“To the letter” is a series around the analysis of standards, frameworks and RFQ/RFC that I find interesting — where I take the time to read and summarize my findings on the documents. Kicking it off with a hot topic, Zero Trust. I’ve discussed the topic on a few occasions…

Wi-Fi is a fundamental access medium to the internet (read: “World”) nowadays, I don’t think most people think too much about its security or the importance it has when they’re accessing their personal banking information or even work data, with current’s remote from work prevalent policies. This technology however is…

The Federally funded organization MITRE has been a godsend to Cybersecurity and Threat Hunting taxonomy. I for one am a huge fan of what they’ve achieved for the community — efficient Attack Techniques, Tactics & Common Knowledge. Oh look at that, effective ATT&CK! With their Database of threats you can…

It’s no secret that Cloud Service Provider such as AWS, Azure and Google Cloud Platform are central to modern companies’ IT Infrastructure. We’ve seen how Cloud Service Providers are powering Digital transformation with their ability to deliver fast, prompt and affordable services. …

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. And…

On the 09th of November, the security industry in New Zealand celebrated the successes and efforts of the Females and minorities in the field, including Pacific/Maori. The Cerimony The evening took place at a nice venue in town, and had the backing and sponsorship of Cyber security companies, some of which are…

Email security is a paramount staple in every Cyber security environment. This is due the fact email continues to be one of the (if not the main) threat vector for adversaries. I have reported on this, many times — as vendors and National Cyber security entities share their yearly threat…

Protecting users against the largest attack vector should be every socks and security manager focus. When we look at the Microsoft security stack, we see Microsoft defender for office 365 (MDO) being the recommended tool to protect user mailboxes and even provide user training through its many capabilities. In this…

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. People Sony Confirms breach affecting almost 7000 employees At…