Opinions about security you did not ask for

Not underground like the Russian Business Network but not as well known as some people think. These sites and conferences will be well known to some but I am amazed…

Managing firewalls at scale is a nightmare. Anyone who tells you otherwise is either lying or has never managed more than two firewalls. Once you get past a handful of…

Today Microsoft announced that they are going to start offering free anti-virus/spyware/trojan/rootkit protection for consumers. This is going to have a massive impact on the consumer AV market. Think about…

Everyone is talking about ransomware these days. And for good reason - it is the fastest growing threat vector we have seen in years. But here is the thing that…

I keep hearing people talk about incident response like it is some magical process that will save them when things go wrong. But when I ask them what the actual…

People always ask me about social engineering like it is some kind of dark art. It is not. It is actually pretty simple once you understand the goal. The goal…

I called this one the day after the first wave of mass SQL Injection attacks came out. I told Jeremiah that we would see botnets doing this attack shortly as…