A file with an appetising name, a false credential, a DNS that does not answer: none of this protects an asset, and yet it tells you who got in. The story and use of canary tokens, from cartographers to AWS containers.
Read the article →Honeypot, honeynet, honeytoken, deception technology: one continuous line running from Cliff Stoll to dynamic microsegments. Why lying to the attacker remains one of the cheapest countermeasures we have.
Read the article →No software is immune, but almost everything we discover does not concern us. A practical guide to triage: reachability, exposure, real exploitability and the moment when the patch really goes before everything else.
Read the article →