OMG. Why does it always take the worst case scenario?

Here’s an article about how medical device manufacturers continue to not get it done securing what they produce.  It references a few data points, including one from a Ponemon survey outlining how people are concerned about it, but yet action taken is relatively...

Security Buying Spree: What’s Microsoft Up To?

So Microsoft apparently is buying the Israeli security firm Hexadite.  Hexadite, interestingly enough, makes an automation tool to support incident response.  In fact, it’s specifically designed to support (or arguably replace) human analysts in performing...

Microsoft holding EternalBlue patches for 3 months

So it’s a week later and I’m still talking about the ridiculous saga that is EternalBlue/WannaCry/Spy vs. Spy. I told myself to discuss something (literally anything) else today, but I continue to be fascinated by the questions that this issue has opened...

ShadowBroker Notice: Probably want to pay attention

Mike Mimoso over at the Threat Post has a great article up about the next round of potential vulnerabilities from the Shadow Brokers. Now, of course I always love reading an article from Mike – he’s one of those folks that could write about bread mold and...

PATCH Act: No More Phat Lootz?

It would be an understatement to say that people were upset about EternalBlue.  Microsoft apparently was already upset about it before WannaCry, but was even more upset afterwards, calling for a “Digital Geneva Convention.” If you haven’t been...

Musings on cyber “atomic bomb”

Do you remember this comment from Andrey Krutskikh back during Infoforum 2016? “You think we are living in 2016. No, we are living in 1948. And do you know why? Because in 1949, the Soviet Union had its first atomic bomb test. And if until that moment… the...