by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Dec 31st, 2021
It is New Year´s Eve again. The champagne is cooling, the family is getting ready and the security architect is, as tradition demands, writing a blog post. What a year. It started with me ranting about compliance and ended with half the world searching their servers for Log4j. In between there was more ransomware than […]
Posted in Security Architecture, Technology on Dec 14th, 2021
This week the world found out about a vulnerability in Log4j, a logging library used in a huge number of Java applications. It can be exploited remotely by simply getting the application to log a specific text string. The attackers started scanning for it within hours. The first question every customer asked was: Where do […]
Posted in Security Architecture, Technology on Dec 11th, 2021
Following my previous post, let me go a bit further on the technical side of seeing the whole environment. Most IT organisations are split by technology: servers, clients, network, cloud, applications. Security has often followed the same split. One team for endpoint protection, one for the firewalls, one for identity, one for the SIEM. Each […]