Putting Numbers on Fuzzy Risks: The FAIR Approach
How to transform vague security risk assessments into quantifiable values you can use for business decisions using Factor Analysis of Information Risk (FAIR)
Blog
All my latest posts and articles
What Verizon's Latest Hacker Report Tells Us (And What to Do About It)
A breakdown of the key findings from Verizon's DBIR 2025 report, including vulnerability exploitation trends, ransomware developments, human factors, third-party risks, and AI security considerations.
Single Point of Failure - Lessons from the CVE Funding Scare
The recent CVE funding crisis reveals the risks of relying on a single vulnerability database. Get more information about why organizations need diverse intelligence sources and better internal risk assessment to strengthen security posture.
rprobe Web Reconnaissance Security Tools TLS Analysis Content Analysis Web Security Screenshots Reporting Tool Development DevOps
Thinking Through rprobe v0.8.0
Reflecting on the new features in my tool rprobe v0.8.0, including enhanced reporting, content analysis, screenshots, and TLS security checks
How C++23 Makes constexpr More Practical (and Why You Should Care)
C++23 enhances constexpr by making it work with more types and providing better compiler feedback. Learn how to leverage compile-time evaluation for cleaner, faster, and more reliable code.
Showing 1-5 of 34 posts
• Page 1 of 7