ppfosec (Page 3)

Sign in Subscribe

It's Always a Question of Identity

It's Always a Question of Identity

While I'm a GRC specialist, I'll always keep a fondness for Identity and access management. I love IAM for the same reason most hate it: it's embedded into organizational complexity, there's an infinite amount of edge case and messiness, and it requires

Ransomware Running Rampant

Ransomware Running Rampant

Insurance and security companies have grown so used to ransomware that cyber-threat researchers can now become "negotiators". One of them shares his experience to the register. Based on previous discussions with designated criminal groups, negotiators can tell which is more likely to give back the key if you

The Money Problem in Cybersecurity

The Money Problem in Cybersecurity

You probably got into cybersecurity because it seemed like a smart, future-proof move. Maybe you saw the salary ranges on Glassdoor. Maybe someone on LinkedIn told you there are “1 million unfilled jobs.” The message was clear: learn the skills, get a few certs, and the doors will open. Life-changing

Remote workforce giving new meaning to "fishing trip"

Remote workforce giving new meaning to "fishing trip"

Sometimes I wish we, infosec specialists, were better at "reading the room". A report from Tessian reveals that 56% of IT leaders believe employees are "cutting corners" when not in the office. The main concern seems the revolve around "blurring" personal and professional lives,

Missing the Forest for the Trees: How Our Privacy Focus Got Derailed

Missing the Forest for the Trees: How Our Privacy Focus Got Derailed

As a privacy advocate watching the implementation of regulations like GDPR and CCPA, I can't help but feel profoundly frustrated. It's not that these laws are fundamentally flawed... in many ways, they're quite impressive frameworks. The problem is how their implementation has been derailed

My CISSP story

💡Last update: 2025 I got into infosec because of the TV show Mr. Robot. Of course, my initial idea was to become a pentester! While ethical hacking was enthralling, I quickly discovered my knack for delivering awesome risk assessment reports thanks to my love of writing. When faced with the

The Supply Chain Security Crisis: Tools vs Talent

The Supply Chain Security Crisis: Tools vs Talent

Remember Log4Shell? Not actual shipping containers - I'm talking about that infamous vulnerability that exposed the fragility of our software ecosystem. Log4Shell, a critical vulnerability discovered in December 2021 in the ubiquitous Log4j Java library, allowed attackers to execute arbitrary code by injecting malicious strings into log entries.