Happy New Year!
Happy New Year!
Today, September 18, 2025, is the 261st day of 2025, but for me, it’s December 31.
Continue readingCalculating Value
Today is the 154th day of 2025, and I’ve currently contacted 170 organizations to inform them that they have a compromised system connected to the Internet.
Continue readingBeyond the Alert: How External Breach Notifications Should Reshape Your Security
I notify many, many organizations that they have compromised systems.
Some people collect coins, and some collect stamps. I spend some of my free time each week looking for hacked systems on the Internet.
Hey… it's a hobby.
Continue readingLearning From The Outside: A Wake-Up Call For Security Teams
I spend significant time each week trolling through Google… Continue readingThe Ethics of Publicly Naming Compromised Systems
I spend some time each week researching what Internet miscreants are doing. Because of this, I often encounter compromised systems before their owners know of the breach. As I write this, I currently have outstanding contact attempts for ten organizations with compromised websites - some with which you’re likely familiar.
Continue readingCall me Ishmael
I know you’ve seen my messages. I don’t understand your choice.
Why are you ignoring me?
Continue reading