Whats the difference between these massive botnets gobbling up sizable chunks of the Internet and those found inside the enterprise? Quite a...

It looks as if Symantec has a bit of a problem with Blind SQL Injection. Unu has uncovered the vulnerability lying in one of Symantec's...

Last week I was in Washington DC speaking at the annual OWASP AppSec conference. While there and acquaintance of mine - Dinis Cruz - poste...

It's been an interesting weekend on the "responsible disclosure" front. Reactions and tweet threads from several noted vulnera...

Back from vacation, fully refreshed, and back to the blog (and conference speaking)... This week I'll be in Washington DC for the annual...

So, it looks like the Mozilla folks have taken the initiative to block a couple of (pretty much) now default Microsoft Windows plug-ins that...

This last week has seen quite a bit of public discussion concerning the effect of software piracy on compromise rates, based upon Monday...

Finally, today saw the public release of my latest technical whitepaper. This new whitepaper focuses on the business and techniques of gener...