Simplify IT
No business is too small to be a target for cybercriminals. Small and medium-sized businesses (SMBs) are attractive prospects for ransomware. They often have limited resources for security management and have outsourced every aspect of IT. It makes little difference whether that outsourcing is very expensive or the cheapest option available. SMBs also hold valuable [ ]
Python code plays a central role in modern computing, yet Python applications are not immune to cybersecurity threats. Consequently, security has become a critical concern for both users and developers alike. But cybersecurity is never black or white. It is all about context. Being precise about definitions is key. A security weakness is not the [ ]
Python plays a central role in modern computing, yet Python applications are not immune to cybersecurity threats. As a result, security has become a critical concern for developers and users alike. When building Python Code Audit, a tool designed to detect weaknesses in Python code, one of my core principles was to create a simpler [ ]
Recently I was at the great FOSS conference T-DOSE to learn new tech things and meet great open-minded people. After my talk about Python Code Audit. I had a very interesting discussion about the Python assert statement with some very smart security friends. But first: if you want to detect the use of Python assert [ ]
Cyber security disasters still happen every day. Being security-aware is crucial, but it is not enough. So never trust, always verify! To make security validation simple, testing applications before use is a must. However, a huge drawback is the difficulty of setting up even a few simple tests. Performing basic security checks before using a [ ]
No business is too small to attract cybercriminals. In fact, small and medium-sized businesses (SMBs) are often more appealing targets for ransomware than large, established enterprises. Limited resources, combined with access to valuable customer data, make them particularly vulnerable. One of the most persistent blind spots is the assumption that security is somehow built in [ ]
Python code plays a central role in modern computing, yet Python applications are not immune to cybersecurity threats. Consequently, security has become a critical concern for both users and developers alike. I advocate for simplifying cybersecurity. However, thinking, writing and talking are not enough. I prefer to get my hands dirty and experiment with many [ ]
While security testing is crucial for protection, identifying security defects in Python-based software requires specialised knowledge. Most security testers lack the in-depth training on Python-specific nuances that is essential for performing effective security evaluations. In today’s digital world, cybersecurity remains a critical concern. This applies equally to the consumption and creation of…
I have worked on delivering large-scale IT systems for more than 25 years. I spent my early years as an engineer, and for the last 20 years, I have worked in various architecture roles, steering development and solving complex issues. But some things never change:Cybersecurity remains a difficult and complex field. It requires expertise across [ ]
Almost all software is under attack today, yet many organisations remain unprepared in their defence. Every day, news emerges of computer systems being breached, frequently through vulnerabilities within the software itself. Most security breaches do not use sophisticated new technology. The vast majority of security incidents are caused by: 1. Human Error: Mistakes by users, [ ]