technicalCISO

A hands on approach to cyber leadership.

HTB Write-Up: Fatty

HTB Write-Up: Fatty

An advanced CTF requiring advanced attack techniques.

Hanging Bootloaders

Hanging Bootloaders

BootHole vulnerability: the solution may be worse than the problem.

Big-Picture Mistakes

Big-Picture Mistakes

Five systemic mistakes made by security leaders, and how to avoid them.

Controversy over DoH

Controversy over DoH

Does cybersecurity suffer as widespread adoption for DoH continues?

Mind the Gap

Can sensitive files be stolen through an air gap? A closer look at the Ramsay malware.

Corona Voting

In the wake of a pandemic, will mobile voting be ready?

HTB Write-Up: Curling

HTB Write-Up: Curling

Another fun HTB challenge, full of appsec and some shell tricks.

HTB Write-Up: Irked

HTB Write-Up: Irked

A great challenge that's sure to bring up some nostalgia.

Vital Exposure

Six new bugs that can kill you.

Geoblocking with NGINX on CentOS

Geoblocking with NGINX on CentOS

When used correctly, geoblocking may not be so bad.

The Iran Threat

The Iran Threat

What do rising tensions in the Middle East mean for the average CISO?

Awareness That Counts

Awareness That Counts

Start the year off with an awareness program that counts.

A Tribute to Perl

A Tribute to Perl

Celebrating 32 years of Perl scripting with a Vigenère cipher attack.

IOT Security

The FBI warns America about smart TVs. What does your IOT security program look like?

Holiday Phishing

Holiday Phishing

It's the most wonderful time of the year (for scammers).

Anonymous RDP

RDP meets the Dark Web.

HTB Write-Up: Carrier

HTB Write-Up: Carrier

A realistic challenge that stresses defense in depth.

Root Impersonation

Root Impersonation

Preventing root from impersonating users.

HTB Write-Up: Mischief

HTB Write-Up: Mischief

Another fun HTB challenge.

HTB Write-Up: SecNotes

HTB Write-Up: SecNotes

The importance of validating input and the negligence of credentials.

HTB Write-Up: Weak RSA

HTB Write-Up: Weak RSA

The importance of key length in encryption.

Should You Pentest?

Should You Pentest?

What kind of hacking skills do CISOs need?

Different Hats

A CISO needs to be good at a lot of things.