addresses
tl;dr — A threat actor can create a free Duo tenant, upgrade to a trial premium service plan to create an Admin API, and programmatically identify valid cross-tenant (within the same Duo deployment instance) Administrator email accounts to use in targeted phishing campaigns. The Duo Admin API provides programmatic access to the administrative functionality of Duo Security’s two-factor authentication platform.
Part 1 - Exploring a probable escalation of phishing-as-a-service, email collection, automated exfiltration, and corporate extortion
With a potential decline in revenue from ransomware campaigns and compromised credentials being sold by initial access brokers, financially motivated threat actors may evaluate new methodologies, likely within established tools and processes, to increase the monetization of future campaign efforts.
Portrait of My Grandfather
I am working on a portrait commission. Not a real commission. My mother asked me to do it (although arguably that is the most real of commissions.) A few years ago I did a series of portraits of her father as Christmas gifts for her and for my siblings. This year she asked me to do one of her father-in-law, my father's father. I happily accepted the commission - she is my mom and all - but the project is giving me fits. First, I make no claim to any skill as a portrait artist.
Don't Miss What Is Coming
Photo by Johannes Plenio: https://www.pexels.com/photo/winding-road-photography-1133505/ My family moved to a new neighborhood the summer after I graduated high school. A week after we moved in, I spent a sunny afternoon in the driveway working on my car. A nine-year-old from down the street rode by on his bike. He shouted a curse word at me and kept going. I laughed and kept working. He rode back by and did it again.
MITRE ATT&CK DEFENDER™ Cyber Threat Intelligence Training
Before providing some thoughts on the Cyber Threat Intelligence (CTI) training content and certification path, a brief overview of the MITRE ATT&CK Defender™ (MAD) training program can help provide some context on the scope and proposed...
I Broke So You Don't Have To
I broke. I didn't go broke. I broke. I spent fifteen years stuffing my ability, my ideas, my creativity, and my personal potential in order to satisfy the appetites of an insatiable, immutable bureaucracy. Then one day I broke. I walked out. I tried off and on for years to find some ripcord I could pull to escape. I didn't try hard enough for long enough. I stayed stuck there. The grinding, glacial pressure of an imbecilic system finally smashed me into psychological dust.
In One Generation
Here is a little pop quiz. (No cheating allowed through Google, Ancestory.com, or calling home!) Question #1: How many of your grandparents can you name? (Biological, adopted, step, whatever. It doesn't matter.) Question #2: How many of your great-grandparents can you name? Did you fall flat on question #2? Most of us probably did. I can name all four of my biological grandparents but only two of my great-grands without having to look at my family genealogy.
Cyber Threat Intelligence
In Part 1 of the Collection Management series, Collection Management Part 1 - Overview, we defined a collection workflow and focused on the objectives of each process step. In Part 2, Collection...
Cyber Threat Intelligence
Collection Management Part 2 - Design Technical Approach In the previous story: Cyber Threat Intelligence Collection Management Part 1 - Overview the CTI Collection management lifecycle was explored. Part 2 will deep dive into the CTI collection design phase, specifically with a focus on future CTI Processing automation. In the previous post, the following collection source was leveraged for the use case: Dead or Alive? An Emotet Story and will be used through the remainder of this story.
Cyber Threat Intelligence
By Mark Ernest Collection Management Part 1 - Overview Cyber Threat Intelligence Lifecycle Prior to exploring collection management, it's pertinent to define the cyber threat intelligence (CTI) lifecycle. The CTI lifecycle can broadly be identified under the following domains, each with specific objectives:
Applying test-driven development to detection engineering
tl;dr - Don't write a detection signature without first building a test case or it may burn you in the future. Definitions and Scope As the story title so boastfully yet ambiguously conveys, the mature concept of test-driven development (TDD) within the domain of software engineering can also be applied to the emerging discipline of detection engineering. A quick anecdote before exploring TDD and detection engineering; as a cyber threat intelligence analyst, I once...
A Splunk SDK wrapper for red teams
splunkdefeat is a Splunk Enterprise SDK for Python wrapper to help red teams conduct multiple attack techniques against Splunk. The motivation for this proof-of-concept tool was to illustrate practical attacks against Splunk, the associated risks, and how defenders can detect the activity. The author assumes no liability for the use of this tool. While splunkdefeat was developed specifically for Splunk, the attack techniques, associated risks, and detection strategies can be...
Splenius Capitis Muscle Syndrome
This syndrome—a commonly occurring headache, neck ache, and facial pain disorder—typically mimics the respective pain patterns of temporal tendonitis and migraine headache. By Edwin A. Ernest, III, DMD, FAANaOS and Mark W. Ernest, BA This article describes a very painful and commonly occurring pain syndrome associated with the splenius capitis muscle insertion. This syndrome was first described in the 1980’s by this author.
Jonny Lang to bring soulful sound to Dewey Beach
Jonny Lang is a veteran in the music business – at age 34. But, that’s what happens when your major-label debut comes out at age 15 and you earn a Grammy nomination a year before you can vote. Lang’s mix of rock, R&B and blues music will return to the area with a Tuesday, Aug. 23 concert at the Bottle & Cork in Dewey Beach. Born in Fargo, North Dakota, Lang started playing in blues-rock bands there until he and his band at the time moved to Minneapolis.
Superior Pharyngeal Constrictor Muscle Pain
This retrospective observational study of patients with unresolved wrist pain noted improvements in many quality of life parameters after Hackett-Hemwall dextrose prolotherapy. By Edwin A. Ernest, III, DMD, FAANaOS, Mark W. Ernest, BA and E. George Salter, PhD A painful syndrome originating in the oral pharynx is described in this article. The symptoms, similar to those associated with Ernest Syndrome (stylomandibular ligament hyperextension injury), were documented at the Ernest Clinic in 1988.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Mark
Contact Mark, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack