There have a been a few times in the history of #cybersecurity product development when a new solution has been truly innovative. But what is extremely rare is when a tool is innovative, fills a true need, and is practical to install/deploy. In this #cybersunday, I give some examples of what I see as innovative products, talk about whether they filled a big need at the time they came out, and whether they were practical to deploy.

#innovation #productdevelopment #practical

There were two big themes from discussions with our customers at #BlackHat. One is a commonly discussed problem these days (lack of people). The other takes us back to the fundamentals of #cybersecurity (asset management). And neither were buzzwords or #vaporware.

#CyberSunday #SecurityFundamentals #SkillsShortage #assetmanagement #people

I'm headed out to Vegas tomorrow for the #BlackHat #cybersecurity conference, and it made me think about a couple of questions that have been on my mind for a bit: do you prefer local cons or national cons, and do you mainly go to cons for the talks or checking out the vendors? I weigh in with my opinions (sorta - I'm a bit biased because I run #HouSecCon). What's your take?

#CyberSunday #CyberConferences #HackerSummerCamp

Low-Code/No-Code dev tools are fueling the rise of the "Citizen Developer", but there are real security implications around the tools that enable the non-developer to build applications. I'm just starting to research this more, but here are some of my initial thoughts on today's #CyberSunday.

#lowcodenocode #appsec #cybersecurity

While feature comparisons are important when choosing a #cybersecurity product, what do you do when two products are essentially the same? On this #CyberSunday, I talk about making sure the vendor has #alignment with your business when you've done the rest of your due diligence on features and functionality.

On this #CyberSunday, I'm talking about how #SASE (Secure Access Service Edge) and #SSE (Security Service Edge) are not exactly the same. You need to know what problem you're trying to solve (use cases are always important), and you have to be aware of the differences between them so you can choose the right solution/vendor.

#cybersecurity #sdwan #casb #SDN

On this #cybersunday, I am talking about #threatintel. Specifically, I am talking about how you need to know your use case when you're asking about threat intel vendors or feeds.

Are you looking for a full #threatintelligence platform (TIP)? Or do you just need an intel feed or two to give you context in your SIEM/SOC? Or is it something else? Choose wisely!

Today's #CyberSunday is about some observations I've made recently regarding feature gaps in #cybersecurity products that are trying to solve for the same problem. It's an interesting problem with some real implications for your security program. If you aren't careful in your product selection, you could end up taking a budget line item without actually solving your need.

I also wrote a blog post about this.

On today's #CyberSunday, I am talking about a couple of #cybersecurity books you should pick up. One is Doug Landoll's Security Risk Assessment Handbook. The second is by Corey Ball, and it is called Hacking APIs.

Buy Doug's book here.

Buy Corey's book here.