DotSec’s AOC saves you money!

DotSec’s AOC saves you money! DotSec provides managed SIEM services to customers in a range of industries but as described in cyber security standards such as APRA’s CPS 234 and the Payment Card Industry Data Security Standard (or PCI DSS), cyber-security service providers are increasingly on the hook when it

Read More »

Happy memories of an old hack

The good old (Internet banking Hack) days! So a long time ago (25 years ago actually!) in a research centre not so far away, I helped to write a paper that described an old Internet banking hack, outlined how the authentication systems that were used by browser-based internet banking applications

Read More »

Hey nice business!

It’d be a shame if something happened to it! In the real, physical world, extortion is a real problem and across the world, certain gangs and organisations see extortion as a legitimate way to earn real money, even apparently in the nuclear power industry! [10]  The Internet is of course similar

Read More »

Relax! it’s not my first time!

Oh for heavens sake!  Can we all agree that the Optus event doesn’t really matter?  I mean, it really does matter, of course!  But still, it kinda feels like deja view all over again [1] and I can’t help but think I should relax! It’s not my first time! Once upon

Read More »

Penetration testing over two years

Some penetration testing stats It was the great Gordon Ramsay that said, “I don’t like looking back. I’m always constantly looking forward. I’m not the one to sort of sit and cry over spilt milk. I’m too busy looking for the next cow.”   But still, it can’t hurt to keep

Read More »

Cyber insurance: A risky business

Cyber insurance. A risky business! As the frequency of cyber attacks increases and incident recovery becomes more expensive, it is important for businesses to have cyber insurance to reduce the potential losses associated with such events. In fact, such coverage is something we expect will become mandatory for all kinds

Read More »