A closing argument in a presentation on security culture carries an important message. But it’s not the message you might think.
Watch more videos on my YouTube channel.
Archive for the ‘Videos’ Category
Stuck in Traffic – Disable Legacy Protocols in Azure
Posted bySMTP, POP3, IMAP4, Basic Auth. What could possibly go wrong? Listen. Please. Disable legacy auth protocols in Azure AD … ASAP.
Watch more videos on my YouTube channel.
Stuck in Traffic – Securing the Safari
Posted byWhen your front-end controls are solid, but your back-end controls open up tourists to lions. Work with me here. Here’s a tip I took away from a safari.
Watch more videos on my YouTube channel.
Stuck in Traffic – No Trust for Insider Threats
Posted byApplying zero-trust thinking to the insider threat problem.
Pakistani Man Bribed AT&T Employees to Unlock Phones, Plant Malware
https://ift.tt/2M3ifF9
Watch more videos on my YouTube channel.
Stuck in Traffic – A Call to Action for Universities
Posted byWhy do new grads make old mistakes? What can we do to improve the coding and configuring of security controls, specifically by developers?
Watch more videos on my YouTube channel.
Stuck in Traffic – New DNS Domains are Bad DNS Domains
Posted byWe’ve said it for some time. But we say a lot of things in InfoSec. Finally, there is data to back up the saying. Block access to new DNS domains to significantly reduce risk.
https://ift.tt/2NmuE74
Watch more videos on my YouTube channel.
Stuck in Traffic – Follow the Money
Posted byUpside: business-to-business clients spend more with secure organizations. Downside: B2B clients sue non-secure organizations. Now to use this in building a security program.
Watch more videos on my YouTube channel.
Stuck in Traffic – Agile Roadmaps
Posted byTips for building security roadmaps, or alternatively, what having a deck party taught me about planning.
Watch more videos on my YouTube channel.
Stuck in Traffic – iOS 12.4 Jailbreak and Regression Testing
Posted byApple iPhones and iPads running iOS 12.4 are once again open to jailbreaking. I say once again because the vulnerability was closed in 12.3, but is back in 12.4. This is a good time to think about our AppSec regression testing process.
More here:
https://ift.tt/2NfQwkt
Watch more videos on my YouTube channel.
Stuck in Traffic – Three Ways to Protect Three-some APIs
Posted byAnother look at 3fun’s mistakes, and three lessons we can take back to our mobile AppDev teams.
See the original article here: https://ift.tt/2JHdCyg
Watch more videos on my YouTube channel.