Data Provided by the Estonian Central Criminal Police is Now Searchable on Have I Been Pwned

Presently sponsored by: Netsparker – a scalable and dead accurate web application security solution. Scan thousands of web applications within just hours.

Running Have I Been Pwned (HIBP) has presented some fascinating insights into all sorts of aspects of how data breaches affect us; the impact on the individual victims such as you and I, of course, but also how they affect the companies involved and increasingly, the role of government and…

Continue reading Data Provided by the Estonian Central Criminal Police is Now Searchable on Have I Been Pwned→

Report URI Just Won the Best Emerging Technology Award!

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

I don’t normally do back-to-back blog posts, but this was no normal week! I just posted about how I won the European Security Blogger Award Grand Prix Prize for the Best Overall Security Blog and per the title of this post, a couple of hours later Scott Helme and I…

Continue reading Report URI Just Won the Best Emerging Technology Award!→

I Just Won the European Security Blogger Award Grand Prix Prize for the Best Overall Security Blog!

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

I’m not sure how I found myself in a European award program, maybe it’s like Australians in Eurovision? But somehow, I wiggled my way into The European Security Blogger Awards and before even having a chance to come down off the high that was last week’s Award for Information Security…

Continue reading I Just Won the European Security Blogger Award Grand Prix Prize for the Best Overall Security Blog!→

Weekly Update 89

Presently sponsored by: Varonis – Your Data. Our Mission. Get a free data risk assessment and gain complete visibility and control over your file shares.

An exciting weekly update – I got an award! I did write about it earlier this morning, but I talk about it more in this week’s update and explain why it means a lot.

In other news, I’m heading back to Europe in a few days from now so am…

Continue reading Weekly Update 89→

AusCERT and the Award for Information Security Excellence

Presently sponsored by: Varonis – Your Data. Our Mission. Get a free data risk assessment and gain complete visibility and control over your file shares.

I’ve been at the AusCERT conference this week which has presented a rare opportunity to walk to a major event from my home rather than fly to the other side of the world. And what an awesome walk too, right on the turn into “winter”, which means something…

Continue reading AusCERT and the Award for Information Security Excellence→

Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords

Presently sponsored by: Varonis – Your Data. Our Mission. Get a free data risk assessment and gain complete visibility and control over your file shares.

Back in August, I pushed out a service as part of Have I Been Pwned (HIBP) to help organisations block bad passwords from their online things. I called it “Pwned Passwords” and released 320M of them from real-world data breaches via both a downloadable file and an online…

Continue reading Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords→

Welcoming the Spanish Government to Have I Been Pwned

Presently sponsored by: Varonis – Your Data. Our Mission. Get a free data risk assessment and gain complete visibility and control over your file shares.

A couple of months ago, I shared news of on-boarding the UK and Australian governments to Have I Been Pwned (HIBP). As I explained at the time, I wanted to provide the folks there with easy access to their respective government domains which meant providing them with the facility to…

Continue reading Welcoming the Spanish Government to Have I Been Pwned→

New Pluralsight Course: Bug Bounties for Companies

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

Try publishing something to the internet – anything – and see how it long it takes before something nasty is probing away at it. Brand new website, new domain and it’s mere hours (if not minutes) before requests for wp-admin are in the logs. Yes, I know it’s not a…

Continue reading New Pluralsight Course: Bug Bounties for Companies→