Data Safety and Information Security

Open source tools can be a powerful resource for organization looking to build a secure software dev and delivery process.

In a great many ransomware attacks, the criminals who pillage the victim's network are not the same crooks who gained the initial access to the victim organization. More commonly, the infected PC or stolen VPN credentials the gang used to…

Show me your access token, and I will tell you who you are, or at least obtain a lot of valuable information. This data must be protected.

Scanning millions of domains and compromising the email supply chain of Australia's most respected institutions.

In this article, we will run you through the risks that affect assets that process, store, and transmit personal data. we will also touch upon how you can reduce and nullify these risks with security controls.

Two-factor authentication is a widely used and trusted security mechanism, but criminals are increasingly using malicious toolkits that can outwit it.

The RedLine information-stealing malware targets popular web browsers such as Chrome, Edge, and Opera, demonstrating why storing your passwords in browsers is a bad idea.

Get the big picture of cyber security: first-hand statistical data from 18 global SOCs/CyberSOCs, CSIRT & pentesting-stories, tech-deepdives and more on the hot topics of digital defense.

Metasystems promote network effects because they provide leverage: one infrastructure that not only serves many purposes, but also engenders consistent behavior.

A non-security person's take on using CSPs in the real world.

I hope this post can help reduce confusion around exactly how Sigstore’s trust model works, and how trust flows from the community root…

The modern internet is full of services that want to know who you are. Fingerprinting is the latest way to do this: capturing many small…

Trust and integrity are critical to the internet of things. If a business or consumers can’t trust the data, the IoT fails.

What is the difference between permissions, privileges, and scopes in the authorization context? Let's find out together.

In engineering, a common approach to security concerns is to address those requirements after delivery. This is inefficient for the following reasons: Fails to consider how the requirement(s) can b…

Digital memories are an important component of our digital embodiment. SSI provides a foundation for self-sovereign digital memories to solve the digital-analog memory divide.

Boffins measure the black hole of dubious certs and find it troubling

Photuris: Session-Key Management Protocol (RFC )

What is the trusting trust problem? Schneier on Security, Countering "Trusting Trust" Way back in 1974, Paul Karger and Roger Schell discovered a devastating attack against computer systems. Ken Thompson described it in his classic 1984 speech, “Ref...

When first integrating your apps with an IAM system, there is a learning curve to identify and meet the important requirements.

Zero-knowledge proofs are a powerful cryptographic technique at the heart of self-sovereign identity (SSI). This post should help you understand what they are and how they can be used.

In the early 1950s, a prominent magician wrote a top-secret manual of "trickery and deception" for the C.I.A.

Learn spy terms, phrases, and code words with the International Spy Museum. Put in the work here and you’ll be using spy lingo in no time.

Tradecraft: The CIA, KGB, Mossad and More