Collaborate Disseminate
Someone sent me an email today which essentially boiled down to this:
Hey, Microsoft’s Azure Active Directory alerted me to leaked credentials but won’t give me any details so there’s very little I can do about it
This is a really interesting scenario and it relates to the way Microsoft
Continue reading Random thoughts on the use of breach data for protection of accounts
This whole “personal brand” thing is a really interesting space. I mean here we are talking about people as individuals such as you and I yet applying a term to us in the same way as we’d talk about brands like, say “Ferrari” or “Apple”. I pick those simply because
Continue reading New Pluralsight Course: Crafting a Brand for Growth and Prosperity
Wow, what a crazy week! Three pretty serious blog posts, my Security Sense column plus a bunch of stuff I’ve been doing in the background around arranging travel for the European summer. I didn’t mention it in my weekly update, but unfortunately I had a workshop in Dublin cancel due
The tech news recently has seen quite a lot of chatter about an alleged haul of Apple credentials, apparently about 250 million of them in all. Allegedly. Maybe. Or was it 300 million?. No – wait – it might have only been 200 million. The number itself has been the
Continue reading Here’s where the Apple accounts hackers are threatening to wipe came from
I went to Helsinki a couple of years ago. I was there running a security workshop for a local company and whilst in town, I caught up with Mikko Hypponen:
Troy Hunt (@troyhunt) in Helsinki today. Troy’s http://t.co/zOiZnkMpNo service is highly recommended! Use it. pic.
Continue reading The importance of trust and integrity in a VPN provider (and how MySafeVPN blew it)
LastPass had an issue the other day, a rather nasty one by all accounts that under certain (undisclosed) circumstances, it looks like it could lead to someone’s password (or possibly passwords) being disclosed by virtue of a remote code execution vulnerability. This is not a good thing – nobody wants
So the plan this week was to record the update whilst driving from Melbourne to Sydney with Lars Klint in the new car. And I did – record it that is – but due to some screwyness with Lars’ GoPro, it turns out that “recording” is not the same as
Continue reading Weekly update 28 (Sydney Harbour Bridge edition)
I’ve been watching the cyber-news pretty closely lately and one of the biggest challenges we seem to have is attribution. I mean, stuff is getting hacked left right and centre but who’s actually responsible?? I started paying closer attention and I reckon I’ve worked it out – it’s mostly this
Continue reading Is this hooded cyber-bandit the web’s most prolific hacker?
Another week down and looking back, I’m not sure precisely what I did. I mean I now I was busy, but you ever have one of those weeks where you just wonder where the time went? Although in fairness, a big chunk of it went to finishing off my latest
Organisations don’t plan to fail. Probably the closest we get to that in the security space is password hashing, which for all intents and purposes is an acknowledgement that one day, you may well lose them. But organisations rarely plan for how they should handle data breaches and when an
Continue reading Data breach disclosure 101: How to succeed after you’ve failed