Ninth House absolutely blew me away. I have read Leigh Bardugo before (The Grisha Trilogy) — Six of Crows is still on my TBR — but this book was entirely different from “The Grishaverse.” When comparing The Grisha Series against this first book in The Alex Stern Series, I would compare the Grisha series to a child perceiving the fantasy of what magic might be, which developed over time into Galaxy Stern, a real world, hardened survivor, whose very being and situation pulled her into a world she never expected to be in; a world where she eventually blossomed into a darkly-enlightened real-world practitioner of the occult — but not to meet her own ends — to act as one of the shepherds who oversees the other practitioners and holds them accountable in order to keep the magic in order and to keep the ritualists in check.Read More
This may sound like a boring article to many, but it is a basic overview of some very important information that is crucial to include in the repertoire of knowledge for all IT and security professionals.
In this article, we will be going over the high points for the following industry standards: PCI DSS, ISO 27001/27002, HIPAA, and the NIST/DoD frameworks, and adding some comments along the way on the relationships and effects that these policies and frameworks have on network architecture, as well as what possible implications they could have on architectural solutions. Most of the architectural solutions provided come from an Amazon Web Services perspective, but the same basic principles apply, regardless of which cloud service provider (CSP) you use, or even if your infrastructure is hosted on-premises.Read More
With the new wave of ransomware attacks we have seen at the beginning of this week, especially targeted toward Spain, we can see that mostly Windows attack vectors are mostly being utilized, in what appears to be a variant of the Bitpaymer family, related to the Dridex group of malware.
But what does the future hold for attacks such as these? When will we see the attack vector change drastically to target something that your company is most-likely unprepared for? We are seeing bad actors targeting low-hanging fruit on Windows, while the world of end-users are going mobile. If iOS development is part of your enterprise, then whether you like it or not, MacOS literally has to be an integral part of your infrastructure…because XCode. Is it possible that this is something that has gone unnoticed in the threat detection landscape, or is the perception of the threat level just perceived to be so low that we haven’t yet come up with a good way to protect against it?Read More
I promised a follow-up review to This Mortal Coil for the sequel, This Cruel Design by Emily Suvada. I also promised to follow up on the technological themes posed by this series, and how in the very near future, we could easily see this work of fiction merge more into an account of fictional events based on non-fiction technology. Personally, I think this series to be slightly ahead of its time [in a good way], as to show readers what kind of scenarios could play out in our future. For readers who are not tech-savvy, this would probably be a 3-star read. For me, knowing about the underlying technology and just how realistic this book is, boosts that up to a 5-star read. Emily Suvada knocked it out of the park with this one, which was equally as good (if not better) than This Mortal Coil.Read More
HSTS (HTTP Strict Transport Security) is a feature supported by all major browsers, and it’s a method for websites to declare that they should ONLY be accessed securely over HTTPS and never over an unencrypted HTTP connection. If a site has an HSTS policy, browsers will refuse all insecure connections to that site AND prevent users from accepting insecure SSL certificates. This, however, can come with certain risks to availability if not implemented correctly, as you will read later…Read More