Category: Mix

Entering the “Cloud Security” Fray
10
Apr
2025

Entering the “Cloud Security” Fray

I’ve not spent a lot of time thinking about this, but here’s how the CloudSec variables move in my mind….

Microsoft’s Best Kept Secret For IT Professionals
10
Apr
2025

Microsoft’s Best Kept Secret For IT Professionals

On the desk next to me sits full, legal copies of the following Microsoft software: Windows Server 2008 Windows Small…

My Idea For A True Content Aggregation Service
10
Apr
2025

My Idea For A True Content Aggregation Service

I’ve been struggling with a problem for a while now. The problem is how to properly display on my site…

Personal Daemons and Wuffie | Daniel Miessler
10
Apr
2025

Personal Daemons and Wuffie | Daniel Miessler

Everyone knows the future of technology lies with the individual. One of the ways this will come about is through…

The GIAC GSE: The Grandmaster of Information Security Certifications
10
Apr
2025

The GIAC GSE: The Grandmaster of Information Security Certifications

For anyone interested in Information Security certifications, the GIAC GSE one to keep on your mental radar. It’s a SANS…

A Few Buddhist Ideas
10
Apr
2025

A Few Buddhist Ideas

The greatest achievement is selflessness. The greatest worth is self-mastery. The greatest quality is seeking to serve others. The greatest…

Meeting NIST API Security Guidelines with Wallarm
10
Apr
2025

Meeting NIST API Security Guidelines with Wallarm

On March 25, 2025, NIST released the initial public draft of NIST SP 800-228, “Guidelines for API Protection for Cloud-Native…

Contemplating Confirmation Bias | Daniel Miessler
10
Apr
2025

Contemplating Confirmation Bias | Daniel Miessler

Image from weber.edu As I sit here at my allergist waiting on the all-clear after my shots, I’m thinking about…

You asked, we answered: Q&A from The Future of AppSec webinar | Blog
10
Apr
2025

You asked, we answered: Q&A from The Future of AppSec webinar | Blog

Tom Ryder | 10 April 2025 at 14:33 UTC When we wrapped up our biggest-ever webinar, The Future of AppSec:…

How Does One Explain SQL Injection to a Non-Techie?
10
Apr
2025

How Does One Explain SQL Injection to a Non-Techie?

Earlier today @mubix (Twitter) asked: Here’s my response: SQL Injection is like a telephone operator who has to phonetically relay…

The Difference Between CSRF and Clickjacking
10
Apr
2025

The Difference Between CSRF and Clickjacking

This might be obvious to those most familiar with CSRF and Clickjacking, but for those just getting a handle on…

The Republicans Have Deliberately Chosen to Campaign on Emotion Rather Than Issues
10
Apr
2025

The Republicans Have Deliberately Chosen to Campaign on Emotion Rather Than Issues

It’s not that their logical arguments are slightly more emotional than democratic logical arguments; they’re actually purposely avoiding logic altogether….