In this post I’ll explain the CIS controls and how they can be used to start securing an enterprise. When you’re in a medium or big environment and the maturity level of the InfoSec is around zer0, it’s hard to decide where to start in securing your environment. Do we…

Passionate about information security, development and technology in general, I like to share my experience with different technologies. I also love everything about traveling! I love to travel but I also love to listen to other people’s travel stories! I have been working in InfoSec fulltime since 2018, my current…

In recent years, ransomware has become an increasingly prevalent and dangerous cybersecurity threat. These malicious attacks involve encrypting a victim’s data, rendering it inaccessible until a ransom is paid, often in cryptocurrency. …

The landscape of cybersecurity has evolved significantly in recent years. As digital threats grow in complexity and scale, organizations need to adapt and adopt innovative solutions to safeguard their digital assets. One such innovative solution is the use of artificial intelligence (AI) and machine learning, specifically ChatGPT by OpenAI. …

In this post, I’ll explain different strategies that can be use to secure WordPress. If you are reading this, you are probably interested in strategies to secure WordPress as much as possible. You can start by reading the following 2 posts where I hint at some strategies which I’ll mention…

This post is a follow up of the post SIEM 102 — Detect Windows bruteforce where I explained how to create a detection Use Case to detect a Windows bruteforce. In this post I will explain how we can enhance the original detection logic by having a lower False Positive…

I have posted a few articles about SIEMs and I have all done them using Logz.io for my examples. I recently switched to Humio and transferred all the logs and automations I have. In this post I explain why I did this transfer. Here are the posts I did using…

Log4j is a library used by many systems around the world. The Log4j vulnerability, named Log4Shell, is hard to detect because it can be used directly or indirectly in systems you’re not even aware you have. According to Jen Easterly, the U.S …

I have been asked a few times over the years for a good reading list of cybersecurity books and references to get to know more on the different aspects of the Information Security field. I decided to document this list here so it can be used by a broader public…