by Jesper Kråkhede, Sweden
Posted in Methodology, Security Architecture, Technology on Dec 31st, 2023
New Year´s Eve again, and a year since I turned 50 on a call with a municipality that couldn´t afford help. That day set the tone for my whole year of writing: resources, and how the lack of them shapes our security. Three events stood out for me in 2023. In the spring, a supply […]
Posted in Business, Security Architecture on Dec 23rd, 2023
A final business post for 2023, and a topic I come back to every year: the cost of not patching. This year was full of examples. A file transfer product exploited on a massive scale in early summer, with hundreds of organisations losing data, many of them without even knowing they used the product through […]
Posted in Security Architecture, Technology on Dec 7th, 2023
Every year the time between a vulnerability being published and being exploited gets shorter. For the most critical ones on internet facing systems, it is now a matter of days, sometimes hours. Most organisations still patch in monthly cycles, if that. How do we close the gap? Know what you have. You can´t patch what […]