It was announced this week that the Zoom meeting software had two 0-day vulnerabilities (CVE-2019–13449, CVE-2019–13450). Putting the hype aside, there are three security lessons that apply to most all software.
Watch more videos on my YouTube channel.
Using Ansible and Hashicorp as an example, a discussion on how to get the initial secret to automation tools which use password vaults.
Watch more videos on my YouTube channel.
Software has eaten the world. Buggy software. Exploitable software. Fireworks provide a timely anecdote on the importance of protecting software.
Watch more videos on my YouTube channel.
IT security is about the basics. Say, network segmentation. But the problem with everyday basics? They don’t scale. So what would it take to do micro-segmentation at scale?
Watch more videos on my YouTube channel.
We have a lot of suspicious attachments and files come into our networks. Let’s use these as a resource for training and preparation.
Watch more videos on my YouTube channel.
Legacy and living dead systems have unique challenges for security teams. Take, for example, a 48 year old mainframe that’s still in production. Here is an architecture for prevention and detection.
Watch more videos on my YouTube channel.
Tracing the evolution of phishing techniques to highlight a simple rule: our defense don’t stop criminals, our defenses change criminals tactics.
Watch more videos on my YouTube channel.
When everything is automated, protecting the automation becomes critical. Now automation servers like Jenkins often use open source plugins. This is a problem when those plugins have underlying vulnerabilities, as researchers with NCC Group recently found. Own a plugin, own a pipeline, own a Cloud.
Watch more videos on my YouTube channel.
A lesson we can learn from the original Toronto Raptors, and what it says about the future of User Behavior Analytics.
Watch more videos on my YouTube channel.
Protecting, detecting, and responding to ElasticSearch data leaks. Our starting point is a job site leaking 1.6 million people’s job search information.
Watch more videos on my YouTube channel.