Collaborate Disseminate
Following a recent and frustrating password experience, I was reminded of some of the ways we–as security professionals–can sometimes undermine the very culture of security we’ve worked so hard to imbue in our users. Through my experience, I’ll highli… Continue reading Security vs. Compliance: What’s the difference?
Internet-connected devices, collectively known as the Internet of Things or IoT, can provide opportunities for attackers to access your network–and as a result, devices more sensitive than your lightbulbs. This checklist covers three key points you sho… Continue reading IoT Security Checklist
Tabletop meetings are opportunities to test out your employees, processes, and procedures to see how a particular scenario would play out. In this blog post, we’re going to explain how you may want to plan a tabletop meeting, describing the process by … Continue reading How to Run a Security Tabletop Exercise
I’ve seen this question a few times: is it better to learn Radare2 (r2) or GNU Debugger (GDB)? The short answer is you should learn both. The long answer depends on what you are really asking. I usually see this question posed when someone wants to lea… Continue reading Learning Binary Reversing: Radare2 vs. GDB
When it comes to email communications today, phishing and spam are both unwelcome nuisances in everyone’s inbox. In order to defend against the different tactics cybercriminals are leveraging online, a variety of essential security measures are necessa… Continue reading Phishing, Scam, & Marketing Emails: What’s the Difference?
Hello there, and welcome back! If you’re just now tuning in, I’ve decided to do a collection of blog posts on what I think are going to be major cybersecurity topics this coming year. In the first blog post, I introduced you to what a supply chain att… Continue reading The New Year in Cybersecurity: Supply Chain Attacks, Part 2
Hey there, and happy New Year. I wanted to take a moment and write about what I think the coming year is going to look like for information security professionals. This is going to be an introductory post to a multi-part series of blogs so I can talk a… Continue reading The New Year in Cybersecurity: Supply Chain Attacks, Part 1
The beginning of the year is a great time to evaluate and take inventory. Why not use it as a time to check up on your financial and credit accounts? It’s good practice, and it’s easy to remember as well if you always do this around the same time every… Continue reading 6 Practical Fraud Prevention Tips for 2021
Have you ever wondered what goes into the development of the Splunk Certification exams? If so, you’re in the right place. In this post, I will discuss the Splunk exam development process, how Splunk Trust folks got involved in writing exam questions,… Continue reading Inside Splunk Certification Exam Development
The holidays are rife with stress this season (this year more than ever). It’s also a time where you need to remember to stay safe–and what better way to stay safe than to plan ahead? This year, we bring your gift early: four strategies for keeping you… Continue reading 4 Security Strategies to Keep Your Data Safe During the Holidays