Collaborate Disseminate
CVE-2020-0688 Scan Results, per Rapid7tl;dr — it’s the title of the post: “If You Can’t Patch Your Email Server, You Should Not Be Running It.”I read a disturbing story today with the following news:”Starting March 24, Rapid7 used its Project Sonar in… Continue reading If You Can’t Patch Your Email Server, You Should Not Be Running It
I have a confession… for me, the best part of virtual calls, or seeing any reporter or commentator working for home, is being able to check out their book shelves. I never use computer video, because I want to preserve the world’s bandwidth. That mea… Continue reading Seeing Book Shelves on Virtual Calls
Two posts in one day? These are certainly unusual times.I was thinking about words to describe different skill levels in digital security. Rather than invent something, I decided to review terms that have established meaning. Thanks to Google Books I f… Continue reading Skill Levels in Digital Security
I saw my like-minded, friend-that-I’ve-never-met Andrew Thompson Tweet a poll, posted above.I was about to reply with the following Tweet:”If I’m struggling to figure out how to capture a thought in just 1 Tweet, that’s a sign that a blog post might be… Continue reading When You Should Blog and When You Should Tweet
Malware Jake Tweeted a poll last night which asked the following:”I have an interesting ethical quandary. Is it ethically okay to use COVID-19 themed phishing emails for assessments and user awareness training right now? Please read the thread before r… Continue reading COVID-19 Phishing Tests: WRONG
This is the sort of story that starts as a comment on Twitter, then becomes a blog post when I realize I can’t fit all the ideas into one or two Tweets. (You know how much I hate Tweet threads, and how I encourage everyone to capture deep thoughts in b… Continue reading Seven Security Strategies, Summarized
In the September/October issue of Foreign Affairs magazine, Richard Clarke and Rob Knake published an article titled “The Internet Freedom League: How to Push Back Against the Authoritarian Assault on the Web,” based on their recent book The Fifth Doma… Continue reading Five Thoughts on the Internet Freedom League
Nineteen years ago this week I registered the domain taosecurity.com:Creation Date: 2000-07-04T02:20:16ZThis was 2 1/2 years before I started blogging, so I don’t have much information from that era. I did create the first taosecurity.com Web site shor… Continue reading Happy Birthday TaoSecurity.com
I started speaking publicly about digital security in 2000. I used to provide this information on my Web site, but since I don’t keep that page up-to-date anymore, I decided to publish it here.2017 Mr. Bejtlich led a podcast titled Threat Hunt… Continue reading Reference: TaoSecurity News
I started publishing my thoughts and findings on digital security in 1999. I used to provide this information on my Web site, but since I don’t keep that page up-to-date anymore, I decided to publish it here.2015 and later: Please visit Academia.edu f… Continue reading Reference: TaoSecurity Research