Tech debt of remote working

The Shodan blog posted some trends in internet exposure, which like most of the Shodan research is very interesting. One part that caught my eye was this. The number of devices exposing RDP to the Internet has grown over the past month which makes sense given how many organizations are moving to remote work. It's … Continue reading Tech debt of remote working →

Rules of the club

It was 1999 when I walked into the cinema to see Fight Club. A movie I fully expected to be 2 hours of men punching each other’s lights out. And while there was a fair bit of that, it was a far cleverer and more impactful movie beyond fighting. With Tyler Durden, the anti-hero played … Continue reading Rules of the club →

The Engagement Zone

This year at RSA, there was a new area introduced called the engagement zone. As the name implies, it is less about speakers talking and attendees consuming the information. Rather, it is meant to be a place where attendees can get together and exchange ideas. I was honored to have been asked to help facilitate … Continue reading The Engagement Zone →

My 10 year YouTube anniversary

10 years ago I posted my first YouTube video. Recorded it on my laptops webcam and edited using Windows Movie Maker. https://youtu.be/No4nT_IfATE It's been a great 10 years, and while I haven't gotten any of the coveted YouTube awards for having millions of subscribers, it's been a great journey. Not only did I learn a … Continue reading My 10 year YouTube anniversary →

Something for conferences

This isn't a real post, it's just a bit too long for Twitter, so I'm thinking out aloud here. Inspired by this tweet by Dan Cuthbert https://twitter.com/dcuthbert/status/1122415486136877056?s=20 I absolutely agree with Dan that we sometimes need to look at the content we have and consider the best medium through which it should be shared or … Continue reading Something for conferences →

The Cyber Security Awareness Show

October is Cyber Security Awareness Month in many countries around the world. This time, I wanted to go big. So instead of writing several blog posts, or creating one video, I went ambitious and created a whole series (well a trilogy, but a series all the same). The wonderful folk at Eskenzi PR, Yvonne, Sam, … Continue reading The Cyber Security Awareness Show →

Twisting & Shouting

It must have been around 2008 when I was first introduced to Jim Shields by then head of Security and Risk of Barclays, Stephen Bonner. I had mentioned to Stephen that I was thinking of making some YouTube videos on the topic of information security, but in an entertaining manner. He told me that they … Continue reading Twisting & Shouting →

Thoughts on Simjacker

These are not my thoughts, rather my good friend Adrian Sanabria posted this in a thread on Twitter. I feel like a lot of great content by some very smart people can get lost in among the vast number of tweets, so I asked Adrian to blog... to which he said it would add a … Continue reading Thoughts on Simjacker →

Lost All The Money

After a several year hiatus, many creative differences, multiple instances of rage-quitting, and several occasions of ghosting so good that Patrick Swayze would have been proud - the group I founded, Host Unknown, has released it's much-awaited third song. We've covered security certifications, and we've tackled risk management. But this time, we've locked on to … Continue reading Lost All The Money →

Rocking IT

As I didn't get to attend Blackhat, BsidesLV, Defcon this year, I've been reading up on writeups from people that did attend to catch up on all the good knowledge that was shared. One of the interesting writeups I read was on CSO Online with the intriguing titles, The best and worst of Black Hat … Continue reading Rocking IT →