What security companies – and all of us – can learn from the Deadspin debacle

What security companies – and all of us – can learn from the Deadspin debacle

The recent news of the exodus of the entire editorial staff of the popular sports and culture website Deadspin sent reverberations throughout the media. But two of the biggest lessons to be learned from Deadspin’s downfall should...

Cybersecurity Awareness Month: Increasing our self-awareness so we can improve security

Cybersecurity Awareness Month: Increasing our self-awareness so we can improve security

With the increased prominence of cybersecurity in organizations due to many crippling cyberattacks, the emphasis is now on continual engagement, as it should be. It’s also important to address the tunnel vision that has plagued the...

What Andrew Luck’s retirement can teach infosec leaders

What Andrew Luck’s retirement can teach infosec leaders

Andrew Luck was an incredible quarterback who performed at very high levels despite numerous hits and injuries. At the age of 29, he walked away from the sport he loved and untold millions of dollars. This action, and the reaction...

Thoughts from Defcon 27 – This is why I do what I do

Thoughts from Defcon 27 – This is why I do what I do

Every year, thousands of security professionals descend upon Las Vegas to take part in a series of conferences known as Hacker Summer Camp. This year, Black Hat, BSides Las Vegas, Defcon 27 and the Diana Initiative took up the...

‘Stranger Things,’ data provenance, intelligent systems and data conversion

‘Stranger Things,’ data provenance, intelligent systems and data conversion

Season 3 of “Stranger Things” takes us back to 1985 in Hawkins, Indiana, and the magic of the Starcourt Mall. An underlying theme of this show is how the side effects of technology research can lead to adverse consequences. This...

Father’s Day and good role models

Father’s Day and good role models

Father’s Day is a day to celebrate those who take up the role of being one to their children, whether or not they are the biological one, or even the same gender. We need to recognize those who take up that role non-traditionally. We...

‘Nuff said!

‘Nuff said!

The Marvel Cinematic Universe started in comic books as the creations of three main visionaries: Stan Lee, Jack Kirby and Steve Ditko. They weren’t always successful. Through following the vision of their creators, a new group was...

What lessons can we learn from Notre Dame to better prepare for cyberattacks?

What lessons can we learn from Notre Dame to better prepare for cyberattacks?

The Notre Dame cathedral – one of mankind’s greatest achievements – is not only a monument to Catholicism, but also to the French people who built and maintained this landmark over centuries…and will now rebuild this icon again. As...

What can we learn about infosec from the Varsity Blues college admissions scandal?

What can we learn about infosec from the Varsity Blues college admissions scandal?

The Varsity Blues scandal – where rich parents paid an intermediary to get their kids into top colleges by paying off coaches to pass them off as athletic recruits (among other things) – exposed multiple operational security failures...

Combatting drama and barriers in the infosec community

Combatting drama and barriers in the infosec community

At its onset, the infosec community was very inclusive and welcoming…when others were not. Over the years, we’ve forgotten where we came from and why. Self-appointed gatekeepers leaders of who belongs in the community (or not) have...

Conspiracy theories and cognitive dissonance…and how to combat them

Conspiracy theories and cognitive dissonance…and how to combat them

Can information security leaders help overcome the challenges wrought by a public that's increasingly ready to believe – and act on – even the wildest conspiracy theories?

Real life, why people escape it – and bringing them back

Real life, why people escape it – and bringing them back

Security isn’t just about technology - that's only 10% of the total solution. Most of what we try and do is build awareness and communication between our team members and the rest of the company. And that requires being active social...

Why hacking leads to less security respect

Why hacking leads to less security respect

If security and risk management continue to be marketed as tools that aren't necessarily complementary to an organization’s strategy, they will continue to be seen as outsiders.

Defense, security and the real enemies

Defense, security and the real enemies

The end of the Cold War meant that the countries that threatened American democracy and our way of life didn’t go away. They adapted to use technology to attack us instead. Now that the extent of these attacks is being made known, we...

Linus Torvalds, the UNIX Wars and history repeating itself

Linus Torvalds, the UNIX Wars and history repeating itself

Linus Torvalds, the creator and maintainer of the Linux Kernel, announced on a mailing list that he was taking time off to address behavioral issues that have caused negativity in the Linux community. This presented business risk and...

Why burnout happens in Information Security

Why burnout happens in Information Security

Burnout happens a lot in the information security field because we put the professionals responsible for it in positions where they are set up to fail. To fix this, we need to stop treating security as an option or hindrance, and let...

How kidney stones help us think better about implementing security

How kidney stones help us think better about implementing security

Sometimes in life we go through very disruptive experiences that make us think about how we can better prepare ourselves. Kidney stones, while small, have that effect. The experiences you have with these can make you think about how...

Rose-colored glasses and sepia-tinted memories

Rose-colored glasses and sepia-tinted memories

We view history through a rose-colored tint. People often leave out the historical context of events and why they occur. Understanding the evolution of systems and their context allows us to better comprehend past decisions and keep...

Cargo cults, certitude, the Byzantine Empire and avoiding the traps of the past

Cargo cults, certitude, the Byzantine Empire and avoiding the traps of the past

We can learn a lot from our history. Both fairly recent historic events such as World War II, and events from the middle ages such as the fall of Constantinople both show us how we react during times of crisis. We can apply lessons...

Negative motivation is not positive engagement

Negative motivation is not positive engagement

The barrage of fearmongering and FOMO over social media and advertising leads to a vicious cycle of negative engagement that builds anger and frustration that can’t be addressed by buying new products. We can break the cycle through...

Load More