White House and Dark0de Launch Harm Reduction Programs
White House Market and Dark0de Reborn both announced the launch of harm reduction programs focused primarily on product quality. (via……
Why Cyber Security Is a Great Career Option for Military Veterans
What is actually a Cyber Security Is ? Cyber security is the practice of protecting computers, servers, mobile devices, electronic…
SonicWall finally fixed a flaw resulting from a partially patched 2020 zero-day
A critical vulnerability, tracked as CVE-2021-20019, in SonicWall VPN appliances was only partially patched last year and could allow a remote…
MITRE adds D3FEND defensive cybersecurity techniques to ATT&CK Framework
D3FEND is a new project promoted by MITRE Corporation to add defensive cybersecurity techniques to the ATT&CK Framework. D3FEND is…
Welcoming the Jamaican Government to Have I Been Pwned
Recently, I’ve been providing a lot of additional government access to Have I Been Pwned. Today I’m happy to welcome…
New tool allows organizations to customize their ATT&CK database
MITRE Engenuity has released ATT&CK Workbench, an open source tool that allows organizations to customize their local instance of the…
SOC burnout is real: 3 preventative steps every CISO must take
Consider this scenario: Morgan, a level 3 security analyst, arrives to a twelve-hour security operations center (SOC) shift and finds…
Shame culture is the biggest roadblock to increasing security posture
Cybersecurity culture is nearly impossible to quantify due to an absence of measurement tools. Many businesses attempt to quantify the…
The paradox of post-quantum crypto preparedness
Preparing for post-quantum cryptography (PQC) is a paradox: on the one hand, we don’t know for sure when, or perhaps…