The Verizon Data Breach Investigations Report is out. It's a good read. https://www.verizonenterpris...

There are some neat developer and security events this spring that I'll be speaking at or otherwise...

No, I haven't given up on my OTHER blog series about application vulnerability assessment but an opp...

I'll be doing a live webinar on Application Vulnerability Analysis on February 8 at 2PM EST - 1 mont...

Welcome to the 6th day of the C# Advent! Let's encrypt some malware. That sounds horrible, but in se...

All of this fancy organization and lists are just tools for the goal - making a list of everything t...

We live in a world where applications run the technology that we all use.  There was, once, a t...

Bryant Maddrik at ABC6 interviewed me and Todd Whittaker at Franklin about the plight of the good gu...

Some of you know that I am the curator of the Information Security desk at Wikistrat, a virtual stra...

This  has been quite a year of community. I have been honored to present at a load of user grou...