Is revision of history, so thorough that it is impossible to prove it, possible? The short answer, of course, is yes. In the past such revisions would take generations and... »
Just like the Russian intelligence services make a great deal of using traditional tradecraft and Western agencies prefer clear-cut approach which leaves no doubt in the asset's mind who they... »
Cyber is hot property nowadays. There’s not a “thought leader”, an organisation, a think tank, an industry body, government body, and the list goes on and on and on.... »
If Apple followed the 'wisdom of the crowds' in 2006-2007 they'd never made an iPhone. If smart CISOs paid too much attention to the article in the Information Risk Leadership... »
Jack Whitsitt’s great new #NISTCSF B-side looks much better than the NIST effort, but it also has, at least in my view, one glaring issue. It places risk management... »
This is too good not to share. (By Dave Blazek, (CC BY-ND 3.0 US)) Hat-tip to Gabe Basset for a great find.... »
Ian Grigg's Financial Cryptography blog (FC) is one of the best sources on (alternative) payment systems. In terms of calling out risks and issues with the Bitcoin currency and market,... »
Too often we hear about the "Chinese threat" which generally makes Chinese army and polity seem like a monolithic structure: to the (uninformed) outsiders, the journalists covering the issue, and... »
"IC On The Record" Tumblr blog, or "I Con The Record", depending on how you want to read it, posted this fine example of bureaucrateese: As indicated in the Justice... »
... you are committing a cardinal risk management sin. Of course that doesn't stop people from continuing to do qualitative risk assessments, and there's absolutely nothing wrong with that so long... »
It was with great interest that I read this article on Reuters (home to serious news most of the time) on the latest threat intelligence report. You can never have... »
(I’m limiting this short review to two main subjects that I feel I know enough about to comment. The rest I’m a dabbler, but I don&... »
The narrative that Snowden was an FSB asset is gaining traction in the mainstream media ready for new soundbites and more importantly for a different narrative that the audience isn&... »
To argue that one case led to the abolishment of either system is as simplistic as it is to argue that online activism is capable of having influence without corresponding... »
Another poll, another breathless doom and gloom prognostication. This time cyberwar is seen as top threat facing US: Cyberwarfare is the most serious threat facing the United States, according to... »
Over on his Gartner blog Dr Anton Chuvakin started the list of measures / criteria that could be useful for organisations looking to replace or augment their existing internal threat intelligence... »
Recently I had an interesting conversation around incident response (IR) and preparedness for incidents. For some reason conversation centred around attack trees and how they can be used to better... »
It must be just me, but every time there’s a need to present a complex topic to the executives or business leadership (topic for another musing, methinks) I get... »
TL;DR: African Union’ draft Cybercrime Convention: Majority of the Convention is spent defining legal protection for entities and persons using the internet and other electronic means to do business.... »
I’ve been an avid user of Prismatic since July 2012 (just checked my old tweets and that’s when I first tweeted a Prismatic link). When I... »
This simple list of four basic rules of crisis communications couldn’t be any shorter, yet we see so many people still get it wrong. In a crisis, a leader... »
A short time ago I saw another one of those commonly held InfoSec wisdoms that states that as your organisation’s information security matures so your budget changes from mostly... »
"Suddenly [the Australian government] wanted to know what the demand would be for Australian iron ore and other commodities, and just what price the Japanese were prepared to pay for... »
The system is quite simple: After obtaining a court warrant, the FSB can order an Internet provider to buy, install and maintain a SORM device on its networks. Under current... »
This is the reality of the Internet. Nobody has a plan. Sure, we work to build things, and they may end up in the general direction where we planned them,... »