Rybolov from The Guerilla CISO, a local infosec NoVA-based blog, has put together a great blog post about NIST’s latest effort to modernize SP 800-30: Risk Management Guide for Information Systems. In his post he stresses how NIST should not change this document into a “catalog of controls gap analysis” process to favor compliance...
Read more »

Over at the Carnal0wnage Blog, CG made a nice post about the updated draft version of DoD 8570.1M that is probably relevant to many of us in NoVA. This is the directive that requires many of us to have some kind of IA certification if we want to do work for the government. CG focused on...
Read more »

Learn Security Online has released an infosec hacking challenge event titled “CrackMe 0×03.”
Read more »

Ed Skoudis’s Monthly Challenges has released an infosec hacking challenge event titled “It Happened One Friday.”
Read more »

We’ve added a new application security section that will provide a collection of infosec resources related to creating secure applications by building security in.
Read more »

Since most of us deal with the federal government in Northern Virginia (NoVA), we thought you might find this article interesting. It’s an older but interesting SecurityFocus.com article by Robert Lemos about how most government agencies are failing to meet the OMB-mandated Federal Desktop Core Configuration (FDCC).
Read more »

We’ve added a new training resource section that will provide an in-depth look into hacking challenges, courses, conferences, and formal university education options for infosec professionals based in or around the Northern Virginia (NoVA) area.
Read more »