Internal vs External Breach Detection

You may not believe this, but there's some serious differences between breaches discovered internally versus externally.  You can see them over on my new blog about it at the Verizon security blog!

Twitter for Infosec

While a lot of people discuss infosec on Twitter and in other forums, they are dwarfed by the number of people who work in infosec but do not participate in the community.  This blog, Twitter for Infosec, is for all those people working in infosec who have wondered about twitter, but aren't quite sure how to get started.

And don't forget Trey Ford's Blackhat Attendee Guide for those jumping into the deep end that is Infosec Summer Camp.

DBIR The Missing Section: Phishing

Go check out my new blog at the Verizon security blog: DBIR The Missing Section: Phishing - TL:DR - Yeah, lots of espionage and criminal activity for financial gain and stealing secrets. But what's surprising is exfiltration takes days, so even though that first email is clicked in 82sec on average, you still have time to do something about it!