It’s that time of the week again: the time where we take a look at what local security bloggers have been up to. You can take a look at what local security bloggers have been up to but if you can’t get enough of the local security scene, check out our NovaInfosec Twits list...
Read more »
Tags: dc, infosec-blogs, local-security-bloggers, md, nova, security-bloggers
Posted in Infosec Blogs/Podcasts | 2 Comments »
If you missed anything or happened to be offline this past week, we hope you find this post useful as a quick reference. For those readers that may not have noticed, I actually tack on a bit of commentary to some the industry articles – so check out my italicized/bolded opinions and let me...
Read more »
Tags: antivirus, apple, backtrack, facebook, job, malware, marriott, passwords, phpids, sharepoint, shodan, vpnhunter
Posted in Infosec Blogs/Podcasts, News | 1 Comment »
I saw VPN Hunter posted on Twitter a few weeks ago and have been meaning to put out a quick post on it. Basically, it is the Shodan of VPNs. Currently it detects SSL VPNs, remote access points, email portals, and generic login sites. Below is a more detailed list of the services VPN...
Read more »
Tags: email, infosec, rdp, security, ssl, vpn
Posted in Infosec Blogs/Podcasts | 9 Comments »
Over the past few months I had the opportunity to attend several awesome conferences and meetups. One concept that keeps rearing its head is that “antivirus is dead.” I’m guessing this comes up a lot because of it’s reliance on a reactive signature-based approach. As most of us probably know this method doesn’t work...
Read more »
Tags: antivirus, forensics, sans
Posted in Infosec Blogs/Podcasts, News | 9 Comments »
As most of you know I like talking about all this fun infosec career stuff. And so I continue with an article that I came across last night that I thought I’d pass along. InformationWeek.com’s Cindy Waxer conducted an interview with Brian Duckering of Symantec and provided “4 Tips: How To Land An IT...
Read more »
Tags: career, certifiction, education, informationweek, mobile, networking
Posted in Career Development, News | 6 Comments »
Last Thursday had the opportunity to give a talk on the PHPIDS install I’ve been running on several blogs for awhile. This was the first time I gave it. There’s still a lot of additional research I need to do here and I’m looking forward to updating this talk in the near future. Anyway,...
Read more »
Tags: appsecdc, conference, infosec, phpids, security
Posted in Infosec Blogs/Podcasts, Infosec Conferences | 9 Comments »
I’ve written about SharePoint before and felt that it’s ok security-wise if you configure it right. But then last week I saw a talk at AppSecDC titled “SharePoint Security 101″ and am … very scared to say the least. See my summary of the SharePoint talk here. So I pass the question on to...
Read more »
Tags: poll, sharepoint, survey
Posted in Infosec Blogs/Podcasts | 4 Comments »
If you missed anything or happened to be offline this past week, we hope you find this post useful as a quick reference. For those readers that may not have noticed, I actually tack on a bit of commentary to some the industry articles – so check out my italicized/bolded opinions and let me...
Read more »
Tags: appsecdc, cnip, facebook, girls, krebs, privacy, python, sharepoint, wiretap, zero-day
Posted in Infosec Blogs/Podcasts, News | No Comments »
It’s that time of the week again: the time where we take a look at what local security bloggers have been up to. You can take a look at what local security bloggers have been up to but if you can’t get enough of the local security scene, check out our NovaInfosec Twits list...
Read more »
Tags: dc, infosec-blogs, local-security-bloggers, md, nova, security-bloggers
Posted in Infosec Blogs/Podcasts | 5 Comments »
Yesterday I had the opportunity to give another one of my infosec career talks … this time AppSecDC. In an effort to better link the general strategic advice we all usually get with more actionable tactical steps, I narrowed the talk to only focus on web application security. This seemed to work well. Anyway,...
Read more »
Tags: appsecdc, career, conference, infosec, security, web
Posted in Infosec Blogs/Podcasts, Infosec Conferences | 7 Comments »