Hafnium and Exchange: what proves recovery after patching?
An installed patch and an available service answer different questions. A review must connect the update, investigation and the conditions for returning to operation.
Blog
Praktyczne poradniki o pentestach, badaniu podatności i narzędziach bezpieczeństwa opartych na AI.
Artykuły są publikowane po angielsku i portugalsku.
Artykuły
150 wpisów
What does an attack cost? The decision depends on the calculation
National figures attract attention, but a budget decision needs its own units, period and evidence. Build a calculation that another team can review.
AI in incident response: which actions should be automated?
Faster blocking helps only when the target and decision are correct. A practical approach to approving response automation with verifiable limits.
AI code rewrites: how to evaluate performance and security controls
A fast benchmark does not demonstrate that an application preserved its access rules. Learn how to assess a migration developed with AI assistance.
Trump Mobile breach allegations: investigating third-party access
A public allegation calls for investigation with accountable owners and evidence. The Trump Mobile case raises questions about company and vendor access boundaries.
Hiring also defines the perimeter: reviewing identities and remote access
Businesses need to connect recruitment, device delivery, authorization and offboarding. This assessment proposal uses evidence while protecting legitimate remote work.
When an authorized account opens too many doors: the Danish CPR lesson
Beyond passwords, businesses need to verify what an authorized account can query, export and continue accessing after its permissions are revoked.
Before the first signature: reviewing trust in security hardware
Buying a security device should remain verifiable after delivery. An original assessment of inventory, vendors, custody and responses to suspected tampering.
OpenAI and insider threats: what the recorder case teaches businesses
Understand the allegation involving a recorder at OpenAI and explore a checklist to reduce insider threats, protect meetings and review access to data and AI.