FINDING THE FLAWS IN THE TOOLS ORGANIZATIONS TRUST.
Cody Kretsinger is Director of Security Research at Galactic. He investigates security flaws, coordinates disclosure with vendors, and publishes the findings. His talks draw on that research and on experience building security operations.
IN THE NEWS
SELECTED RESEARCH
ALL RESEARCH →Credentials in MSP Assessment Software.
Two high-severity flaws in Kaseya RapidFire Tools Network Detective left scan credentials in cleartext or reversibly encrypted. Disclosed to Kaseya and fixed before publication.
READ THE ADVISORYIndustrial Lighting Controllers.
Unauthenticated access to the controllers that run the lighting at stadiums and landmarks. Joint research with Nick Schroeder.
READ THE RESEARCHSPEAKING TOPICS
VIEW ALL TOPICS →Symmetric Chaos. Asymmetric Talent.
How threat actor recruitment evolved from BBS crews to the coercion-fueled Com ecosystem.
REVIEW ABSTRACTThe Panic Gap.
Why Incident Response fails under pressure, and how to build protocols that survive contact.
REVIEW ABSTRACTInside the Adversary Mindset.
In 2011, Cody took part in the Sony Pictures breach as a member of LulzSec. This talk takes that experience apart for defenders.
REVIEW ABSTRACTLATEST
ALL EPISODES →Attackers Are Targeting People, Not Networks
One of the most-cited breaches of the last five years never touched the company's corporate network.
WATCH OR LISTENUrgently Hiring! Someone to Patch the FBI
On September 22nd, someone defaced the FBI's recruiting site and walked off with data on agents and applicants, all to pressure the Bureau...
WATCH OR LISTENPHP CVE-2026-109618 and CVE-2026-109619: Patch Status and Workarounds
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical RCEs. Vendor patch status, backports for 7.4 to 8.1, partial workarounds, and what to hunt for.
READ THE POSTIncident Response Readiness in Four Questions
Most of how fast an incident gets contained is decided months earlier, while nothing is on fire. Cody Kretsinger on the four questions to answer now: who can pull the plug, what your cyber policy requires, what gets preserved, and how long a restore really takes.
READ THE POSTBook a talk.
Keynotes and technical sessions on vulnerability research, incident response, and building security operations. Find a session for your audience, or get in touch about an event.