Last Hurrah: Executive Order to Protect IaaS Platforms from Malicious Actors

President Donald Trump signed an executive order to prevent foreign malicious cyber actors from misusing United States Infrastructure as a Service (IaaS) products. In the executive order, dated January 19, President Trump explained that foreign ma… Continue reading Last Hurrah: Executive Order to Protect IaaS Platforms from Malicious Actors

Contextualizing Microsoft’s Source Code Exposure in the SolarWinds Attacks

In the middle of December, IT management software provider SolarWinds revealed in a security advisory that it had fallen victim to a sophisticated supply chain attack. The offensive involved the placement of a backdoor known as SUNBURST into versi… Continue reading Contextualizing Microsoft’s Source Code Exposure in the SolarWinds Attacks

Contextualizing Microsoft’s Source Code Exposure in the SolarWinds Attacks

In the middle of December, IT management software provider SolarWinds revealed in a security advisory that it had fallen victim to a sophisticated supply chain attack. The offensive involved the placement of a backdoor known as SUNBURST into versi… Continue reading Contextualizing Microsoft’s Source Code Exposure in the SolarWinds Attacks

Ever Evolving: Israel Barak on Running Remote SOC Ops

We spent some time with Israel Barak, Chief Information Security Officer at Cybereason, who discussed some of the challenges of running a world-wide SOC remotely during the pandemic – check it out…
The post Ever Evolving: Israel Barak on Running… Continue reading Ever Evolving: Israel Barak on Running Remote SOC Ops

2021 Security Crystal Ball: Trends and Predictions for the Year Ahead

2020 kicked off with a bang, literally, as General Soleimani was killed less than a week into the year. This had immediate repercussions with simple website defacements by minor actors ideologically aligned with Iran and concerns of cyber escalati… Continue reading 2021 Security Crystal Ball: Trends and Predictions for the Year Ahead

3 Web Third-Party Related Events You Don’t Want to Miss From October-December 2020

With COVID-19 still very much amongst us, online activity is continuing its global ascend. The security implications are also clear. Third-party applications running on websites are creating numerous risks and blind-spots that are becoming harder to de… Continue reading 3 Web Third-Party Related Events You Don’t Want to Miss From October-December 2020

Ever Evolving: Jake Williams on Running an Infosec Consultancy Remotely

We spent some time with Jake Williams – founder and President at Rendition Infosec and SANS Instructor – discusses some of the challenges in remotely running a successful infosec consultancy – check it out…
The post Ever Evolving: Jake Williams … Continue reading Ever Evolving: Jake Williams on Running an Infosec Consultancy Remotely

The ICO Fines Ticketmaster UK £1.25 Million for Security Failures: A Lesson to be Learned

Ticketmaster UK, a leading ticketing company and part of Ticketmaster, has been fined £ 1.25 million by the Information Commissioner’s Office (ICO) as it failed to protect customer data during the infamous February 2018 data breach. The company is stil… Continue reading The ICO Fines Ticketmaster UK £1.25 Million for Security Failures: A Lesson to be Learned