Core Impact
Core Impact is a professional penetration testing framework tool that can operate in both automated and manual modes. It is very expensive, but sets the standard to measure other tools…
August 2026
Federal Cyber-Security
NIST (National Institute of Standards and Technology) has provided Federal Agencies with all the tools they need to get cyber-security done right. But obviously, it’s not being done right yet…
Smart Meter Issues
A smart meter is a digital metering device used to measure public utility electric power consumption. They typically report their information via a wireless link every fifteen minutes or so.…
Misinformation About Hacking an Encrypted Phone
Recent news has the media atwitter with misinformation about hacking phones and encrypted data. Here are some of the basic issues: Encryption Encryption is the process of using a coding…
Encryption Ensures Privacy
Encryption techniques are mathematically designed to be uncrackable, at least in an amount of time that relates to the value of the secret. This means the time and computing resources…
Tips on Preparing a Blue Team Defense in the CCDC
Here are some tips and thoughts on preparing a blue team defense in the CCDC: Preparation Defensive Strategy Handling Business Injects
Cyberwar Defined
War is violent conflict on a large scale, often involving organizations on a national scale. There are many different forms of war and many different levels. We use the terms;…
FISMA Law vs. Home Email Server
Working for a federal agency that has IT functions regulated by public law and running an email server from home to use for agency business seems problematic, but it may…
APT vs. OODA Security Controls
Advanced Persistent Threat (APT) is a kind of attack comes from a team with advanced skills, deep resources, and specific targets. They use advanced tools and techniques that are capable…
Simple Secure Configuration Management
Configuration Management (CM) has some key controls and processes concentrated in the middle of the SDLC where configuration settings and the configuration baseline are recorded, but the entire process has…