ppfosec (Page 3)

Sign in Subscribe

Why Are So Many Companies Getting Hacked?

Why Are So Many Companies Getting Hacked?

How and why do you seem to be experiencing every week some type of cybersecurity event in your digital life, and what to do about it?

Is AI About to Take Your Job?

Is AI About to Take Your Job?

⚙️ In-depth look at the implications of ChatGPT's recent deployment and how AI can affect the future of work. Plus: Facebook GDPR fines, Tax filing websites send Personal Data to Facebook, Email security, more!

How To DevSecOps

How To DevSecOps

I spent a good portion of my first internship in cybersecurity supporting a large IT operations department in the financial sector. I created service accounts with minimal permissions, maintained firewall configurations, designed workstation and server baselines, piloted access removal initiatives, and was a "level 3 support" for helpdesk

Exclusive: Security Absent from Twitter Terms

Exclusive: Security Absent from Twitter Terms

💡2025 edit: This is a dated article, but this is my first and only "journalistic" piece, as, at the time, with the Elon Musk Twitter acquisition, this story was a big deal. I'm keeping it for archive purposes. I reviewed Twitter's public documentation and

It's Always a Question of Identity

It's Always a Question of Identity

While I'm a GRC specialist, I'll always keep a fondness for Identity and access management. I love IAM for the same reason most hate it: it's embedded into organizational complexity, there's an infinite amount of edge case and messiness, and it requires

Ransomware Running Rampant

Ransomware Running Rampant

Insurance and security companies have grown so used to ransomware that cyber-threat researchers can now become "negotiators". One of them shares his experience to the register. Based on previous discussions with designated criminal groups, negotiators can tell which is more likely to give back the key if you

The Money Problem in Cybersecurity

The Money Problem in Cybersecurity

You probably got into cybersecurity because it seemed like a smart, future-proof move. Maybe you saw the salary ranges on Glassdoor. Maybe someone on LinkedIn told you there are “1 million unfilled jobs.” The message was clear: learn the skills, get a few certs, and the doors will open. Life-changing

Remote workforce giving new meaning to "fishing trip"

Remote workforce giving new meaning to "fishing trip"

Sometimes I wish we, infosec specialists, were better at "reading the room". A report from Tessian reveals that 56% of IT leaders believe employees are "cutting corners" when not in the office. The main concern seems the revolve around "blurring" personal and professional lives,

Missing the Forest for the Trees: How Our Privacy Focus Got Derailed

Missing the Forest for the Trees: How Our Privacy Focus Got Derailed

As a privacy advocate watching the implementation of regulations like GDPR and CCPA, I can't help but feel profoundly frustrated. It's not that these laws are fundamentally flawed... in many ways, they're quite impressive frameworks. The problem is how their implementation has been derailed

My CISSP story

💡Last update: 2025 I got into infosec because of the TV show Mr. Robot. Of course, my initial idea was to become a pentester! While ethical hacking was enthralling, I quickly discovered my knack for delivering awesome risk assessment reports thanks to my love of writing. When faced with the

The Supply Chain Security Crisis: Tools vs Talent

The Supply Chain Security Crisis: Tools vs Talent

Remember Log4Shell? Not actual shipping containers - I'm talking about that infamous vulnerability that exposed the fragility of our software ecosystem. Log4Shell, a critical vulnerability discovered in December 2021 in the ubiquitous Log4j Java library, allowed attackers to execute arbitrary code by injecting malicious strings into log entries.