Blog
Study for CySA+ v3 or v4?
People who are pursuing CompTIA’s CySA+ certification are stuck with a bit of a decision right now. Do they study for v3 and take the test earlier? Or do they wait until v4 is (probably) released this June? CompTIA’s CySA+ page only says that the new version will be...
Security Defenses for Solo Entrepreneurs and Smaller Businesses
I was recently talking to a person who expressed their concern about protecting the data he processes in his business. He is a solo practitioner, so he does not have an IT department that can take care of this for him, and he asked me for some advice. How could he...
Are We Leaving People Hanging?
I recently discussed an escalation in tactics by scammers during an episode of the Security Weekly News podcast. The quick summary is that a finance employee in Hong Kong received an email that appeared to be from their CFO in the UK telling them to transfer the money...
Making Friends and Their Impact in Our Lives
The other day my son was asking to use some hardware that I had collected over the years and I ran across this little gem. In 2009, my employer had assigned me to the security role I had been advocating for. As part of this, our CIO felt that I needed to go to Black...
Developing Our Teams
Today I’ve been reading Adversarial Tradecraft in Cybersecurity by Dan Borges and ran into these lines in chapter 1. “Expertise is also a seriously limiting factor in the cybersecurity landscape. The ability to develop new capabilities or operation expertise cannot be...
Why Don’t We Hear About Western Cyber-Attacks?
I ran into this question while preparing for June 27th’s episode of Security Weekly News on a BBC article. I’m not going to rehash the article like I did on the podcast, but I think it’s worth reading. The question the BBC poses is interesting and in some circles...
Attribution in Cyber Security
People like to argue in cyber security. If you’ve been around it for a while, you’ve almost certainly seen (too) many examples of this. Performing attribution to a group or persons for specific intrusions is one of those areas of consistent, and sometimes...
