Empowering Security Through Timely Nudges: Harnessing Behavioral Science for Real-Time Interventions
Picture this: your colleague’s about to click a link that you know is dodgy. You see it happening from the…
EmeraldWhale’s Massive Git Breach Highlights Config Gaps
The large-scale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights.
Exclusive: Hollywood ‘hypocrisy’ over harsh Jan. 6 sentence for ‘Bob’s Burgers’ actor: ‘The whole LA comedy scene piled on’
“‘Bob’s Burgers’ Actor Sentenced to One Year in Prison for Role in Jan. 6 Riot” crowed the New York Times…
Building Resilience: A Post-Breach Security Strategy for Any Organization
In the wake of a recent breach that compromised sensitive information, a healthcare organization sought my guidance on how to…
Russian charged by U.S. for creating RedLine infostealer malware
The United States announced charges today against Maxim Rudometov, a Russian national, for being the suspected developer and administrator of…
Detection Engineering in Post SIEM and SOAR World
A few years back, my security team was tasked to create and maintain a green field environment for FEDRAMP compliance.…
Racist talk at rally mars Trump’s message, but he scores on Joe Rogan podcast
Trump held a rally at Madison Square Garden Sunday night, the reception from the media has been critical, but there…
How a CISO Should Brief the Board of Directors
It’s often assumed that if the board knew exactly what they wanted to hear from the CISO, they would simply…
Windows 11 24H2: The hardware and software blocking the new update
Windows 11 24H2 is unavailable for thousands of users due to safeguard or compatibility holds Microsoft has placed on specific…
Russia’s APT29 Mimics AWS Domains to Steal Windows Credentials
Kremlin intelligence carried out a wide-scale phishing campaign in contrast to its usual, more targeted operations.