When I look back at the history of commercial consultancy-based pentesting I see two distinct forks in the road. The first happened around 2...

Just a quick note to say that I've got a couple of open security jobs going for Senior Research Analysts over at Damballa . I'm look...

It's been a ridiculous week reading the papers about the pitched battle that North Korea has kicked off against the USA and South Korea....

There's news of a new 0-day exploit for Microsoft's MSVidCtl.DLL (DirectShow) doing the rounds. The exploit code is publicly availab...

So, how can you use a stealthy botnet and milk your victims for all their worth with the least likelihood of being detected? I've alread...

I've been watching with interest this "twitter train" phenomenon. Scam of the week... In a nutshell, a number of websites have...

The WebAppSec world has been awash with conflict following Bruce Schneier's discussion/comments that the masking of password entries on ...

One of the few talks I was actually looking forward to seeing at Blackhat this year has just been canned due to corporate pressures. Barnaby...