[in]security blog (14)

11 min read

This Week's [in]Security - Issue 248 | insecurity | Control Gap

Welcome to This Week’s [in]Security. Big-Hacks: Log4J, new RCE, the long road. New breaches: T-Mobile, Redline Stealer, Lastpass. New Ransomware:...

11 min read

This Week's [in]Security - Issue 247 | insecurity | Control Gap

Welcome to This Week’s [in]Security. Big-Hacks: More log4shell. New breaches: Azure, Hellman. New Ransomware: terrorism? Inetum. Major outages:...

15 min read

This Week's [in]Security - Issue 246 | insecurity | Control Gap

Welcome to This Week’s [in]Security. PCI and payments: PCI updates: FAQ, HSM. Magecart, Sportsgear, ATMs, PAX. Supply-Chain Backdoors:...

4 min read

Addressing Log4Shell | Control Gap

The Log4Jshell vulnerability has sparked an Internet firestorm and may potentially be one of the most devastating bugs in years. But why? Log4shell...

16 min read

This Week's [in]Security - Issue 245 | insecurity | Control Gap

Welcome to This Week’s [in]Security. Log4J/Log4shell! PCI and payments: PCI updates: PIN, SSF. Non-Compliance Lesson No.3. Magecart, Supply-Chain...

2 min read

Non-Compliance Lesson No. 3: Don't upgrade or patch your old stuff

PCI DSS can be hard and not preparing for it just makes things harder. Following this advice is guaranteed to make it both more exciting and painful. ...