The definitive account of Stuxnet, read here as an operational case study: how attackers crossed an air gap, borrowed trusted credentials, and made a control room see normal.
- Home
- |
- Archives: Technical Controls
August 11, 2023
Fraud rises when budgets tighten. Pressure goes up, headcount comes down, and controls that quietly depended on someone having spare time stop working. This weekend read sets out where exposure concentrates during a downturn and which defenses actually hold: strong internal controls, systems that flag the patterns people miss, a crisis plan written before it is needed, and a culture in which raising an anomaly is not a career risk.
February 23, 2023
Phishing and pretexting work because they target people rather than systems — and the people they target most successfully are the ones with authority to move money or grant access. No amount of security spending closes a gap that opens when someone helpful is asked a plausible question. This piece covers the main forms these attacks take, what they cost, and the defenses that hold up in practice.