Archive

202652

11-09ACME.inc: The Ethical Calls a Pen Tester Makes Mid-Engagement
11-08Heartbleed and the Vulnerability Management Lifecycle
11-07How to Lock Down SSH on a Public Server (and Waste a Bot's Time Doing It)
11-06Ransomware Comes for VMware: Why Attackers Go After the Hypervisor
11-05How Packet Sniffing Works on a Switched Network (and How to Shut It Down)
11-04I Wrote an Incident Response Plan for My Own Living Room
11-03The APT Lifecycle: How Attackers Lived Inside a Network for a Year (or Nearly Five)
11-02Social Engineering With Real Teeth: Twitter 2020 and Target 2013
11-01Cracking a Password-Protected Zip File Taught Me Patience
10-31What I (Unfortunately) Found When I Pointed Shodan at the Internet's Webcams
10-30Your Smart TV Is Watching You Back
10-29NotPetya vs. Maersk: The BCP That Came Down to One Power Outage in Ghana
10-28What Nmap and Nessus Found on My Own Network
10-27One Admin Credential, Thousands of Camera Feeds: What Verkada Got Wrong About Least Privilege
10-26What Security Researchers Find Hiding in Public Git Repos
10-25What I Found on an Open SMB Share (and What I Asked to Do About It)
10-24Equifax: A Breach With Five Separate Points Where It Could Have Stopped
10-23Rolling Out Kerberos Without Active Directory
10-22Three Burp Suite Walkthroughs in the Homelab
10-21Field Notes: What "Computer Network Defense" Actually Means
10-20Field Notes: BIA and the Disaster Recovery Plan — Not the Same Job
10-19Field Notes: Six Outages and Breaches from Mid-2026
10-18A Sample Cybersecurity Policy for a Small DoD Subcontractor
10-17Field Notes: What Enumeration Actually Looks Like
10-16Two Memos on Pressure: The CTO Who Wants Silence and the Intern Who Was Nudged
10-15Field Notes: Five Ways Footprinting Succeeds, and How to Close Them
10-14Cloud for a Defense Contractor: Hybrid Hosting for CUI
10-13Field Notes: From Service Version to a Working Exploit
10-12MD5 Is Broken: A Memo to the Server Admin, and Should You Publish the Code That Broke It?
10-11Field Notes: Finding the OS with Nmap
10-10Not Exotic, Just Ordinary: Five Breaches and the Boring Failures Behind Them
10-10Hiding Data in Plain Sight: Steganography from Mr. Robot to Real Malware
10-09Field Notes: Starting Recon with a Whois Lookup
10-08Making the Hard Call: The PLUS Framework Applied to Two Security Dilemmas
10-06Insider Espionage and Encryption: A Simulated Case Study of ABC Corp
10-05Field Notes: A Quarterly Nmap and Nessus Audit, and the Testing Plan Behind It
10-05To Pay or Not to Pay: Ethical Decision-Making in a Hospital Ransomware Attack
10-02Infographic: Ethical Implications of A.I. in Cyber Security
10-02Ethical Decision-Making Guide for Cybersecurity Professionals
10-02SolarWinds: When the Software Update Is the Attack
10-02The Importance of Ethics in Cyber Security
10-01The Defense's Cyber Forensic Expert Who Agrees With the Prosecution
10-01Cyber Incident Ethical Response Plan
10-01Why Small Businesses Are Falling Behind on Cybersecurity
09-30Burp Suite Community Edition: A Hands-On Look at the Free Web App Testing Tool
09-30Soft Skills: Nothing Happened, So Cut the Budget? A Memo on Proving a Negative
09-30Field Notes: What Is STRIDE? A Quick Look at a Practical Threat Model
09-30Field Notes: What Is F3EAD? The Intelligence Cycle That Doesn't Stop at "Finish"
09-29TrendyCafe: One Mistyped Address, a Keylogger, and a Crypto Miner
09-29Espionage and Trespass: How Do You Know an Attack Is Spying?
09-28Heartland Data: Compliant, but Breached
09-25Anatomy of a Preventable Breach: How a Vendor's VPN Credentials Exposed 8,000 Customer Records