“To the letter” is a series around the analysis of standards, frameworks and RFQ/RFC that I find interesting — where I take the time to read and summarize my findings on the documents. Kicking it off with a hot topic, Zero Trust. I’ve discussed the topic on a few occasions…

Wi-Fi is a fundamental access medium to the internet (read: “World”) nowadays, I don’t think most people think too much about its security or the importance it has when they’re accessing their personal banking information or even work data, with current’s remote from work prevalent policies. This technology however is…

The Federally funded organization MITRE has been a godsend to Cybersecurity and Threat Hunting taxonomy. I for one am a huge fan of what they’ve achieved for the community — efficient Attack Techniques, Tactics & Common Knowledge. Oh look at that, effective ATT&CK! With their Database of threats you can…

It’s no secret that Cloud Service Provider such as AWS, Azure and Google Cloud Platform are central to modern companies’ IT Infrastructure. We’ve seen how Cloud Service Providers are powering Digital transformation with their ability to deliver fast, prompt and affordable services. …

Mitigating email risks is top of mind for cyber security operators — especially since it’s the topmost exploited attack vector of the last few years. Technologies such as DMARC help address the problem during the email authentication phase. Blocking an rejecting emails that don’t meet certain criteria. A common question…

Threat Intelligence (TI) is crucial for threat hunters and cyber security teams. Of course, hunting for behaviours is the end goal, but looking and those pesky hashes, URLs and IP addresses still help us get some alerts and incidents out of our work list. How do we do that in…

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. People The state of AI legislation in different US states as of August 2023 The…

Training users to spot phishing is a crucial part of the improvement of Enterprise security — tools such as Microsoft’s Attack Simulation Training (AST) help achieve this. Let’s look at Enterprise strategies to train users deal with such an issue. Phishing Begins

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. People Use of Open-Source AI models proven risky Integrity…