Think about this: You’ve added 30 new switches, 15 firewalls, and 20 routers, all believed to be policy-compliant. But a routine check, months down the line, uncovers a shocking reality:…
The first time an MCP (Model Context Protocol) server felt real to me, it wasn’t because of a clean demo. It was because of the noise.
A stolen session cookie sat in underground markets for seven weeks before attackers used it to poison 32 Red Hat packages in the npm software registry, an example of the…
Organizations often struggle with how to secure IPv6 network and application infrastructure on AWS based on what type of IPv6 addresses they are using. In this post, I cover the…
TLS Handshake Deep Dive with David Bombal Recently, I had the honor of talking to David Bombal about the TLS Handshake. We picked apart everything that occurs in the first…
When you shortlist an IT service management (ITSM) solution or tool, one of the first questions from your architects, security reviewers, and procurement team is predictable: “Will this work in our environment without…
Having worked across nearly every layer of cybersecurity – from analyst to CISO for two different organizations – I have seen firsthand how difficult security investigations used to be. I…
Jumbo frames are Ethernet frames with a payload larger than the standard 1500-byte MTU, typically up to 9000 bytes. They reduce overhead and improve throughput for large data transfers by…
Taking your feedback and followup and discussing the questions you bring us. Zero Trust Defintions, Out of Band in Zero Trust, Johna and/or Greg is/are insufferable and re-evaluating the Tech…
Your network policy says: allow traffic from 10.0.1.45. Yesterday, 10.0.1.45 was your payment service. Today, after a rolling deployment, it’s your logging agent. Your payment service is now at 10.0.1.89….
