Rants

Last quarter your organization ran a tabletop exercise. A facilitator walked the team through a ransomware scenario, everyone said the right things, the runbook was referenced, and the after-action report…

There is a framed certificate on a wall somewhere in your building right now. It has a nice border, an auditor's logo, and a date. Somebody spent six figures and…

Twenty years in this business and I can tell you the most dangerous thing in any security architecture is not the firewall you forgot to configure. It is the off…

I am going to make a bold statement: automated source code scanning as a primary application security strategy is dead. It just does not know it yet. Before the vendor…