Andrew Humes

Senior Security Consultant

About Andrew

Andrew is a cybersecurity professional working on all types of security engagements driven by a passion for learning about all things breakable. Pivoting from a DOD civilian into government contracting before finally landing in the private sector has given Andrew an appreciation for the fast-paced innovation and research required to ensure that clients are always receiving the highest quality results in an accessible, actionable report. Special attention to the often forgotten network devices (such as printers) has been a hallmark of Andrew’s testing leaving no stone unturned while demonstrating maximum security impacts.

When not working/researching, Andrew spends time travelling with his wife, playing table top games, losing at online video games, climbing the great Colorado mountains, and engaging with current movies and tv-shows.

Upcoming Conferences

MAY
17

OzCon

Overland Park, KS

Slides and Materials

Back to the Future-Proof
Preparing Now for Quantum Decryption Threats

It’s a Dangerous Business
A Fellowship Approach to Cybersecurity

Ship of Theseus as a Service
Security Testing When Nothing Is Truly Yours

Raiders of the Lost Architecture
Security Testing in Modern Applications

Garbage In, Garbage Owned
Offensive Testing Strategies for AI Systems

Posts by Kevin

"It's a Dangerous Business, Going Out Your Door" Why the Cybersecurity Community Needs a Fellowship

“It’s a Dangerous Business, Going Out Your Door” – Why the Cybersecurity Community Needs a Fellowship

Explore how a fellowship model can transform the cybersecurity community, fostering mentorship and inclusivity for newcomers and veterans alike....
Quantum Leaping Through Data: Preparing for the Quantum Encryption Transition

Quantum Leaping Through Data: Preparing for the Quantum Encryption Transition

Quantum computers will break current encryption within 10 years, but adversaries are harvesting your data today. Your migration window is narrower than you think....
houston

Houston, We Have a Problem

Discover how comprehensive satellite penetration testing addresses vulnerabilities across spacecrafts, ground systems, and communication links to ensure end-to-end cybersecurity in space operations....
How to Get the Most Out of Your Penetration Test: A Guide to Preparation and Success

How to Get the Most Out of Your Penetration Test: A Guide to Preparation and Success

Learn how proper preparation ensures a successful penetration test. Discover key steps like access management for a thorough security assessment....
The Fellowship of the Phish: PayPal's Perilous Request Feature

The Fellowship of the Phish: PayPal’s Perilous Request Feature

Discover how attackers exploit legitimate features in PayPal's system to execute sophisticated phishing scams and what we can learn from creative misuse....
What is a Threat Led Penetration Test?

What is a Threat-Led Penetration Test?

Explore Secure Ideas' expert approach to Threat-Led Pen Testing (TLPT) and proactive cybersecurity strategies....

Message Andrew

Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to Andrew, not a general inbox.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.