Geek-Guy.com

Tag: current

Weekly Update 506

I’m finding it quite fascinating to watch the current spate of ShinyHunters breaches and dumps. There’s the obvious criminality of it all, but then there’s also the response from organisations (or lack thereof, as it relates to disclosure to victims), the appearance and disappearance of victims on their dark web site, the speculation around payments…

Automating post-quantum cryptography readiness using AWS Config

Migrating your TLS endpoints to Post-quantum cryptography (PQC) starts with understanding your current TLS endpoint inventory and posture. This post introduces the PQC Readiness Scanner — an automated tool that inventories your Application Load Balancer (ALB), Network Load Balancer (NLB), and Amazon API Gateway endpoints and continuously monitors their TLS configurations for PQC readiness. The…

Information security as a factor in the sustainability of IT systems

GUEST OPINION: In the current technological landscape, the term “sustainability” has moved beyond its traditional environmental roots to become a cornerstone of digital infrastructure management. For modern enterprises, particularly those operating in high-volume, high-risk sectors like iGaming, FinTech, and e-commerce, the sustainability of an IT system is defined by its ability to maintain operational integrity,…

Report: Only 34% of Security Talent Plan to Stay in Their Roles

Only 34% of cybersecurity professionals plan to stay in their current roles, according to IANS and Artico Search’s recently released 2026 Cybersecurity Talent Report. The report outlines key insights on compensation, roles, and retention based on a survey of more than 500 security professionals. CISOs must rethink how to retain talent The report highlights declining…

Hungarian government email passwords exposed ahead of election

When voters in the forthcoming Hungarian election assess the current government, its record on internet security will not be one of its proudest achievements. An analysis by open source investigation organization Bellingcat has revealed that the passwords for almost 800 Hungarian government email accounts are circulating online, many of them associated with national security. These…

Hungarian government email passwords exposed ahead of election

When voters in the forthcoming Hungarian election assess the current government, its record on internet security will not be one of its proudest achievements. An analysis by open source investigation organization Bellingcat has revealed that the passwords for almost 800 Hungarian government email accounts are circulating online, many of them associated with national security. These…

Gottumukkala out, Andersen in as acting CISA director

Madhu Gottumukkala is out as acting director of the Cybersecurity and Infrastructure Security Agency, with current agency executive director for cybersecurity Nick Andersen replacing him as the interim leader. News of Gottumukkala’s departure breaks one day after CyberScoop reported on widespread dismay with the agency’s performance during the first year of the Trump administration, with…

The hard part of purple teaming starts after detection

In my recent articles for CSO, I’ve talked about the limits of current SOC models and the importance of rehearsal. This time, I want to focus on something that’s becoming increasingly clear: purple teaming has lost its depth. We’ve turned one of the most powerful tools for resilience into a transactional exercise that feels reassuring…