Don’t run that code

Hear the blog narrated The dangers of downloading untrusted code from the internet is well documented. You never know what is contained within someone else's code, be it sloppy coding, or malicious intent. If it is a snippet of code that you can easily read, it can be relatively risk free. Because, why put in … Continue reading Don’t run that code →

I’ve made it!

First off, happy new year! (Well if the tax man can start the new year in April, I can start it on Feb 11th!) Secondly, Infosecurity Magazine was ever so kind as to feature an interview with me in the Q1, 2021, Voume 18, Issue 1 edition. (the link should take you to the digital … Continue reading I’ve made it! →

Middle Brothers

When we talk about privacy and surveillance, discussions usually involve talk of Governments keep the population under manners. But unlike the good old days of the eighteenth century, Governments aren’t the only ones with skin in the population monitoring, control, and profiteering business. We now have a whole slew of middle brothers aka big tech … Continue reading Middle Brothers →

The NCSAM Campaign

For October's National Cyber Security Awareness month, I put together a few videos and blogs. In my mind it formed a campaign, but for various reasons, the timings were a bit inconsistent and the different resources ended up on different places. So as a recap - I put everything from this year into this one … Continue reading The NCSAM Campaign →

The Predictions Dilemma

The last quarter of the year is also known as predictions season. It's the time where those who consider themselves to be wise and enlightened rub their chin thoughtfully and spout the wisdom of what the future holds. I should know, in my days as an industry analyst I was often called upon as a … Continue reading The Predictions Dilemma →

If you want security, lie to me

https://youtu.be/LZ0j7q7JTWs We’re all honest and good people… well, at least most of us are. From a young age, we’re taught to always tell the truth and to never lie. However, our inherent honesty can be our own worst enemy when it comes to cybersecurity. We use our real names on sites, we upload our photos … Continue reading If you want security, lie to me →

Why Predator is the ultimate CISO movie

There's often a lot of debate as to what the best security or hacking movie is. Many people talk about Hackers, or Sneakers, or try and slip Mr Robot into the mix. But they are all way way waaaaay off the mark. I was reminded of this by Phil Cracknell who posted on linkedin that … Continue reading Why Predator is the ultimate CISO movie →

@TwitterSupport A Lesson In Incident Response Comms

If you are a user of the social media platform Twitter (it's where the cool kids moved to when their parents joined Facebook, and what the younger kids avoid in favour of Tik Tok). There was a bit of a breachy weachy that went on. There are plenty of stories that are speculating on the … Continue reading @TwitterSupport A Lesson In Incident Response Comms →

Human SQLi

Do you remember Tiger King? Feels like a long time ago now, and by 2020 standards, it feels like kind of the time when things were normal. So, I was quite surprised to see Carole Baskins trending on Twitter. I thought maybe she's got her own show coming out, or that she was found guilty … Continue reading Human SQLi →

Travelex up for sale

Currency service provider Travelex has put itself up for sale, the London-based company said on Wednesday, a month after parent Finablr warned that it was preparing for a potential insolvency. Travelex has been grappling with its own share of problems after the company became the target of a ransomware attack in late December that could … Continue reading Travelex up for sale →