Big Changes are Afoot: Expanding and Enhancing the Have I Been Pwned API

Presently sponsored by: Varonis. Reduce your SaaS blast radius with data-centric security for AWS, G Drive, Box, Salesforce, Slack and more.

Just over 3 years ago now, I sat down at a makeshift desk (ok, so it was a kitchen table) in an Airbnb in Olso and built the authenticated API for Have I Been Pwned (HIBP). As I explained at the time, the primary goal was to combat abuse of

Continue reading Big Changes are Afoot: Expanding and Enhancing the Have I Been Pwned API→

Weekly Update 318

Presently sponsored by: EPAS by Detack. No EPAS protected password has ever been cracked and won’t be found in any leaks. Give it a try, millions of users use it.

Aussie breachapalooza! That what it feels like this week between Optus (ok, it was weeks ago but it’s still in the news), Vinomofo, My Deal and the mother of all of them (at least as far as media interest goes), Medibank. That last one totally smashed my week

Continue reading Weekly Update 318→

Weekly Update 317

Presently sponsored by: Varonis. Reduce your SaaS blast radius with data-centric security for AWS, G Drive, Box, Salesforce, Slack and more.

I decided to do something a bit different this week and mostly just answer questions from my talk at GOTO Copenhagen last week. I wasn’t actually in Denmark this time, but a heap of really good questions came through and as I started reading them, I thought “

Continue reading Weekly Update 317→

Weekly Update 316

Presently sponsored by: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet. Learn more here.

Geez it’s nice to be home 😊 It’s nice to live in a home that makes you feel that way when returning from a place as beautiful as Bali 😊 This week’s video is dominated by the whole discussion around this tweet:

Continue reading Weekly Update 316→

Weekly Update 315

Presently sponsored by: Varonis. Reduce your SaaS blast radius with data-centric security for AWS, G Drive, Box, Salesforce, Slack and more.

How’s this weeks video for a view?! It’s a stunning location here in Bali and it’s just been the absolute most perfect spot for a honeymoon, especially after weeks of guests and celebrations. But whoever hacked and ransom’d Optus didn’t

Continue reading Weekly Update 315→

Weekly Update 314

Presently sponsored by: SecAlerts vulnerability awareness: Receive CVE & zero-day alerts, news & version updates all matched to your software. Discount code within!

Wow, what a week! Of course there’s lots of cyber / tech stuff in this week’s update, but it was really only the embedded tweet below on my mind so I’m going to leave you with this then come to you from somewhere much more

Continue reading Weekly Update 314→

Weekly Update 313

Presently sponsored by: Varonis. Reduce your SaaS blast radius with data-centric security for AWS, G Drive, Box, Salesforce, Slack and more.

I came so close to skipping this week’s video. I’m surrounded by family, friends and my amazing wife to be in only a couple of days. But… this video has been my constant companion through very difficult times, and I’m happy to still being

Continue reading Weekly Update 313→

Weekly Update 312

Presently sponsored by: Kolide believes that maintaining endpoint security shouldn’t mean compromising employee privacy. Check out our manifesto: Honest Security.

I’m so excited to see the book finally out and awesome feedback coming in, but I’m disappointed with this week’s video. I frankly wasn’t in the right frame of mind to do it justice (it’s been a very hard road

Continue reading Weekly Update 312→

“Pwned”, the Book, is Finally Here!

Presently sponsored by: Kolide believes that maintaining endpoint security shouldn’t mean compromising employee privacy. Check out our manifesto: Honest Security.

The first time I ever wrote publicly about a company’s security vulnerabilities, my boss came to have a word with me after seeing my name in the news headlines.

One of the worst days I’ve ever had was right in the middle of the Have I

Continue reading “Pwned”, the Book, is Finally Here!→

Weekly Update 311

Presently sponsored by: Kolide is an endpoint security solution for teams that want to meet SOC2 compliance goals without sacrificing privacy. Learn more here.

Well, after a crazy amount of work, a lot of edits, reflection, and feedback cycles, “Pwned” is almost here:

Continue reading Weekly Update 311→