Cloud Security

Thoughts on the Capital One breach by a former Capital One software engineer, team lead, cloud engineer, and security employee

I’m writing a modern book on cybersecurity for executives ~ one blog post at a time. Here’s a list of the posts I’ve written so far.

Here’s where I start to learn what it’s like to be a woman in tech and to work in Corporate America.

If you think about how breaches occur there is almost always some sort of Internet exposure involved. How many of your systems are exposed?

Do you ever need a public AWS S3 bucket? Not really. How security teams can make sure that never happens.

Also — being paid by a large hosting company to go away after reporting a security incident, and other strange events.

Strategies for executives looking for ways to deal with cybersecurity more effectively

Don’t be fooled

What executives and board members need to know about cybersecurity.

Premeditated damage control

Most experienced technical professionals will likely tell you they are contacted by recruiters more than once a month if not once per day…

What is a CVE and why is it important? Cybersecurity for Executives.

I mentioned in my post for the AWS Blog that I would explain later why I used an AWS IoT Button for just-in-time access to a VPN…

Protect Your Gold

One of the first techniques I learned for penetration testing was something called Arp Cache Poisoning…

Just in case you missed it — I did a blog post for AWS using an AWS IoT Button to open up network access to a VPN. Sometimes people say…

I am a woman in tech and cybersecurity. At the moment I focus on cloud security. This is my story.

→ Keep the ball away from the attacker.

What’s it like to take one of the hardest cybersecurity certifications in the industry — and pass!

One day a silly little Facebook poll was going around. “How many states have you visited? Airports don’t count.” I wrote down all the…

Can we get rid of passwords too?

Security is principally about managing risk. The more commonly exploited and dangerous ports you have exposed to the Internet…

Twenty cybersecurity questions executives can ask their security team to uncover problems that could lead to a data breach.

Any time you are using public wifi, or in other words a network you don’t own and secure yourself that allows anyone to connect, it’s a…