Posts
How leading CISOs build business-critical cyber cultures
As Rodgers puts it, “What got you here won’t get you there. You know how to configure a firewall, but now you have to communicate to executives. You have to
Exploring the Impact of NIST SP 800-53 on Federal IT Systems
NIST SP 800-53 is a framework developed by the National Institute of Standards and Technology (NIST) that provides guidelines and best practices for securing federal information systems and protecting the
Microsoft Outlook security hole lets attackers in without opening a tainted message
“There are at least two more confirmed CVEs that have yet to be patched, (both of) which lead to full NTLM [Network Trust Level Manager] compromise, so the risk is
Upcoming Speaking Engagements
Upcoming Speaking Engagements This is a current list of where and when I am scheduled to speak: I’m speaking at eCrime 2024 in Boston, Massachusetts, USA. The event runs from
Texas Sues GM for Collecting Driving Data without Consent
Texas Sues GM for Collecting Driving Data without Consent Texas is suing General Motors for collecting driver data without consent and then selling it to insurance companies: From CNN: In
Ransomware kingpin who called himself “J P Morgan” extradited to United States
An investigation dating back almost ten years has seen the extradition this week to the United States of a man suspected to be the head of one the world’s most
Ransomware Kingpin Who Called Himself “J P Morgan” Extradited to the United States
An investigation dating back almost ten years has seen the extradition this week to the United States of a man suspected to be the head of one the world’s most
2.7 billion Leaked Data Records Expose Personal Information of US People
Hackers leaked 2.7 billion data records containing personal information belonging to citizens of the United States for free, on a dark forum. The attackers claim they had exfiltrated the data
Microsoft Patched SmartScreen Zero-Day Without Announcing
Microsoft revealed that it had patched a critical SmartScreen zero-day vulnerability two months ago, during June 2024, on Patch Tuesday. Hackers had been exploiting the flaw in the wild as