The curious case of the effortful fraud
How what looked like a generic phishing site seemingly turned out to be a put-some-effort-into it, targeted fraud.
Topic
infosec
A collection of 14 issues
Discovery is not the bottleneck!
There is a seductive logic to the current surge of optimism around AI-supported vulnerability discovery - a logic that is entirely based on a fundamental misunderstanding of the situation at hand.
No Pain, No Gain - How Impunity Perpetuates Failure
It’s time to treat cybersecurity incidents and data breaches like preventable disasters, not the inevitable cost of doing business.
Demand Without Development
The cybersecurity talent shortage is not just a problem of numbers, but of structure. By systematically avoiding the hiring and training of true junior staff, the industry is reinforcing a feedback loop that shrinks its own future workforce.
MITRE CVE Program - the past, the present .. and the (European) future.
The Common Vulnerabilities and Exposures (CVE) program is a globally adopted system for identifying and naming cybersecurity vulnerabilities with unique IDs. Established in 1999 by researchers at the MITRE Corporation (a U.S. non-profit R&D organization), CVE was created to ensure that different ..
A short(-ish) guide on information security writing
Whether you’re compiling incident notes at 3 AM, drafting a post-mortem report for the board or helping the marketing department to craft a blog post that will generate near endless riches for your employer - we may like it or not, the ability to produce qualitative ..
Another round: Government malware & digital surveillance
Not just the seasons, or my attempts to appear in the office in an outfit other than holey conference shirts, shorts and Birkenstock slippers that are cyclical. The desire of politicians for a "government trojan" or surveillance of digital communication seemingly follows a constant rhythm ..
Sunsetting PGP
TL;DR: I’ve been supporting PGP since around 2012. The number of encrypted or signed messages I receive haven’t been high to begin with, and have only decreased since. It’s time to let it die.
It's cyberwar-o-clock .. or something like that.
As was the case at the beginning of the war in Ukraine a year and a half ago, reports about the possible role of cyberattacks in this conflict emerged relatively quickly shortly after the events that shook Israel on October 7, 2023.
YubiKey + PuTTY (.. I know) = ♥
I use PuTTY on Windows, with my Yubikey. Because I keep forgetting how to set it up, here’s a short writeup on that process.