ForAllSecure

APRIL 12, 2022

Should infosec now be considered vocational training just like becoming an electrician or a plumber? How else should we address the skills gap in infosec? My boss at the time didn't know much about infosec. She died a few years ago, but I believe the book continues with other authors. I was a paid writer--whoo, whoo.

Cybersecurity 52

Cybersecurity InfoSec Technology Marketing 52

ForAllSecure

JANUARY 22, 2023

Having a common framework around vulnerabilities, around threats , helps us understand the infosec landscape better. Adam Shostack has a new book, Threats: What Every Engineer Should Learn From Star Wars. Adam has more than 20 years in the infosec world, and he even helped create the CVE system that we all use today.

Engineering 40

Engineering Technology Authentication InfoSec 40

Daniel Miessler

OCTOBER 4, 2020

Every government, school, hospital, and SMB in the country will be accounted for and entered into our National Attack Surface Map (NASM). Project Fortify deputizes all these security services companies to carry out the hardening procedures in the Fortify Hardening Methodology. We then divide up the country into regions and verticals.

Ransomware 246

Ransomware Small Business Government InfoSec 246

Security Boulevard

SEPTEMBER 30, 2022

In the book, McGilchrist explores the two hemispheres of the brain and how they “experience” the world differently. When an attacker is interested in obtaining a particular set of credentials, both Out-Minidump and Invoke-Kerberoast are valid choices depending on the details of the user account of interest and other tradecraft considerations.

Engineering 52

Engineering InfoSec Threat Reports Information Security 52

Notice Bored

MAY 14, 2022

The 'obvious' driver for information security is information risk: valuable yet vulnerable information must be secured/protected against anything that might compromise its confidentiality, integrity or availability, right? What does management want/expect out of information security?

Information Security 116

Information Security Risk Healthcare Government 116

ForAllSecure

MAY 2, 2023

I’m Robert Vamosi and in this episode I’m talking about online criminal investigations conducted by someone who is inside the infosec community, and how your social media posts -- no matter how good you think you are about hiding -- can reveal a lot about your true identity. Daniel, he keeps a low profile. CLEMENS: I do.

Hacking 40

Hacking Media InfoSec Internet 40

CyberSecurity Insiders

JULY 7, 2021

The Certified Information Systems Security Professional (CISSP) certification is considered to be the gold standard in information security. Those doors lead to many different types of positions and opportunities, thus making the information security community dynamic and multifaceted. I did two things.

Financial Services 52

Financial Services Cybersecurity Technology Government 52

ForAllSecure

FEBRUARY 8, 2023

And that's just because it's not in the books VAMOSI: True. A lot of infosec’s knowledge is either tribal -- passed on from one person to another - or can be found in books. The one thing is that you can just simply extract the password from the service accounts, which today does not sound very outstanding.

Software 40

Software Phishing Passwords Authentication 40

ForAllSecure

JANUARY 11, 2023

Tib3rius from White Oak Security discusses his experience as a web application security pen tester, his OSCP certification, and how he’s giving back to the community with his Twitch , Youtube , and tools he's made available on GitHub. So honestly, every single kind of web app is just a portal to information. VAMOSI: Yeah.

DNS 40

DNS Hacking Penetration Testing Education 40

IT Security Guru

DECEMBER 21, 2022

What I did observe was an aftershock with striking relationships to my chosen profession of information security and the society that we enjoy or endure – depending on your perspective and experience. Where we are today exposes the gaps in our armour – we have failed on many accounts. To date five million people have.

InfoSec 95

InfoSec Internet Internet Media 95