TIL there’s a ‘strict’ mode for Microsoft’s Authenticode signature verification. It’s off by default and is actively being exploited. Turning it on has the side effect of rendering some executables as untrusted. Fun choice.

FTC is threatening fines if you don’t remediate your Log4J vulns.

An Intensive Introduction to Cryptography course by Boaz Barak: intensecrypto.org/public/index.h…

Checkout my latest blogpost on #leadership which is also a special tribute to Steve Jobs: linkedin.com/pulse/cybernet…

Great news! A new version of D3FEND is now available at d3fend.mitre.org. D3FEND enables other cyber professionals to tailor defenses against specific cyber threats and reduce a system's potential attack surface. Learn more about D3FEND here: nsa.gov/Press-Room/Pre…

“Whether in combat or in day-to-day life, we encounter situations that call for us to assume a reasonable amount of risk to achieve our goals, and if we try to make ourselves "bulletproof" we may ultimately collapse under the weight of our gear.” - General Stanley McChrystal

The person who talks the most is the most likely to become the leader. Data: regardless of intelligence and expertise, groups elevate those who command the most airtime. It's time to stop rewarding people for dominating the discussion, and start valuing quality over quantity.

Leaders who refuse to hear criticism choose not to learn. The higher you climb, the more people hesitate to challenge you. Silencing dissent is a step toward becoming a dictator. A culture of voice begins with admitting gaps in your knowledge and rewarding those who speak up.

I run a series at PayPal India 🇮🇳 called #BeAGuruToGuru where many generous colleagues donate time from their calendar to educate me about all the stuff I should know, but unfortunately don’t.

Where does one find good "long-form" (>30 mins, say) YouTube videos? We have lots of useful mechanisms for discovering good books, but what about videos? (I find that the YouTube recommender gets stuck in gravity wells.)

For those that either don't know where to start in detection engineering/research I would like to share some tools/projects that have helped me over the time of my career. (If I miss some and people would like to add, please do so :) )

The FBI has released its 2021 Internet Crime Report. With adjusted losses of ~$49.2 million, #ransomware is not among the top 6 threats in terms of its cost. For comparison, romance scams caused >$950 million in losses. Unfortunately .... 1/2 fbi.gov/news/pressrel/…

We can also ask the inverse. If InfoSec spending were halved, would breaches and impact double? I think no as well. In fact, I think we’d see very little change.

Whispering Buildings and Things That Listen to Us in the Night - Marin Ivezic - we must recognize the complex issues surrounding the lifecycle of smart city data, especially when these data are aggregated or open to abuse or malicious exposure ivezic.medium.com/whispering-bui…

For the last year, a 9-person team from Trail of Bits has deeply studied the security of blockchains for DARPA. Today, our analysis and tools are public: blog.trailofbits.com/2022/06/21/are…

Are you looking for a platform to improve #cybersecurity skills? Join Indo-Dutch Cyber Security School #IDCSS22 a platform organized by a multitude of Dutch & Indian org. for young professionals interested to learn cybersecurity skills. ➡️Register for free bit.ly/3UuxBmd

Attractiveness Bias in the Legal System thelawproject.com.au/insights/attra…

🚀 Get ready to be blown away as we present Phoram Mehta (Phoram Mehta), an esteemed speaker gracing our CXO Panel! 💼 Holding the esteemed position of CISO and Senior Director, APAC at PayPal . He boasts an impressive 20+ years of experience in the cyber security industry. 👾

Some of my favorite Naval ideas: 1. If you don't know yet what you should work on, the most important thing is to figure it out. 2. Books make for great friends, because the best thinkers of the last few thousand years tell you their nuggets of wisdom. 3. You will get rich

#CNBCTV18GLS | Who Owns The Future Of Money? Ritu Singh in conversation with Amitabh Malhotra - Vice Chairman, Capital Markets & Advisory, HSBC India, Dilip Asbe 🇮🇳, MD & CEO, National Payments Corporation of India (NPCI), Phoram Mehta (Phoram Mehta), VP & Head, International Cyber