Blog
Field notes on better security. Practical knowledge, openly shared.
Cloud access reviews for financial services teams
Excessive cloud permissions can expose information long after a project ends.
Cloud access reviews for manufacturers
Excessive cloud permissions can expose information long after a project ends.
Business email compromise for financial services teams
A change to bank details in a familiar thread can conceal payment fraud.
Business email compromise for manufacturers
A change to bank details in a familiar thread can conceal payment fraud.
Ransomware readiness for financial services teams
An untested recovery plan can turn a contained incident into extended downtime.
Ransomware readiness for manufacturers
An untested recovery plan can turn a contained incident into extended downtime.
Wallet transaction tracing for financial services teams
A visible transfer does not by itself identify the person controlling a wallet.
Wallet transaction tracing for manufacturers
A visible transfer does not by itself identify the person controlling a wallet.
Web application authorization for financial services teams
Signed-in accounts should only access the records they are entitled to use.
Web application authorization for manufacturers
Signed-in accounts should only access the records they are entitled to use.
Digital evidence preservation for financial services teams
Screenshots often omit metadata needed for a reliable investigation.
Digital evidence preservation for manufacturers
Screenshots often omit metadata needed for a reliable investigation.