MITRE’s Attack Flow project aims to translate complex cyber operations into a structured language. By describing how adversaries sequence and combine offensive techniques to reach…
My buddies and I are doing a Harn campaign right now and one of the mechanics involves accruing stat “checks” over time. Every five stat…
A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking…
By now, most CISOs agree: passwords are the weakest link in the authentication chain. They’re easy to guess, hard to manage, and constantly reused. Even…
Image from scientificamerican.com Scientists are now discovering that self-control is a precious, finite resource that can be raised and lowered by a number of factors…
I am an enthusiastic user of the Verisign PIP two-factor authentication service. It’s a system that allows you to add additional security to sites that support…
First, watch the talk. Believe me–it’s worth it. Now, I think the talk is brilliant, and I think he makes a strong point that would…
Google has issued an urgent security update for its Chrome browser after two critical vulnerabilities were discovered. These vulnerabilities could allow attackers to steal sensitive…
So perhaps you’ve heard the story of evil America trying to enact a draconian immigration policy towards Mexico. It’s the policy that does things like:…
[ NOTE: This is an older configuration, and my latest can be found here. ] If you are into blogging with WordPress you might have…
The only way to have a real discussion is to realize that both parties think they are doing good, and that the question is one…
Keeping up with crypto tax laws in Europe feels like a constant hurdle. Regulations evolve, tax authorities demand precise reporting, and tracking every trade across…
