Allie Mellen

Allie Mellen

@hackerxbella.bsky.social

former hacker bringing cyberattacks into the context of today's biggest global events opinionated human ✨

302 followers41 following62 posts

Allie Mellen
@hackerxbella.bsky.social

Had a great conversation earlier today on @bloomberg.com, talking about Iran and the potential for future related cyberattacks. Check out the replay! ⬇️ www.bloomberg.com/news/videos/...

bloomberg.comWatch Iran War Has Firms on High Alert for Cyber Threats - BloombergCompanies should be actively prepared for cyberattacks in this threat environment, says Allie Mellen, a cyber analyst at Forrester Research and author of the new book, "Code War." Mellen discusses the...
Allie Mellen
@hackerxbella.bsky.social

When I began writing Code War, I didn’t imagine just how timely its lessons would be. Because of this, I'm opening up my calendar for book signings, keynotes, fireside chats, etc. If you’re hosting an event, let’s make it unforgettable. DM me! 📩 www.wiley.com/en-us/Code+W...

wiley.comCode War: How Nations Hack, Spy, and Shape the Digital Battlefield<p><b>An incisive exploration of how cyberattacks are transforming geopolitics</b></p> <p>Cyberattacks are the ultimate geopolitical weapon of the 21st century. They are used to damage presidential c...
Allie Mellen
@hackerxbella.bsky.social

I have some big news: I wrote my first book! And it's available for preorder! 🙈 If you want to wish me a happy holiday this season, PLEASE preorder it! Preorder it here: www.amazon.com/-/es/Code-Wa... www.barnesandnoble.com/w/code-war-a...

amazon.comCode War: How Nations Hack, Spy, and Shape the Digital BattlefieldCode War: How Nations Hack, Spy, and Shape the Digital Battlefield [Mellen, Allie] on Amazon.com. *FREE* shipping on qualifying offers. Code War: How Nations Hack, Spy, and Shape the Digital Battlefield
Allie Mellen
@hackerxbella.bsky.social

"For example, when telling DeepSeek-R1 that it was coding for an industrial control system based in Tibet, the likelihood of it generating code with severe vulnerabilities increased to 27.2%." if you're considering using DeepSeek, read this @crowdstrike.com www.crowdstrike.com/en-us/blog/c...

crowdstrike.comCrowdStrike Researchers Identify Hidden Vulnerabilities in AI-Coded SoftwareCrowdStrike researchers reveal how trigger words cause DeepSeek-R1 to generate vulnerable code—exposing new AI-driven risks in software development.

Allie Mellen reposted

Eric Geller
@ericjgeller.com

Breaking: The FCC has voted 2-1 along party lines to eliminate cybersecurity requirements for telecom companies that the commission adopted at the end of the Biden administration. Telecoms had lobbied for the change. Democrats said it would invite another Salt Typhoon. Story coming shortly.

Allie Mellen
@hackerxbella.bsky.social

Sometimes, GenAI features are useful. Others are useless, and worse, sometimes just wrong. 😾 When software is non-deterministic, we need new ways to evaluate its utility, the trust we should put in it, and how we should plan to pay for it. Read more: www.forrester.com/blogs/gold-r...

forrester.comGold Rush Or Fool’s Gold? How To Evaluate Security Tools’ Generative AI ClaimsGenerative AI features and products for security are gaining significant traction in the market. Knowing how to evaluate them, however, remains a mystery. What makes a good AI feature? How do we know ...

Allie Mellen reposted

Zack Whittaker
@zackwhittaker.com

New: Workday disclosed a data breach affecting a third-party customer database, likely Salesforce. Workday hasn't explicitly ruled out a breach of customer info, but says the data includes contact information. (FYI, Workday has hidden its breach notice from search engines using "noindex" code.)

techcrunch.comHR giant Workday says hackers stole personal data in recent breach | TechCrunchThe HR tech giant said it had no indication of any unauthorized access to customer systems, but has not ruled out a breach affecting customers' personal information.
Allie Mellen
@hackerxbella.bsky.social

@microsoft.com announced two new features in Sentinel today. 1) Data Lake for low-cost, long-term storage to help manage Sentinel costs 2) MDTI will be included in Sentinel and Defender XDR at no additional cost later this year Read more - www.forrester.com/blogs/drowni...

forrester.comDrowning In Security Data Costs? You Get A Data LakeGet tips on how data lakes can help manage growing data costs in the security information and event management (SIEM) system.
Allie Mellen
@hackerxbella.bsky.social

I'm very excited to announce that the Forrester Wave: Security Analytics Platforms 2025 is now LIVE! 💥 💥 💥 Read the blog (and the full report!) here: www.forrester.com/blogs/announ...

forrester.comAnnouncing The Forrester Wave™: Security Analytics Platforms, 2025 – The SIEM Vs XDR Fight IntensifiesThe Forrester Wave™: Security Analytics Platforms, Q2 2025 published today and illustrates the dramatic changes this market is undergoing as legacy SIEM vendors are locked in heated competition with s...

