All Posts

Cybersecurity News – December 17, 2020

Trump considers clemency for Silk Road founder The Daily’s Beast’s sources say the White House counsel’s office has had documents related to the case of…

Best Moments from “Hacking SaaS Security” – CISO Series Video Chat

Here’s a six minute highlights video of last week’s CISO Series Video Chat: â€œHacking SaaS Security: An hour of critical thinking on on cloud application policy,…

Cybersecurity News – December 16, 2020

Microsoft seizes SolarWinds domain – quarantine starts today The move was made to seize and sinkhole the avsvmcloud[.]com domain that played a central role in…

The People Closest to You Will Hurt You

Insider threats. We know some are malicious, and sometimes it’s the unwitting result of someone trying to do their job. Aren’t you supposed to trust…

Cybersecurity News – December 15, 2020

SolarWinds Orion carrying malware The company said updates to its IT management platform between March and June may have carried malware as a result of…

PREVIEW [12-18-20] Hacking the Crown Jewels – CISO Series Video Chat

Here’s a preview of our last CISO Series Video Chat of 2020: “Hacking the Crown Jewels: An hour of understanding what data you have, what’s…

Cybersecurity News – December 14, 2020

Adrozek malware can infect over 30K Windows PCs a day This new credential-stealing malware injects ads into search engine results pages often on top of…

Cybersecurity News – December 11, 2020

Breaking up Facebook won’t be easy The US government and 48 attorneys general want to break up Facebook. In twin lawsuits filed on Wednesday, they…

Six Trends We Saw on CISO Series in 2020

We’ve been evolving the model of the CISO Series and here are some behaviors we saw emerge over the past year. 1: Short form podcasts…

Defense in Depth: Imposter Syndrome

For CISOs and other security leaders, suffering from imposter syndrome seems inevitable. How can you ever be really confident when there’s an endless stream of…

Cybersecurity News – December 10, 2020

The Cybersecurity community responds to FireEye hack On Tuesday, FireEye revealed it was hacked and its “Red Team” software it uses for penetration testing was…

Best Moments from “Hacking User Access” – CISO Series Video Chat

Here are six minutes of the best moments from “Hacking User Access: An hour of critical thinking on managing initial and ongoing access to network…

Cybersecurity News – December 9, 2020

Microsoft’s December 2020 Patch Tuesday fixes 58 vulnerabilities With the December 2020 Patch Tuesday security updates release, Microsoft has released fixes for 58 vulnerabilities and…

When Should You Stop Trusting Your CISO?

How technically capable does my CISO need to be? If they lose their technical chops, should we stop trusting them? Should they even be a…

Cybersecurity News – December 8, 2020

Google publishes cross-site leaks wiki This site is set up as an open knowledge base where researchers can share new information about cross-site leaks. At…

PREVIEW [12-11-20] “Hacking SaaS Security” – CISO Series Video Chat

Here’s a preview of this Friday’s [December 11th, 2020] CISO Series Video Chat for â€œHacking SaaS Security: An hour of critical thinking on on cloud application…

Cybersecurity News – December 7, 2020

Drug dealers offer Pfizer vaccine on the Dark Web With the United Kingdom becoming the first Western country to authorize a Covid-19 vaccine and announce…

Cybersecurity News – December 4, 2020

Spotify celebrity pages defaced to plug Trump, Taylor Swift A hacker has vandalized Spotify’s list of the year’s most popular songs. The hacker, who goes…

[12-18-20] Hacking the Crown Jewels – CISO Series Video Chat

Please join us Friday, December 18th, 2020 for â€œHacking the Crown Jewels: An hour of understanding what data you have, what’s REALLY important, where it resides,…

Best Responses to “22 Effective Information Security Risk Management Techniques”

After publishing the article, “22 Effective Information Security Risk Management Techniques,” I asked the community for their feedback. What did they like, not like, and…

Cybersecurity News – December 3, 2020

Malicious hackers target the Covid-19 vaccine ‘cold chain’ As the world waits for the COVID-19 vaccine, a very complex distribution process is underway that requires…

Defense in Depth: Why Don’t More Companies Take Cybersecurity Seriously?

With every cybersecurity breach, we still don’t seem to be getting through. Many companies don’t seem to be taking cybersecurity seriously. What does it take?…

Best Moments from “Hacking Data Protection and Visibility” – CISO Series Video Chat

Here are six minutes of the best moments from our last CISO Series Video Chat “Hacking Data Protection and Visibility: An hour of critical thinking…

Cybersecurity News – December 2, 2020

US Supreme Court eyes narrowing of CFAA Continuing a story we covered on Monday, the Supreme Court has indicated serious reservations about the ambiguity and…