It’s that time of the week again when we bring you the best of local security blogs. But before we get to that, we thought we’d share our tweet of the week along with a #totw that deserves honorable mention to get your afternoon started with a few laughs. Our official #totw was a RT...
Read more »

While things were a little quiet on the local blogging front this past week due to the awesomeness that is BlackHat, Richard Bejtlich, @rybolov and @geminisecurity came to the rescue with three excellent posts that discuss everything from the importance of sanitizing web apps to what we need in a CyberArmy. As everyone slowly...
Read more »

It seems that @rybolov is slowly turning into NovaInfosecPortal. When I read his post about the upcoming OWASP AppSec DC conference, I considered copying it since he did such a good job. (Kidding, of course.) Besides breaking down the basic information of AppSec DC in his post, @rybolov also mentioned the need for...
Read more »

If ever there was a week of controversial posts, it would be this one. While the posts we usually cover follow trends and topics without coloring outside the lines too much, this week you can expect to read some thought-provoking posts about sexism in information security, what white hat could do with a million...
Read more »

Where can you find a book review, information about the 60-day security review, and humorous commentary about the Verizon report all in one place? This post, of course. Finding the best posts by local security bloggers, we do our best to make your Mondays a little more interesting. # 3 – Hack This Book Again: It...
Read more »

NoVA Blogger rybolov was on a role this week as he took two of the slots for our “Top NoVA Infosec Blog Posts of the Week” feature. Richard Bejtlich also made our list again with an interesting response to the 60 Minutes Story: “The Internet Is Infected.” While the three posts below are all very...
Read more »

Rybolov from The Guerilla CISO, a local infosec NoVA-based blog, has put together a great blog post about NIST’s latest effort to modernize SP 800-30: Risk Management Guide for Information Systems. In his post he stresses how NIST should not change this document into a “catalog of controls gap analysis” process to favor compliance...
Read more »