Articles & Presentations

▼
Thursday, February 27, 2014

If you can't detect the now infamous KAPTOXA/BlackPOS malware, boy is your InfoSec program in trouble

›
So we are up to 20 companies affected by the KAPTOXA/BlackPOS malware. The question is did anyone detect this easily detectable event...
Saturday, February 15, 2014

(N) Target warned about risk to PoS due to new Malware months before breach

›
It is being reported that Target was warned by their Security Staff from reports they received that new malware was targeting PoS syst...
Tuesday, January 21, 2014

How to detect a CryptoLocker type attack - FAST

›
There is a new pest for InfoSec to fight and it is called Ransomware. Though not new, it has become far more invasive and destructive to ...
Tuesday, December 31, 2013

(humor) The NSA is coming to town

›
Year end humor for everyone.. 'The NSA is coming to town' spoof on Christmas classic. NSA Christmas song video Happy New Year everyo...
Tuesday, November 19, 2013

Austin ISSA Malware Discovery training a HUGE success

›
Last Friday we held a Malware Discovery training "From Joe to Pro, how to discover malware in your environment" for the local ...
Friday, November 8, 2013

Like natives, InfoSec needs to become more hunters, less gatherers

›
Today we are faced with an ever increasing threat of advanced malware and the attacks associated with it. Compliance has created a gatherin...
Friday, November 1, 2013

(O) E&Y Poll states 96% of organizations are not prepared for a Cyber attack.. Hmmmm

›
This is an article I have to render an opinion on as it is a great example of 'What the heck have you been working on all these years...
Monday, July 8, 2013

(I) Cyber-Ark Threat survey says 51% of companies think they are currently compromised

›
Here is another report by a security tools company that has some interesting data. 'Cyber-Ark's Global Threat Landscape Survey - Ju...
Thursday, June 6, 2013

(I) Calling for a "Malware Reporting Standard"

›
So what is a " Malware Reporting Standard "?   In short, a consistent way to report data and information about malware, us...
Monday, May 13, 2013

(F) Truly secure banking from the Onion at Chase banks expense

›
If only we could do this kind of banking. But actually you CAN! Boot a PC with a Linux distro of your choice. Every time you finish banki...
Thursday, April 25, 2013

(F) Funny Ellen segment on password management

›
Clearly this is how NOT to manage passwords, but grandma and grandpa might have actually bought this solution from a late night Infomercial....
Tuesday, April 23, 2013

(I) Time to dump AV as Endpoint Protection? Not yet

›
I read an article by Robert Lemos on Dark Reading and thought, 'He missed some points'. So I emailed him and shared, now I'm sh...

(I) Funny video blog on Log Management

›
Take a watch of this video blog on log management... Sums it up. Video Blog on Log Management #InfoSec #LogManagement
Wednesday, April 10, 2013

(I) We are all doing it wrong, well you are according to the stats

›
At this years BSides Austin, Ian and discussed a new method for malware analysis and detection. In the presentation was a slide that indica...
Monday, April 1, 2013

National “Take Your Computer to Work” Day

›
PR / IMMEDIATE RELEASE Today marks the inaugural “Take Your Computer to Work Day”. First conceived by security researchers Michael Gough an...
Thursday, March 28, 2013

(C) BSides Austin a HUGE success and spawns additional effort - Hackers in Uganda

›
2 years ago I hounded the director of CODE 2600 to allow BSides Texas events (DFW, Austin & San Antonio) show his movie at our awesome C...