Jordan Bonagura

Managing Senior Consultant

About Jordan

With more than 25 years of experience in information security, Jordan is passionate about helping companies and clients protect their data and applications from threats and vulnerabilities. As a Principal Security Researcher he had led teams in conducting vulnerability management, risk assessments, penetration tests, and setting up boundaries to be compliant with standards for companies in different segments.

He contributed to significant projects, such as developing an integrated GNSS positioning system and an encryption communication protocol between ground and satellite at the Brazilian National Institute of Space Research. He also had the opportunity to speak at important security conferences around the globe, be a professor and course coordinator at colleges, and also a consultant for the Brazilian police in crime solving.

Upcoming Conferences

DEC

16

ISACA Central Florida Chapter

Orlando, FL

Slides and Materials

The CISO’s Myopia
by Jordan Bonagura

Spending a Lot of Money and Still Getting Hacked?
A Professionally Evil Approach Can Be Your BFF

Hack the Clock
Automating CVE Exploit Searches

When the Robots Start Acting Crazy
A Security Approach

Bypassing Browser PDF Security
Using Embedded JavaScript Forms for Social Engineering

Pins, Picks, and Principles
Jordan Bonagura & Travis Phillips

Posts by Jordan

Beyond the Browser: The Questions That Expanded the Attack Surface

Beyond the Browser: The Questions That Expanded the Attack Surface

Explore how emerging attack vectors like PDF forms in Outlook's preview pane can exploit trusted environments, challenging traditional security assumptions....
Supply Chain Security: Trust Is the New Attack Surface

Supply Chain Security: Trust Is the New Attack Surface

Securing the software supply chain requires continuous validation of trust, not just reliance on outdated third-party risk practices....
SaaS Sprawl, Identity, and the Illusion of Control

SaaS Sprawl, Identity, and the Illusion of Control

Explore the inevitable SaaS sprawl and learn how continuous visibility and governance can ensure security in modern enterprises....
Detecting Dangling SaaS Subdomains and Real Subdomain Takeovers

Detecting Dangling SaaS Subdomains and Real Subdomain Takeovers

Detecting and mitigating dangling SaaS subdomains and real subdomain takeovers with a more accurate, reliable tool to reduce false positives and build trust in security...
Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

Bypassing Browser PDF Security: Using Embedded JavaScript Forms for Social Engineering

From PDFs to social engineering, I explore how trusted apps and browsers can be exploited in penetration testing to reveal hidden risks....
From Nmap to CSV

From Nmap to CSV

Streamline Nmap data analysis with a bash script that converts output to a CSV format, optimizing penetration testing and improving communication with stakeholders....

Message Jordan

Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to Jordan, not a general inbox.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.