Calculating Value
Today is the 154th day of 2025, and I’ve currently contacted 170 organizations to inform them that they have a compromised system connected to the Internet.
Continue readingBeyond the Alert: How External Breach Notifications Should Reshape Your Security
I notify many, many organizations that they have compromised systems.
Some people collect coins, and some collect stamps. I spend some of my free time each week looking for hacked systems on the Internet.
Hey… it's a hobby.
Continue readingLearning From The Outside: A Wake-Up Call For Security Teams
I spend significant time each week trolling through Google… Continue readingOpimized and Improved
Improving performance may be easier than you think. Continue readingThe Ethics of Publicly Naming Compromised Systems
I spend some time each week researching what Internet miscreants are doing. Because of this, I often encounter compromised systems before their owners know of the breach. As I write this, I currently have outstanding contact attempts for ten organizations with compromised websites - some with which you’re likely familiar.
Continue reading