Brian in Pittsburgh
arekfurt
Seeing questions today from very small orgs on what *they* can do re. the heightened ransomware threat.Let's review the essential, no-cost things these orgs can--and must--do to hugely reduce risk:Counter
Read more
A random thought: Offensive security testing has a genuinely important role. But right now pentesting & red teaming are typically being (mis)used by organizations, and the way they're being misused
Read more
"Why do people always talk about the initial entry point of breaches. We need to talk more about the importance of [X]."You know, it's funny. There's a lot of truth
Read more
Capital One had a pre-existing relationship with Mandiant/FireEye. After C.O. had its cloud breach, Mandiant produced a report which C.O. had delivered to outside counsel to try to get it
Read more