Weekly Update 67

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

It’s Xmas! Well, it was Xmas but I (and hopefully you too) am still in that Xmas period haze where it’s hard to tell one day from the next. Apparently, it’s also hard to remember to hit record before talking about this week’s updates so yeah, good one Troy!

But…

Continue reading Weekly Update 67→

New Pluralsight Course: Care and Maintenance of Development VMs

Presently sponsored by: Netsparker – dead accurate web application security scanning solution – Scan websites for SQL Injection, XSS & other vulnerabilities

Regular readers will know I create a lot of Pluralsight courses. It’s now 5 years ago I started writing my first one which incidentally, is still my highest rated course every month (apparently the OWASP Top 10 as it relates to ASP.NET is still a big thing). Most of…

Continue reading New Pluralsight Course: Care and Maintenance of Development VMs→

Fixing Data Breaches Part 5: Penalties

Presently sponsored by: Security Newsletter: a weekly e-mail digest of infosec news.

In the first 4 parts of “Fixing Data Breaches”, I highlighted education, data ownership and minimisation, the ease of disclosure and bug bounties as ways of addressing the problem. It was inevitable that we’d eventually end up talking about penalties though because the fact remains that although all…

Continue reading Fixing Data Breaches Part 5: Penalties→

Fixing Data Breaches Part 4: Bug Bounties

Presently sponsored by: Security Newsletter: a weekly e-mail digest of infosec news.

Over the course of this week, I’ve been writing about “Fixing Data Breaches” which focuses on actionable steps that can be taken to reduce the prevalence and the impact of these incidents. I started out by talking about the value of education; let’s do a better job of…

Continue reading Fixing Data Breaches Part 4: Bug Bounties→

Fixing Data Breaches Part 3: The Ease of Disclosure

Presently sponsored by: Security Newsletter: a weekly e-mail digest of infosec news.

This week, I’ve been writing up my 5-part guide on “Fixing Data Breaches”. On Monday I talked about the value of education; let’s try and stop the breach from happening in the first place. Then yesterday it was all about reducing the impact of a breach, namely by…

Continue reading Fixing Data Breaches Part 3: The Ease of Disclosure→

Fixing Data Breaches Part 2: Data Ownership & Minimisation

Presently sponsored by: Security Newsletter: a weekly newsletter digesting last week’s infosec news into a shortlist of useful articles.

Yesterday, I wrote the first part of this 5-part series on fixing data breaches and I focused on education. It’s the absolute best bang for your buck by a massive margin and it pays off over and over again across many years and many projects. Best of all, it’s about…

Continue reading Fixing Data Breaches Part 2: Data Ownership & Minimisation→

Fixing Data Breaches Part 1: Education

Presently sponsored by: Security Newsletter: a weekly newsletter digesting last week’s infosec news into a shortlist of useful articles.

We have a data breach problem. They’re constant news headlines, they’re impacting all of us and frankly, things aren’t getting any better. Quite the opposite, in fact – things are going downhill in a hurry.

Last month, I went to Washington DC, sat in front of Congress and told them…

Continue reading Fixing Data Breaches Part 1: Education→

Weekly Update 65

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I actually got a lot of writing done this week! Plus travelled to Sydney and then Melbourne to speak at a couple of events so that’s a pretty good week IMHO. What’s especially good is that there’s no more flights or hotel rooms in 2017 for me!

As for this…

Continue reading Weekly Update 65→

I’m Sorry You Feel This Way NatWest, but HTTPS on Your Landing Page Is Important

Presently sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

Occasionally, I feel like I’m just handing an organisation more shovels – “here, keep digging, I’m sure this’ll work out just fine…” The latest such event was with NatWest (a bank in the UK), and it culminated with this tweet from them:

I’m sorry you feel

Continue reading I’m Sorry You Feel This Way NatWest, but HTTPS on Your Landing Page Is Important→