This is a topic that has been on my mind a lot recently. That is the poor quality of many of the security tooling that is out there at the moment. I say this as I’m currently sitting in an airport at the moment, and I’m unable to use my work laptop…

This is a joint effort with JFrog and myself, which explores how we can improve security in development, especially in regard to a DevOps type model. The sole purpose of this partnership is to share knowledge with others. There is no commercial gain…

This is a joint effort with JFrog and myself, which explores how we can improve security in development, especially in regard to a DevOps type model. The sole purpose of this partnership is to share knowledge with others. There is no commercial gain…

One of the very first things that I ask someone when they want to get started in cybersecurity is which area, they want to get involved in. And the answer is almost always; "hacking things" (a.k.a. penetration testing), threat intelligence, or red…

Most, if not all, within the security community know that we should leverage multi-factor authentication (MFA) wherever possible. This ensures that attackers will have an exceedingly tough time accessing your account. They have multiple barriers to…

I was in two minds about writing this post, but I ultimately decided to since this is an extremely important topic to talk about. I'm hoping that by sharing my own experience, may hopefully help others. Firstly, those close to me, know that I hardly,…

A while ago I wrote a blog covering instructions on how to enable Let's Encrypt on Unifi. This worked well until version 3.x came along! Those instructions no longer work. The good news is that it's now even simpler! Enable SSH The first step is to…

Recently I was asked by someone what you should look for when attempting to perform a code review from a security perspective. I'm now going to say something perhaps rather controvesial, I don't believe in code reviews. There are several reasons why…

As this tweet illustrates, I've been reading a couple of books recently. I'm currently making my way through The Cuckoo's Egg. This is a fantastic book written by Cliffard Stoll. The book was published in 1990 (well the edition that I'm reading at…

A little while back, the only thing that I wanted to be, and the only thing that mattered to me at the time, was to be "promoted" to a director level. I use the term "promoted" since to me at least, this was the only measure of success. At the time I…

A couple of years blog I created a post containing how to create VLANs on Ubiquiti's UniFi controller. Since then the UI has changed somewhat. But perhaps most interestingly, I lost ALL of my configuration at the beginning of this year. Which means…

The origins in me writing this blog post come from a tweet that I tweeted: Now ordinarily I wouldn't be too worried about a user enumeration vulnerability on a site. It's certainly not the end of the world, but it should be something that one tries…

My journey on this scam all started with a suspicious DM in Twitter: My immediate thoughts that this was a scam. Even Twitter thought so and flagged it as such. I was initially going to delete the message and move along. But then I thought, what if I…

The background to me writing this blog post is based on a few infographics that I saw posted on LinkedIn recently. I didn’t link directly to the posts since I wanted to avoid the potential pile-on (perhaps that's another blog post another time). Now…

I’ve seen recent posts on Twitter calling out security practices such as phishing exercises. While I understand where they are coming from, I feel that they are missing the point of these exercises. In an ideal world, I agree that there shouldn’t be…

Updated 20:27 3 June 2022: Added official fix information from Atlassian Updated 17:49 3 June 2022: Added further mitigation details from Atlassian On 2 June 2022 Atlassian published their security advisory Confluence Security Advisory 2022-06-02.…

Recently I had to rebuild my home network (I had issues with my router which meant I had to do a full reset on it), and as part of this effort I wanted to rebuild my local DNS server. I was using Pi-hole for this. It’s a great piece of software that…

Let me start by saying that I have very little skill when it comes to drawing, design and art. Put it this way, I once showed a diagram and someone recommended using a specific tool... the very tool that I used to create that diagram! So I've always…

I’ve worked from home for more years that I can remember. It actually started when I was relatively new in my career. So over the years I’ve probably learnt more about things that you shouldn’t do, as opposed to what to do. When the pandemic hit in…

I clearly remember the day that news of the Log4J vulnerability broke. In typical form it was a Friday obviously. On top of this I was down in Bristol visiting my office and I was heading back home that day. Ordinarily this would have been fine, but…