Deception is moving at machine speed. Learn to keep pace.
Portal LoginSupportBlogContact
Search
Portal LoginSupportBlogContact
Search
Get a Demo
Start for Free
HomeAuthors
Chris Ryan
Chris Ryan

Chris Ryan

Principal Product ResearcherHuntress

A series of oddly configured server banners, a JARM fingerprint, curious fields in a security certificate - these aren't just technical details, but are instead threads in a narrative tapestry woven like a Jon le Carré' spy novel.

For over 20 years, Chris Ryan has dedicated his life to studying these threads and the intersection between cybersecurity, Russian linguistics, and free and open-source software. His career path has taken detours through academia, aerospace and defense, software development, and the threat intelligence/cybersecurity fields.

Chris's favorite cybersecurity tip: "Defenders have to get it right every time; attackers only have to get it right once. Be vigilant and constantly aware—don't click on links in emails, use a password manager, turn on multi-factor authentication everywhere you can, and keep, maintain, and test backups."

Chris was recently featured in Netwrix's inaugural Threat Lab Quarterly for CloudBasher, a toolkit Jenko Hwong and he built that shows how free cloud shell features in AWS, Azure, and GCP can be turned into persistent attacker infrastructure, even after credentials are revoked.

Blog Posts By This Author

Read more about Panic at the Distro
Panic at the Distro
Blog Post

Panic at the Distro

Learn how critical Linux kernel flaws in CopyFail, Dirty Frag, and Fragnesia let unprivileged users escalate to root access. See what security teams can do to remediate.

Read more about The Evolving Linux Threat Landscape
The Evolving Linux Threat Landscape
Blog Post

The Evolving Linux Threat Landscape

Linux powers most of the internet and most of the enterprise — which makes it a high-value target most security teams underestimate. Here's what the threat landscape looks like heading into 2026.

Read more about Pursuing Parity: Attempting to Bring Cross-Platform Unity
Pursuing Parity: Attempting to Bring Cross-Platform Unity
Blog Post

Pursuing Parity: Attempting to Bring Cross-Platform Unity

Feature parity across Windows, macOS, and Linux sounds simple on a product roadmap. Actually building it means reconciling fundamentally different operating systems. Here's how Huntress is approaching it.

See All Blog Posts by Chris Ryan

Featured In These Upcoming Events & On-Demand Virtual Events

Read more about Hacking The Tragic Quadrant
Hacking The Tragic Quadrant
Livestream

Hacking The Tragic Quadrant

Huntress CEO and founder Kyle Hanslovan will spin up real attack techniques and show you just how fast modern tradecraft goes from idea to execution.

Read more about Infostealers: Your Digital Drug Dealers
Infostealers: Your Digital Drug Dealers
On-Demand Virtual Event

Infostealers: Your Digital Drug Dealers

It seems like a new infostealer variant hits the market and starts stealing people’s info every day. Although crypto is one of their biggest targets, it doesn’t stop ‘em from going after everything in sight. Today’s infostealers are doing more than stealing passwords. They’ll take your VPN configurations, browser autofills, even your AI configurations—anything that’s not nailed down. And it doesn’t stop there; this info is passed on and used for ransomware and other criminal activity ( à la initial access brokers). If you’ve seen any security news in the last year, you’ll know infostealers have been talked about non-stop. But here’s why we HAVE to talk about ‘em again. We’re exposing the infostealer underground: stolen info at scale, anatomy of a bot, how infostealer logs are packaged, sold, and marketed, threat actor engagement, and initial access brokerage, as well as “malware-as-a-service”.