What the hell is even that? GoDaddy was recently hit by a phishing scam that resulted in potential compromises to several DNS records. What, if any, security controls could protect against this kind of attack?

Once upon a time, there was one internet for which we all got excited about. It united researchers, opened up economies, fueled technological innovation, offered new opportunities for knowledge and education, and made the world far more understandable for everyone. Then something weird happened to the future; we went backward.

There are plenty of big red buttons, do not enter signs, alarms, alerts, passwords, and off-limit areas — both in real life and in the digital equivalent. But who draws a line in between these any more? Do these expedients work? No! Why?

The infosec industry appears to be willing to adopt alternative—and innovative—ways of thinking to attract students into the field at a young age. But, there is no clear strategy, and there is no book of rules that outlines the skills to be taught to succeed in this industry.

Why is it that after every breach or security incident a cavalcade of talking heads show up to hock their wares and speculate wildly?

Many organizations leverage regulations and standards to help them define their security and privacy programs, and in doing so, spend time and money creating policies, implementing controls, and monitoring for exceptions. But what happens when the regulation or standard changes?

Together we build a smart, secure future. In silos, we stagnate.

Governments, non-profits, and industries re-discover our time's pressing needs and re-connect to share resources, strategies, innovations, and success stories.

2020 has been a colossal roller coaster of a year in many ways, and the numbers and depth of submissions hitting the Black Hat events review board for the 2020 European installment this year demonstrate the unique times in which we are all living.

Gfz9xA3Ds02M1cEMVdxI

What does the CISO role look like at the state level in the United States? We got to speak with the first CISO of the State of California, Mark Weatherford, to get his perspective.

Threat hunting has become a hot topic throughout the cybersecurity community and a common activity within many information security programs. What is the goal of a hunt, and what real value does it bring to the business?