How to Break Into Security, Bejtlich Edition
Summary: In this Krebs on Security advice column, Richard Bejtlich, who moved from director of incident response at General Electric to chief security officer at Mandiant, recommends that security novices learn hands-on by running Metasploit from BackTrack Linux against the deliberately vulnerable Metasploitable distribution. He suggests adding a third machine running Security Onion on a dumb 10 Mbps hub so the learner sees the same attack traffic from both attacker and defender perspectives.
Bottom line: Bejtlich's point is that so-called cyber weapons are just software, and that using them is a question of patience, judgment, planning, and operational tradecraft rather than magic - a framing that puts human skill, not tooling, at the center of what defenders are up against.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026