Cloud Security

Before you can resolve the problems with open-source code, you need to understand the risks

How to reduce the chances of a security flaw in your application with the principle of abstraction

What to do about botocore.exceptions.RefreshWithMFAUnsupportedError?

You’ll never know what could happen if you don’t take a chance

Summary of the log4j vulnerability that shook the Internet

Are your security scans getting the coverage you need?

Steps by step instructions to connect to an AWS EC2 Instance from a Google Chromebook

Getting started with Go: Part 1

Getting started with Go: Part 2

Google Chrome overrides system DNS settings in some cases, possibly bypassing third-party security services and tools.

Just in case you missed it — I did a blog post for AWS using an AWS IoT Button to open up network access to a VPN. Sometimes people say…

A few tips on finding what matters on your home network

Seeking solutions that make a difference

Tracking a Spy Through the Maze of Computer Espionage

Sources of unrequested network traffic from the past few months

Tips for fewer firewall rules when you’re trying to block traffic from a network

Noise on your network makes it more challenging to find what matters.

Who do you call when you have a security problem?

One day a silly little Facebook poll was going around. “How many states have you visited? Airports don’t count.” I wrote down all the…

Part 2: What caused the breach and what does the malware do?

Cybersecurity History from a British Perspective

Billions of Reasons why networking is vital for cloud security courtesy of MongoDB

Security is principally about managing risk. The more commonly exploited and dangerous ports you have exposed to the Internet…

Andy Jassy’s 8 keys to success ~ AWS re:Invent 2020 Keynote

Provide information that helps stop future attacks

What did you do with that penetration test, audit, assessment, or bug bounty report?

I’m writing a modern book on cybersecurity for executives ~ one blog post at a time. Here’s a list of the posts I’ve written so far.

Most experienced technical professionals will likely tell you they are contacted by recruiters more than once a month if not once per day…

Revisiting the facts after a week of news

How SolarWinds Hackers used AWS and Azure