The CVE queue grew. Where does your remediation clock start?
Counting installed patches does not show where a decision stalled. Connect each relevant advisory to an asset, an owner and a verified outcome.
Blog
Praxisleitfäden zu Pentesting, Schwachstellenforschung und KI-gestützten Sicherheitswerkzeugen.
Die Artikel erscheinen auf Englisch und Portugiesisch.
Artikel
150 Beiträge
Cisco SD-WAN: who can change the network after Manager access?
A central console concentrates decisions affecting different parts of a network. A review must establish which paths and changes administration actually permits.
When the lab reaches the internet: verifiable boundaries for AI agents
A simulated task can have real consequences when tools and network access permit the action. Evaluate the boundary independently of the agent’s own answer.
The router belongs in procurement: demand evidence of support and access
A security dispute cannot replace assessment of an installed device. Define procurement questions and tests supporting a decision to retain, restrict or replace it.
After the domain seizure: what to verify inside your network
Disruption of external infrastructure can prompt an internal review. Distinguish reconnaissance, attempted access and confirmed compromise before deciding your response.
If a zone does not return: test recovery of your cloud dependencies
Distributing resources is only part of continuity. An exercise should show that data, permissions and alternate capacity let a business function resume.
Margaret Hamilton’s legacy raises a practical question: how should your system fail?
Define what must stop, what may continue and which controls must remain active when a dependency stops responding.
Human-centered security starts with a task someone can actually complete
Observe whether someone can act securely, get help and complete an authorized task. Turn obstacles into corrections with named owners.
ATM jackpotting: who authorizes work on the cash machine?
A technician on site and a maintenance window do not establish permission for every change. Reviews need to connect the device, identity, authority and execution record.