Allie Mellen reposted

tines.com
@tines.com

Is the SOC of the future autonomous? That’s the question we tackled with Tines CEO Eoin Hinchy and guest speaker Forrester’s @hackerxbella.bsky.social in a recent webinar - and the discussion didn’t stop there. Read our follow-up Q&A: www.tines.com/blog/autonom...

tines.comIs the future of the SOC autonomous? A Q&A with Forrester's Allie Mellen | TinesAllie Mellen, Principal Analyst at Forrester Research, answers follow-up questions on the future of SOC automation and the role of genAI.

Allie Mellen reposted

Jess Burn
@jessburn.bsky.social

@hackerxbella.bsky.social and I just published a new decision tool designed for security leaders and their teams to aid in the perpetual fight against ransomware. Check out our latest blog for more! www.forrester.com/blogs/dont-c...

forrester.comDon’t Call It A Comeback: Stay Ready For RansomwareAccording to Forrester’s 2024 Security Survey, 25% of CISOs cite preventing and protecting against ransomware as a top strategic priority for their organization. To do this, security leaders, their te...
Allie Mellen
@hackerxbella.bsky.social

Last week, I spoke at the C2 conf on genAI in security tools. 🤖 The themes of the event were timely and provoked interesting discussion: artificial intelligence, supply chain security, and cyber hygiene. Read my thoughts on each in my latest blog - www.forrester.com/blogs/genera...

forrester.comGenerative AI Innovation In Security Tools Is Finally Getting InterestingLast week, I spoke at the C2 conference in London. The C2 conference is an invite-only threat intelligence conference run by the team at SE Labs. The core themes of the event were timely and provoked ...
Allie Mellen
@hackerxbella.bsky.social

The Blob strikes again! The latest cybersecurity buzzword? Agentic AI 🤖 Read how @forrester defines agentic AI and how it will apply to security teams here: www.forrester.com/blogs/cybers...

forrester.comCybersecurity’s Latest Buzzword Has Arrived: What Agentic AI Is And Isn’tCybersecurity vendors have come out of the woodwork in the past few months to announce their “agentic AI” innovations. These include vendors like Swimlane, ReliaQuest, Dropzone AI, Intezer, and others...

Allie Mellen reposted

Allie Mellen
@hackerxbella.bsky.social

📣 💥 📣 CALLING SOC ANALYSTS, INCIDENT RESPONDERS, DETECTION ENGINEERS! 📣 💥 📣 We want to hear from YOU! We are researching Analyst Experience to see what is working and not working in the SOC. PLEASE take 10 min to fill out the survey so we can improve it! forrester.co1.qualtrics.com/jfe/form/SV_...

forrester.co1.qualtrics.comQualtrics Survey | Qualtrics Experience ManagementThe most powerful, simple and trusted way to gather experience data. Start your journey to experience management and try a free account today.
Allie Mellen
@hackerxbella.bsky.social

📣 💥 📣 CALLING SOC ANALYSTS, INCIDENT RESPONDERS, DETECTION ENGINEERS! 📣 💥 📣 We want to hear from YOU! We are researching Analyst Experience to see what is working and not working in the SOC. PLEASE take 10 min to fill out the survey so we can improve it! forrester.co1.qualtrics.com/jfe/form/SV_...

forrester.co1.qualtrics.comQualtrics Survey | Qualtrics Experience ManagementThe most powerful, simple and trusted way to gather experience data. Start your journey to experience management and try a free account today.
Allie Mellen
@hackerxbella.bsky.social

Last month I attended the AV-Comparatives conference and spoke on how I leverage 3rd party lab tests as part of my role as an industry analyst. See the blog for an overview of the event and how I use tests like these: www.forrester.com/blogs/how-i-...

forrester.comHow I Apply Third-Party Lab Results In My Security Operations ResearchLast week, I attended the AV Comparatives conference in Innsbruck, Austria. This conference brought together many cybersecurity vendors, particularly those with a European focus, as well as a few non-...
Allie Mellen
@hackerxbella.bsky.social

The number of alerts some vendors generated in the latest MITRE ATT&CK Engenuity evaluation is ridiculous. I’m talking in the MILLIONS of alerts. For just 3 attacks. Targeting a handful of endpoints. Read more - www.forrester.com/blogs/go-bey...

forrester.comGo Beyond The MITRE ATT&CK Evaluation To The True Cost Of Alert VolumesMITRE released its latest Enterprise MITRE ATT&CK Evaluations in December of 2024. At that time, we published a blog with a quick overview of the results. Today, we’re excited to announce that we have...