Are PR professionals   a) Competent b) Annoying c) A necessary evil d) Well-meaning and gracious people e) All of the above   One thing that can be universally agreed upon is that not all PR pro's are created equal and some can be pretty annoying. So I break down a few of the common … Continue reading PR Fails →

Ever wondered what an asset is? Well wonder no more... either that or continue to wonder.  

I recently read Gene Kim's book, "The Phoenix Project" and decided it was worthy of a video review. http://rcm-uk.amazon.co.uk/e/cm?lt1=_blank&bc1=000000&IS2=1&bg1=FFFFFF&fc1=000000&lc1=0000FF&t=httpwwwj4vv4d-21&o=2&p=8&l=as4&m=amazon&f=ifr&ref=ss_til&asins=B00AZRBLHO

At last weeks Infosec Europe, fellow blogger, friend and information security executive Jitender Arora was involved in a debate that asked the question whether the auditor was  friend or foe to the security department. This was an interesting debate that for many can bring up many mixed emotions and feelings. But it reminds me of … Continue reading Dealing with an auditor →

Log management and SIEM are not really spoken about by those outside of security and understood even less. I guess one of the reasons is that unless there are a relatively large number of logs to go through (or there is actually have an interest in doing so) most people will not really do much … Continue reading Log management →

I recently saw that researchers had published their findings on security flaws in RC4 in TLS which led to some articles being churned out with eye-catching heading such as “HTTPS is broken”. A decent write-up on the issue can be found on the Naked Security blog. But this got me thinking about the whole relationship security … Continue reading HTTPS is broken? →

I can now tick RSA off the list of major conferences I have yet to attend. With near continuous back to back meetings, severe jet-lag, a gathering of a ton of great people, lots of walking and hardly any sleep made it one of the most demanding conferences I have attended as an analyst… but, … Continue reading RSA 2013 and Bsides San Francisco →

Persistent Threats (yes, I dropped the advanced) get a lot of airtime, but if there ever was a case for a persistent vulnerability (PV), you'd have to imagine SQL injection (SQLi) being the grandmother of them all. Ever since SQL databases have been used, input fields have been vulnerable to SQLi. If you were to … Continue reading SQL Injection →