Learning From The Outside: A Wake-Up Call For Security Teams

The Ethics of Publicly Naming Compromised Systems

I spend some time each week researching what Internet miscreants are doing. Because of this, I often encounter compromised systems before their owners know of the breach. As I write this, I currently have outstanding contact attempts for ten organizations with compromised websites - some with which you’re likely familiar.

Uh...

The organization wasn’t big, but they did have an IT department that apparently consisted of about a half dozen people.

SaaSsy Scanning

I recently posed a Twitter poll on the following question about Scanning as a Service (SaaS):

There are several companies who “scan the Internet” and provide the resulting data to paying customers. These scans can be a bit invasive. When do you think such scanning crosses a line?

Priorities

Remember how often the word unprecedented got used in 2020?

Extraordinary Claims, Ordinary Evidence...

Pwned Me a N00b