So say you have a multinational with several business units, and each business unit has separate security requirements. What can we learn from the first emperor of China?
Watch more videos on my YouTube channel.
Archive for the ‘Blogs’ Category
Stuck in Traffic – Mobile Internet and Drive-by Downloads
Posted byMobile Internet usage goes up. Drive-by download attacks goes down. The landscape may be constantly changing, but sometimes, change works in our favor.
Watch more videos on my YouTube channel.
Stuck in Traffic – Stolen Code Signing Certificates
Posted byCertificates used for code signing, a foundational control in application whitelisting, are being stolen and sold on the Darkweb for $1200.
Watch more videos on my YouTube channel.
Stuck in Traffic – BCP for Ransomware
Posted byHIV drugs impacted by ransomware reminds us of the importance of continuity and recovery plans.
Watch more videos on my YouTube channel.
We Got it Wrong at GrrCon 2017
Posted byWe Got it Wrong
This session is on all the things we all say all the time, about all the things we all know. Security through obscurity is bad. Defense in depth is good. Stop clicking things. Next generation is bad, or maybe, next generation is good. The list goes on and on. The resulting rules of thumb are sometimes contradictory and often misleading. With war stories and anecdotes, we’ll explore what happens when teams run security by tribal knowledge instead of research and reason. Spoiler alert: they get pwned. Turns out, we were wrong.
(Friday, October 27, 2017. Grand Rapids, Mi)
Watch more videos on my YouTube channel.
Stuck in Traffic – GrrCon Day 2
Posted byFinal day of the Grand Rapids hacker conference.
Watch more videos on my YouTube channel.
Stuck in Traffic – GrrCon Day 1
Posted byRecap of a few of the ideas at GrrCon in Grand Rapids, Michigan.
Watch more videos on my YouTube channel.
Stuck in Traffic – LAPS and Windows Credential Guard
Posted byMore ransomware is spreading using password theft, pass the hash, and pass the token. Here are two things in Windows networks you can deploy today.
Watch more videos on my YouTube channel.
Stuck in Traffic – No Model, No Problem
Posted byWhat to do when we want to assess our CyberSecurity program, but there’s no maturity model or controls framework available?
Watch more videos on my YouTube channel.
Stuck in Traffic – Insider Threat in Us
Posted byRecent study shows 92% of IT security professionals snooping corporate data, reading things they shouldn’t.
Watch more videos on my YouTube channel.