Jenko Hwong

Jenko Hwong

Principal Product ResearcherHuntress

Jenko Hwong, is a Principal Security Researcher at Huntress Labs. He was formerly a Principal Threat Researcher at Netskope, speaks regularly at RSA and DEFCON, and is a Cloud Village CTF Lead. He brings customer and product experiences from over 25 years in research, product management, and engineering at companies such as Cisco and TIBCO, as well as security startups in markets such as vulnerability scanning, anti-virus/anti-spam appliances, penetration-testing, threat intelligence, and Active Directory security. He successfully founded a startup in the enterprise monitoring market and has led production deployments with enterprise customers including Walmart, Microsoft, Lucent, Chase, and European banks.

Jenko's favorite security tip: "Everyone is a scammer until proven real/valid. Don't trust, and always verify first, preferably 3 times, 3 different ways, and without the other party knowing. Just because you're paranoid, doesn't mean they aren't targeting you. :)"

Jenko was recently featured in Netwrix's inaugural Threat Lab Quarterly for CloudBasher, a toolkit he built with Chris Ryan that shows how free cloud shell features in AWS, Azure, and GCP can be turned into persistent attacker infrastructure, even after credentials are revoked.

Blog Posts By This Author

Read more about GWS and Business Email Compromise: Why BEC Is Now an Identity Problem
GWS and Business Email Compromise: Why BEC Is Now an Identity Problem
Blog Post

BEC used to mean a bad invoice. Now it means multi-stage identity abuse through cloud authentication and SaaS trust relationships. If you're still treating it as an email problem, you're already behind.

Read more about The Identity Breach You Didn’t Know You Had: Google Workspace
The Identity Breach You Didn’t Know You Had: Google Workspace
Blog Post

If you still think of Google Workspace as email and documents, attackers already have the advantage. It's an identity control plane for thousands of SaaS apps, and it's being exploited accordingly.