A look at the common frameworks and standards that shape Information Security programs. — Five years ago I was a junior, going on senior, in college, and had just landed my first job in the tech field. I started as an intern on a Windows engineering team and quickly became involved in some of the security initiatives that were in progress: server baselining, the…

SecOps, Incident Response, Vulnerability Management, Risk Analysis…where do I start? — The information security industry is very large and there are many different career paths to be considered. Googling “jobs in information security” likely results in something like this:

Reflecting on the CISSP exam and the excitement two years later when I officially became certified. — I took the CISSP exam back in November of 2019, so you can say it’s been quite a long journey. When I first passed the exam, I knew I was going to have to wait at least a year and a half before I could apply for endorsement and receive…

An analysis of the gender gap in cybersecurity and tech careers alike. — The fact that there are so few women in the cybersecurity industry isn’t news to anyone. This has been an issue for years and years but has become more of a popular topic in parallel with the rise in popularity of the profession. One would think that as cybersecurity becomes…

Dark Roast Intelligence | February 1, 2023 — Welcome to this week’s edition of Roast Roast Intelligence. In this article, you’ll find an overview of a recent malware campaign, Album Stealer, targeting Facebook users, a warning issued by CISA (Cybersecurity and Infrastructure Security Agency), and a few vulnerabilities that are trending due to recently seen exploits in the…

The Importance of CSPM & How to Implement It Within Your Organization. — This article was originally published on Built In. With the continued adoption of the cloud, cloud security has become quite the buzzword in the technology industry. Although information and cybersecurity concepts remain the same, new threats arise when companies migrate their technology to cloud platforms. The seemingly endless possibilities and…

Dark Roast Intelligence | December 18, 2022 — Welcome to this week’s edition of Roast Roast Intelligence. In this article, you’ll find an overview of two recent malware campaigns and two zero-day vulnerabilities that were hot topics last week. Formbook Malware is Still Here Formbook malware is a malware-as-a-service (MaaS) offering that’s been around since 2016, but it’s not one we hear of…

Dark Roast Intelligence | November 28, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find overviews of a recent cyberattack on a sports betting organization, how threat actors are using a Windows zero-day vulnerability to deliver Qbot malware, and the latest vulnerability in Google Chrome. DraftKings Falls Victim to Credential Stuffing Attack On November 19th, many DraftKings customers…

Dark Roast Intelligence | November 21, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find summaries of recent cyber events, overviews of trending malware variants and vulnerabilities, and key takeaways for those who wish to action on this information within their organizations. Amazon Relational Database: Sensitive Data Exposure On November 16, 2022, security researchers at Mitiga, a…