Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
There's a big difference between knowing that an email account has been compromised and knowing what to do in the first thirty minutes. In the second situation, people usually open a lot of tabs, change passwords randomly, then ask in workgroups hoping the pr…
Read article
Business Continuity Plan for Small Organizations — Keeping Going When the Unexpected Comes UpWhen I heard the term Business Continuity Plan…
Information Security Risk Assessment — How to Map Risks Before They Become IncidentsWhen building or maintaining a small system, I'm often …
CIS Controls v8 for Small Organizations — Starting with Security Where it Makes the Most ImpactWhen you hear the term cyber security framew…
Some time ago I was almost tricked. Not because my device is not secure, nor because my password is weak. It all started with one short mes…
I still remember the first time I read the NIST Cybersecurity Framework document several years ago. The number of pages was enough to make …
There are times when I sit in front of the terminal, thinking about the same thing: how do I learn cyber security practically without…
A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." …
Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen…
Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge…
