Where are the “Actionable Defense” talks?

This year, for the first time, I did not make it to DEF CON, B-Sides Las Vegas, Black Hat, etc. I was bummed, because this has been a yearly pilgrimage for a really long time for me, but too much work sandwiched on both sides of it. Naturally, I was thinking, “What did I miss?” […]

from Where are the “Actionable Defense” talks?

An Open Letter to Human Resources Teams

Every few years, it seems, the information security community has a renewed interest in, and debate over, the value of certifications, degrees, experience, etc. in helping information security professionals land jobs. Along with this renewed interest comes a spate of blog posts and articles that aim to help those new to the industry advance, and […]

from An Open Letter to Human Resources Teams

MITM-as-a-Service: The Threat Surface We Didn’t Know We Had

This past week, as most security professionals know by now, a severe bug was discovered in the Cloudflare content delivery network’s service by noted researcher Tavis Ormandy. Organizations should pay attention when Tavis reaches out, just like they should when Brian Krebs reaches out – there’s a damn good reason, and it’s probably important. I’d […]

from MITM-as-a-Service: The Threat Surface We Didn’t Know We Had