Implementing ISO 27001:2022 Annex A.16 – Information Security Incident Management Implementing ISO 27001:2022 Annex A.15 – Supplier Relationships Understanding ISO 27001:2022 Annex A.14 – System Acquisition, Development, and Maintenance…
NIS2: Perform a risk assessment NIS2: 3.Establish a cybersecurity framework NIS2: 2.Designate a responsible person or team How-To: NIS2 EU Directive Executive summary: NIS2 Directive for the EU members (updated)…
Balancing functionality and privacy concerns in AI-based Endpoint Security solutions Artificial Intelligence vs. Machine Learning Thoughts on AI and Cybersecurity ChatGPT and copywriting ChatGPT and automotive cybersecurity #2/2: TISAX certification…
I received a spam and the guy offered to have my corporate site re-written. He sent me an example of how it be like in a Google Docs document. The text was very artificial, kind of those written by ChatGPT (check my recent blog posts about this: www.sorinmustaca.com). I will write about this too. Original: We […]
This is the 2nd post about Automotive Cybersecurity. Since I am working these days on CSMS (based on ISO ECE 21434 and TISAX), part of my companies consulting offer for automotive I thought maybe I check what ChatGPT things about them. First post was about CSMS and ISO 21434 and this one is about […]
As promised, I played more with ChatGPT and this time I started to dig a bit into cybersecurity for automotive. Since I am working these days on CSMS (based on ISO ECE 21434 and TISAX), part of my companies consulting offer for automotive I thought maybe I check what ChatGPT things about them. Unfortunately, nothing […]
So much hype about ChatGPT these days.. But what does it mean? So, I gave it a try … and I created an account. This is the first post from many about ChatGPT. First thing you see when you go on the page: CapabilitiesRemembers what user said earlier in the conversationAllows user to provide […]
PayPal is sending a lot of emails these days, one of these got me confused. I am sure now it is a valid email, but the multitude of different links in it and the confusing information is making this email very suspicious. Here is a summary of the email: Ihre Meinung ist uns […]
A brief history of software vulnerabilities in vehicles (Update 2023)
Av-Comparatives did a long-term test of security Business Products. The details can be seen here: https://www.av-comparatives.org/tests/business-security-test-august-september-2022-factsheet/ Initially, I wanted to write about this test because I was surprised to see how well Microsoft Defender performed. But then, I started to read the details, even if the full report will only be released in December 2022. […]
(ISC)2 maintains this page https://www.isc2.org/member-counts.aspx# with the counts of all certifications per country. I wrote before about this here https://www.sorinmustaca.com/how-many-certified-secure-software-lifecycle-professionals-are-out-there/, but this was back in 2013 (1.5 years after I became certified) ! Some statistics: As of September 25 2013: 1168 CSSLP Romania 1 Germany 19 As of May 23 2022: 3008 CSSLP […]
If you are tech-savvy it is very probable that you have already a few “smart” devices at home: digital assistant (e.g. Amazon Alexa, Google Nest, Mini etc.) music players (e.g. Sonos, ) lights (e.g. Philips Hue) TV (pretty much all on the market) appliances (e.g. coffee machine, fridge, etc.) (e.g. Jura, Samsung) fire/smoke detectors (e.g. […]
I just sow a post by AV-Comparatives called “AV-Comparatives Explains the Implications of Takeovers in the IT-Security Industry” The entire article is very interesting and it is worth reading. And it is also objective and valid as well! Great job, AV-Comparatives! What made me write this post is the graphic at the end of the […]
