cyber security - Jonsdocs

cyber security

A collection of 71 posts

BIOS passwords - do we still need them?

BIOS passwords - do we still need them?

BIOS passwords - to set or not to set, that is the question.

Cartoon of a long brown haired person sat in front of two monitors.

An insight into my role as a SISO - part three

Looking more into my day job, considering the software development life cycle, customer relationships, and staying up to date.

Cartoon of a long brown haired person sat in front of two monitors.

An insight into my role as a SISO - part two

Continuing a tour into my day job by looking at incident response and investigations.

Cartoon of a long brown haired person sat in front of two monitors.

An insight into my role as a SISO - part one

My job can vary hugely day to day, as a lot of what I do is reactive. Sometimes I get asked what I do, so I've tried to pick a number of activities from my role and collated them into this post. What's a SISO? SISO

A slanted piece of white paper with check boxes and a list, with a gold padlock over the top.

Security questionnaires

Security questionnaires seem to be never-ending, and present a number of challenges. Here's my experience, along with some tips.

3d text saying "H F CON".The "F" is lying down.There is a pale yellow background with mauve & white shapes at the borders.

Human Firewall Conference

Human Firewall Conference 2023

A summary of my notes from the SoSafe Human Firewall conference, November 2023.

Infosec Europe 2023, day 3

Thursday was the final day of the conference and I managed to attend a lot of sessions, some that I hadn't originally planned. Keynote: Malicious Innovation - What We Can Learn From Hackers Our keynote speaker today was Keren Elazari who highlighted to us that hackers force us

Screenshot of the (ISC)2 Security Congress 2022 virtual conference entry hall. There are people walking around.

Security Congress 2022

Catching up: on-demand sessions from (ISC)² Security Congress 2022

(ISC)² make session recordings available after the event, and with a number of sessions of interest going on simultaneously these are invaluable. Any sessions I watched prior to the end of December I received CPE / CPD credits for, but the recordings are around afterward too. Here's some summary

Screenshot showing the icons of some old malware samples.

Playing with some old malware

Malware has been around for ages, but how do some old malware samples work on more modern Operating Systems?

Screenshot of Virus Total saying 14 out of 61 vendors believe the file is malicious.

A QBot near miss, and a look at what might have been

A look at some malware that would have been delivered to a colleague, but they noticed something dodgy was happening!

An orange rucksack with a gold padlock and labelled "go bag". In front is a torch / flashlight and some bottles of water.

A cyber security incident response "go bag"

I've heard this concept discussed before yet have failed to actually put one together. I started drafting this post back in October, when the concept came up again at a talk during (ISC)² Security Congress 2022 (day one, during "Incident Response Ready - Key Steps of a

(ISC)² Security Congress 2022 - day three

Security Congress 2022

(ISC)² Security Congress 2022 - day three

As Security Congress draws to a close, here's my notes on the final day.

(ISC)² Security Congress 2022 - day two

Security Congress 2022

(ISC)² Security Congress 2022 - day two

Having woken up earlier than planned, I spent time pre-keynote watching talks from Monday. Not all the sessions I was interested in were ready yet (we were told it could take 24 hours), so there will be more for me to look at. I won't write about catch

(ISC)² Security Congress 2022 - day one

Security Congress 2022

(ISC)² Security Congress 2022 - day one

Congress got off to a great start and included a heart-warming (and I'll be honest tear inducing) story from one of the speakers.

When do you pay the ransom?

When do you pay the ransom?

Should you pay the ransom when attacked with ransomware? I don't think there's a clear cut answer to that...

Setting up MTA-STS using AWS S3, CloudFront and AWS Certificate Manager

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with AWS S3, CloudFront and Certificate Manager.

Setting up MTA-STS using Azure Static Web Apps

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with Azure static web apps.

(ISC)² Security Congress 2021 - the online experience

Security Congress 2021

(ISC)² Security Congress 2021 - the online experience

What was it like to actually attend a conference purely online?

(ISC)² Security Congress 2021 - day three

Security Congress 2021

(ISC)² Security Congress 2021 - day three

Rounding out the conference on day three with some fantastic speakers.

(ISC)² Security Congress 2021 - day two

Security Congress 2021

(ISC)² Security Congress 2021 - day two

Looking at my sessions on day two.

(ISC)² Security Congress 2021 - day one

Security Congress 2021

(ISC)² Security Congress 2021 - day one

My reflections on the first day of the (ISC)2 Security Congress conference.

Playing with honeypots: part 4

Playing with honeypots: part 4

Looking at a different attack on the honeypot I investigate an attempt to deploy a crypto currency miner.

Playing with honeypots: part 3

Playing with honeypots: part 3

Having built a honeypot and published it to the Internet, it's time to see what the attackers tried to do.

Playing with honeypots: part 2

Playing with honeypots: part 2

I build my honeypot in Microsoft's Azure cloud using open source software.

Playing with honeypots: part 1

Playing with honeypots: part 1

Let's look at what honeypots are, and why we might use them.