I’m Teaming Up with Scott Helme to Run “Hack Yourself First” Workshops in Europe

Presently sponsored by: Digicert: What are the keys to securing the Internet of Things and are you prepared? Learn how PKI can secure your devices.

This is probably the most self-explanatory blog post title I’ve ever written! But be that as it may, it deserves some explanation as to how I’ve arrived at this point and like many great ideas, it began over some beers…

I’ve just arrived home to the Gold Coast in Australia…

Continue reading I’m Teaming Up with Scott Helme to Run “Hack Yourself First” Workshops in Europe→

Weekly Update 71 (Denmark Edition)

Presently sponsored by: LastPass: Effortless password security for your business. With 81% of breaches caused by passwords, failing to protect them could be costly.

I’m in Denmark! Well I’m just in Denmark, I’m about to head out the hotel door and into 30 hours of travel which isn’t exactly fun, but that’s the nature of living on the other side of the world to pretty much everything.

This week’s update is a little late…

Continue reading Weekly Update 71 (Denmark Edition)→

We’re Doing an All New Series on Pluralsight: Creating a Security-centric Culture

Presently sponsored by: LastPass: Effortless password security for your business. With 81% of breaches caused by passwords, failing to protect them could be costly.

Usually when we talk about information security, we’re talking about the mechanics of how things work. The attacker broke into a system due to a reused password, there was SQL injection because queries weren’t parameterised or the company got ransomware’d because they didn’t patch their things. These are all good…

Continue reading We’re Doing an All New Series on Pluralsight: Creating a Security-centric Culture→

Weekly Update 70 (NDC London Edition)

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

It’s NDC London! I’m pushing this week’s update out a little later due to the different time zones and frankly, due to it being an absolutely non-stop week of events. I talk about those, about how I’m trying to tackle breach disclosures now and about some upcoming events.

Next week…

Continue reading Weekly Update 70 (NDC London Edition)→

Streamlining Data Breach Disclosures: A Step-by-Step Process

Presently sponsored by: Build scalable, reliable and secure cloud native applications with Tech Fabric

I don’t know how many data breaches I’m sitting on that I’m yet to process. 100? 200? It’s hard to tell because often I’m sent collections of multiple incidents in a single archive, often there’s junk in there and often there’s redundancy across those collections. All I really know is…

Continue reading Streamlining Data Breach Disclosures: A Step-by-Step Process→

Weekly Update 69 (Boat Edition)

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

It’s my last day in the sun ☹️ Well, at least it’s my last day in the sun for a couple of weeks so today I’ve gone to the sunniest place I know. It’s “the boat edition” of my weekly update and I apologise up front for the rocking…

Continue reading Weekly Update 69 (Boat Edition)→

Is India’s Aadhaar System Really “Hack-Proof”? Assessing a Publicly Observable Security Posture

Presently sponsored by: Do you desire peace of mind? The hackers don’t wait, secure your website and mobile apps with Gold Security today.

India’s Aadhaar implementation is the largest biometric system in the world, holding about 1.2 billion locals’ data. It’s operating in an era of increasingly large repositories of personal data held by both private companies and governments alike. It’s also an era where this sort of information is constantly leaked…

Continue reading Is India’s Aadhaar System Really “Hack-Proof”? Assessing a Publicly Observable Security Posture→

Weekly Update 68

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

It’s 2018! All new year and already someone has gone and broken our computer things courtesy of the Meltdown and Spectre bugs. I only touch briefly on them in this week’s update and I refer people to my Twitter timeline for good coverage I’ve shared. However, there’s one resource which…

Continue reading Weekly Update 68→

2017 Retrospective

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

I look back a lot more than what I suspect people realise. Not in a reminiscent way, but rather because I find it helps me put things in perspective. A lot of people like to set personal goals or objectives so that there’s something specific they’re setting out to achieve…

Continue reading 2017 Retrospective→