If everyone and their dog is talking about Meltdown and Spectre, then it would be negligent of me to not keep up with all the cool kids. Website for the vulnerabilities: Meltdown Attack Google Project Zero blog NCSC's advice Linus Torvalds statement

Work for long enough in one industry for any period of time and you end up speaking an entirely language altogether. This isn’t necessarily a bad thing, in many cases it’s convenient and allows rapid communication amongst peers. However, in Information security we need to be mindful when communicating with non security, or even non … Continue reading Security Terminology →

I thought I'd kick off the new year by poking around the news stories, surely not much could have happened. But quite a lot did unfortunately. In the video are the top 3 stories or headlines that caught my attention, but more importantly, I think we should make a pact to stop using these buzzwords … Continue reading Welcome to 2018 →

Honoured to be the guest editor for Infosecurity Magazine yesterday. It was a day of fun which involved several things: 1. The announcement was made, which included this video 2. I took over their twitter account for an hour (brave of them) 3. I submitted a guest editorial 4. Had a Q&A with the real … Continue reading Infosecurity magazine Look back over the year →

It was my first time in Lisbon, it was my first time keynoting at a Bsides... what could possibly go wrong? Thanks so much to the whole team and attendees at BSides Lisbon for a fantastic event! You can read my full writeup on the event over on my AlienVault blog. It includes a link … Continue reading BSides Lisbon →

via IFTTT Read the original blog by Rowenna here: http://ift.tt/2zgNKou If PCI DSS paid off the mortgage, then GDPR looks well on its way to buy the yacht. But how does one go about making some of that GDPR gangster money if they don't know much about the regulation? Well, becoming a GDPR consultant is … Continue reading GDPR Millionaire →

I’m truly honoured to have been invited to keynote at Bsides Lisbon this year on November 10th. It’ll be the first time I’ve visited Portugal, and the first time I’ve keynoted at a Bsides. Ordinarily I’d probably be feeling a bit apprehensive of speaking at a conference that I haven’t even attended, let alone keynote … Continue reading Bsides Lisbon and the car door →

via IFTTT Someone asked me if there are any unusual or legitimate uses for ransomware. If you break down what ransomware is, it's just encryption. But it's more like "surprise" encryption where someone else does the encryption, and keeps the key. So, I present five unorthodox ways to use ransomware in this video. However, if … Continue reading Ransomware uses →

T-shirts are among the most popular giveaways at security conferences. They're great, practical, and serve as walking advertisements. But if you go to enough conferences, you'll usually find yourself accumulating far too many shirts. There are only so many shirts you can use to wear when working out, or doing DIY projects, or as rags … Continue reading Hacking Conference Shirts →