Stuck in Traffic – Privileged Access Time Windows

Four ways to manage developers’ privileged access, with bonus grumbling about daylight saving time.

Watch more videos on my YouTube channel.

Too much to do? Prioritize! However. Have you noticed how prioritizing one system can be undone by de-prioritizing another? Here’s how.

Watch more videos on my YouTube channel.

Cyber Monday and chargeback fraud, today from my home office.

Watch more videos on my YouTube channel.

A recent vulnerability in CouchDB provides an opportunity to talk about parser and deserialization weaknesses.

Watch more videos on my YouTube channel.

Fail open, fail closed, debit cards, and the Forever 21 breach.

Watch more videos on my YouTube channel.

Application security statistics from Node.js developers.

Watch more videos on my YouTube channel.

Few people (in the USA) require pins on their credit cards. The readers have to support this setup. So some criminals use this to modify chips and steal credit cards. Also? Waiters are more security conscious in Europe.

Watch more videos on my YouTube channel.

A new attack, AVGater, leverages antivirus functionality to compromise systems. It works against Kaspersky, Malwarebytes, Trend Micro, and more. Good reminder that hacks work against more than just code defects.

Watch more videos on my YouTube channel.

Touring castles in Romania has me thinking. What would happen if InfoSec adopted agile concepts, and did short sprints rather than building long roadmaps?

Watch more videos on my YouTube channel.

HTTP Public Key Pinning, an overview and as an example of deprecated security controls.

Watch more videos on my YouTube channel.