Make Software Secure Now!

Just for fun I wanted to make the headline to be “Make Software Secure Again” But when was software secure? Never, as we assumed it was secure but actually SW was never tested and security problems started as people hacked software and thus it was never secure we were just ignorant or naive in the … Read more

Diamond Model Intrusion Analysis

Did you want to set up your own Intrusion Analysis department? Or at least give a framework for creating a method to understand a breach. Then read this document at threatconnect.com¹ by Sergio Caltagirone, Andrew Pendergast, and Christopher Betz. This document goes into the details of what the attacker/adversary can do to your infrastructure and … Read more

Mismanagement in Vulnerability Management Systems

I’m always scouring the net for interesting presentations and this is an interesting one, from Bsides Detroit By Gordon MacKay¹ which have been put on the Net by Adrian Crenshaw (irongeek.com)² The presentation is about a flaw in vulnerability management systems which also happens to be what Gordon MacKay programs now for Digital Defense Inc. … Read more

Have a happy 4th of July Weekend

  Happy 4th of July weekend!!! In Greece on the first of every month we say Kalo Mina = have a good month. Since this is the first day of the 3rd quarter and before a long weekend..   In cybersecurity the hackers do not sleep and in fact holiday weekends are looked at for … Read more

Think About Security as a Constant Effort – Not Project

Security and thus also Cybersecurity needs to be thought of in a different manner. Education about information security has to be put together well. We have to understand the whole environment and people need to follow what corporate recommends for security reasons.   Why?  because individuals should not create corporate blindspots either knowing or unknowing.  (image … Read more