Insider Risk Starts With Access Drift, Not Intent
A field-focused walkthrough of the topic with ownership checkpoints, validation priorities, and governance outcomes.
Read more →
Blog
Research, field notes, and practical guidance across red team operations, penetration testing, authorised offensive security, and continuous validation with ODS-Intrude.
VPNFilter and Network Device Exposure: Practical Mitigation Priorities: 2018 Perspective
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Cloud Exposure Gaps Teams Still Miss in Production
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
How to Assess Third-Party Security Risk Without Slowing Delivery
Practical implementation guidance, key risks to monitor, and clear actions for security and delivery teams.
Read more →
Identity Security Mistakes That Create Preventable Breaches: 2018 Perspective
A field-focused walkthrough of the topic with ownership checkpoints, validation priorities, and governance outcomes.
Read more →
Spectre and Meltdown: Lessons on Hardware-Layer Security Debt
A field-focused walkthrough of the topic with ownership checkpoints, validation priorities, and governance outcomes.
Read more →
Year-End Security Reviews That Actually Reduce Risk
A field-focused walkthrough of the topic with ownership checkpoints, validation priorities, and governance outcomes.
Read more →
KRACK and Wi-Fi Security: Why "Trusted Networks" Still Fail
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Hack systems running JBoss JMX Console with the help of Google & Bing
It is well known that Google/Bing dorks continue to be one of the simplest ways to detect vulnerabilities in servers and web services, which is why I decided to make this short post talking about what I consider one...
Read more →
Equifax Fallout: Why Patch Governance Is a Board-Level Risk
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Ransomware Continuity Planning for High-Pressure Periods
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Bringing cybersecurity closer to TLP Innova 2017
Cybersecurity is an issue that concerns us all. This is something that we see every time it is talked about in a space where professionals from the world of technology meet, as has been the case with TLP Innova 2017.
Read more →