Implementing ISO 27001:2022 Annex A.18 – Compliance Implementing ISO 27001:2022 Annex A.17 – Information Security Aspects of Business Continuity Management Implementing ISO 27001:2022 Annex A.16 – Information Security Incident Management…
NIS-2: 10 common misconceptions about the regulation NIS2: Perform a risk assessment NIS2: 3.Establish a cybersecurity framework NIS2: 2.Designate a responsible person or team How-To: NIS2 EU Directive Executive summary:…
Balancing functionality and privacy concerns in AI-based Endpoint Security solutions Artificial Intelligence vs. Machine Learning Thoughts on AI and Cybersecurity ChatGPT and copywriting ChatGPT and automotive cybersecurity #2/2: TISAX certification…
I wrote before about Pentesting in the article “What is Pentesting, Vulnerability Scanning, which one do you need?” . If you’re a company having web services of any kind or a kind of backend, you are asking yourself if you should only do pentesting or make things right and do the entire risk assessment and threat […]
Virus Total is a multi-engine malware scanner, an aggregator of security solutions. You can upload a file or provider an URL and it will check it with all available engines. Mostly command line scanner or plain SDKs to use the engine. The AV Industry wants to work with VT because if VT uses an engine, […]
OneDrive’s only advantage in comparison to Dropbox, GDrive and others were: 15 GB of space (OK, Google offers the same, but for all your data, including photos and email) Availability on all types of devices through apps (also non Microsoft) Now, they reduced the space 3 times ! Starting July 27 you get only 5 […]
EMET stands for Enhanced Mitigation Experience Toolkit – and it is a tool that you MUST have installed on your Windows PC. EMET is a utility that helps prevent vulnerabilities in software from being successfully exploited.EMET achieves this goal by using security mitigation technologies. These technologies function as special protections and obstacles that an exploit […]
I wrote a few days ago a post about the The sad status of online advertising, talking about the practices of Forbes which forces the read to disable ad-blockers. Later, in a second post called A new type of fraud: News Scareware, I mentioned Washington Post that is enforcing the email address of the user in order to […]
After posting the article with the ads, I thought that I covered all stupid things that online publications do to force their readers to pay, subscribe or to disable ad blockers. Well, this was not correct… The stupidity goes on… with Washington Post. They request your email address in order to allow you to […]
I will give in this post an example having FORBES.COM as target. I want to emphasize that this is not the only site that behaves like this! If you have an ad blocking plugin active and you visit www.forbes.com you will be promted to disable the ad blocker and you see the picture above. […]
If an App requires some permissions like Access Camera, Access Microphone, does it mean that they can do with these devices of a smartphone whatever they want, whenever they want? Short answer Yes, but it is not so simple Long answer There are rumours, that apps like WhatsApp, Facebook, G+, etc., are using the camera […]
Somebody asked me why do I have in my LinkedIn profile “IT Security Expert” and in my company website www.mustaca.com “Sorin Mustaca Cybersecurity”. In order to answer that, I need to clarify the difference between Cybersecurity and Information Security (infosec). I googled a bit because I don’t have too much time and I did find something […]
I get very often asked about these two concepts and I noticed that there is a lot of unclarity around these topics. At the end, I will tell you my own opinion and give you some advices. Vulnerability scan Also known as Vulnerability Assessment, looks for known vulnerabilities in your systems and reports potential […]
You must be logged in to post a comment.