Gary P Shewan

Sign in Subscribe

Security

Wild Navy read

This is a wild read. How Navy chiefs conspired to get themselves illegal warship Wi-FiA scathing Navy investigation reveals how USS Manchester’s enlisted leaders endangered their ship with an unauthorized Starlink Wi-Fi setup.Navy TimesDiana Correll You can have ALL the security infrastructure, access management, policies, logging and monitoring

RIP the cow

Ever had to explain to an SME Management team that they can be targeted by ransomware? Heard the objection that they’re too small to be targeted? Most of the focus is on big companies and multimillion demands after all They targeted a Swiss farmer for a $10k demand...a

Crowdstrike RCA is out

In incident response, security and GRC I’ve often asked the question “How do we train people without the pain?”. There’s no better teacher than experience. But sometimes that comes with trials and tribulations. The longest time I spent managing an incident was 27hrs straight. The dark hours were

Check the superusers

When someone with any kind of authority or access leaves an organisation, it should trigger a review of accounts. Execs, System Owners and Super Users. You should be doing that at least once a year anyway. But also asap when someone like that leaves. To justify this in the past

Delta CEO speaks

I don’t like watching video, I prefer reading. But somebody recommended watching this. Delta Airlines CEO Ed Bastian talking about Microsoft and CrowdStrike. Yes, the commentary has been done to death at this stage. But everybody in Technology should listen to this. This is a MAJOR customer who’s

Ferrari deepfake scammer

I’ve posted about this kind of thing before, but it’s really interesting as it’s happening more and more. You can’t buy a solution to prevent this. It’s about people and process: Ferrari exec foils deepfake attempt by asking the scammer a question only CEO Benedetto

ICO report on Electoral Commission breach

Sometimes I like to share these kinds of things as they’re good to learn lessons. The ICO has released their report on the breach of the Electoral Commission. Cyber-attack on UK’s electoral registers revealedThe Electoral Commission warns the public to be vigilant for unauthorised use of their personal