From the War Room to the Boardroom – The True Elevation of the CISO
In the aftermath of the Target breach, there has been a lot of press on the need for a Chief Information Security Officer (CISO) in the boardroom. The Wall Street…
DetailsWalking the Security Tightrope
Some 38 years ago, I started working for the systems group at CUCCA (Columbia Center for Computing Activities). I was fresh out of engineering school (Columbia, by coincidence) and a…
DetailsDay of Cyber Infamy
NOAA WEATHER STATION – THE AZORES – NIGHT SUPERIMPOSE: NOAA WEATHER STATION – THE AZORES A HARBIN Z-9 military helicopter hovers silently above the antenna clad nondescript building as a…
DetailsTake the Test: Are You Ready to Tame Your Vendor Security Risk Monster?
How do you measure how mature your vendor security risk assessment program is? How do you measure your ability to lead or develop such a program? Would it be safe…
DetailsDay of Cyber Infamy
NOAA WEATHER STATION – THE AZORES – NIGHT SUPERIMPOSE: NOAA WEATHER STATION – THE AZORES A HARBIN Z-9 military helicopter hovers silently above the antenna clad nondescript building as a…
DetailsFederal Weather System Breached
China-based attackers are back in the news again, this time for breaching the federal weather network, officials told the Washington Post. The initial intrusion appears to have occurred late September,…
DetailsI’m Sorry, Siri, I’m Afraid I Can’t Do That
Alexa is listening to your every word. So is Siri. And Cortana. And Google. Or the HAL 9000 computer. Just say the magic words and the devices from Amazon, Apple,…
DetailsFBI Investigates Cyber Attack on US Postal Service
The Federal Bureau of Investigation is investigating a cyber attack earlier this year against the U.S. Postal Service that exposed the personal information of every single employee. Personal information of…
DetailsApplication Security – Redux
When you’re on a roll, ride it out. I’ve been on the “Redux” train for a couple of days. I usually do this when I review our security architecture initiatives…
DetailsDeja Vu All Over Again – DDoS Amplification Attacks
Yep, it’s time to use this title again. This time we’re talking about Distributed Denial of Service (DDoS) amplification attacks. One of the lists I monitor posted the following: Christian…
Details