Headshot of Brock Kjelden

Brock Kjelden

Security Consultant

As a Security Consultant, Brock Kjelden is responsible for verifying findings, developing new scanning templates and methodologies for External Attack Surface Management (EASM), and ensuring rapid integration of new vulnerabilities into scanning coverage. He also supports clients through continuous External Network Pentesting with EASM+, providing in-depth manual asset enumeration and OSINT, as well as performing External Network and Web Application penetration testing to deliver exceptional results.
In his four-year cybersecurity career, Brock has built a centralized Security Operations Center (CSOC) for a Midwest retailer, implementing XDR, SIEM, firewalls, and endpoint controls. At NetSPI, he contributes by creating attack chains and proof-of-concepts (POCs) for internal testing teams, translating complex tools into reproducible steps using platforms like Burp Suite.

Brock holds a CompTIA Security+ certification and is pursuing his OSCP. He is dedicated to advancing his expertise and supporting NetSPI’s mission to enhance client security.

More By Brock Kjelden

Critical Vulnerability

CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeaways

A critical authentication bypass vulnerability (CVE-2026-20127) has been identified in Cisco Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated, remote attackers to gain administrative privileges on affected systems. Exploitation in the wild has been confirmed, and immediate action is required to mitigate risk.

Learn More
Critical Vulnerability

CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways

Learn about CVE-2026-1731, a critical RCE vulnerability in BeyondTrust RS & PRA products. Discover its impact, affected versions, and remediation steps.

Learn More
Critical Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) [CVE-2026-1281 & CVE-2026-1340]: Overview & Takeaways

Ivanti has disclosed two critical zero‑day vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE‑2026‑1281 and CVE‑2026‑1340. Both vulnerabilities have been exploited in active attacks and allow unauthenticated remote threat actors to compromise EPMM appliances.

Learn More
Critical Vulnerability

Oracle WebLogic Server Proxy Plugin (CVE-2026-21962): Overview & Takeaways

CVE-2026-21962 allows an unauthenticated remote attacker to bypass security controls and potentially gain unauthorized access to backend WebLogic systems. Because these proxy plugins often sit in DMZ environments, the exposure is significant.

Learn More