eBook: Wi-Fi Security Sample Architectures
The quick reference guide for designing secure enterprise Wi-Fi for internal, IoT, and guests. Excerpt from "Wireless Security Architecture".
Security Uncorked
JJ's Complete Unofficial Guide to InfoSec
Latest posts
The AI Identity Gap Nobody in My CISO Groups Is Solving Yet
Machine identities now outnumber human identities in the enterprise 109 to 1. That was one in a long list of surprising things I recently learned. Here we look at machine IDs, the secret zero conundrum, SPIFFE, and more.
High, Medium, or Low? The Cheat Sheet for Scoring Your Wi-Fi Security
3-minute tour of Wi-Fi security posture (and recommended configs) for the most common case — managed users on managed devices.
FortiBleed: What Security Teams Need to Know (and Why This Story Is Bigger Than Fortinet)
Most stories miss the most critical part of FortiBleed - the firewall wasn't the destination and it wasn't a breach. Attackers are targeting inside the network, capturing creds, exfiltrating data; hitting AD/LDAP, HTTP, FTP, SNMP, Telnet, SNMP, Kerberos, NTLM and more. Your whole infrastructure may be at risk.
Chrome is Silently Installing 4GB AI Model on Your Device without Consent. Here’s how to find it and remove it.
Sometime we cover things on the Packet Protector Podcast News Roundup episodes that need immediate attention. This is one. Chrome has been sneaking a local AI model on systems, possibly since 2024. How to Disable and Remove It Quick option.. See If It’s Installed Now On Mac On Windows Enterprise Centralized Removal Options More info […]
eBook: WiFi Security: Mastering 802.1X, RADIUS, and EAP Authentication
Get under the hood with IEEE 802.1X, the Extensible Authentication Protocol (EAP), and everything you need to know about RADIUS including standard and vendor-specific attributes, configuring policy, and troubleshooting
The First Wi-Fi Training and Certification Mini-Event
Next month, Peter Mackenzie and I are co-hosting the first Wireless Tech Summit, a Wi-Fi training and certification mini-event. The best part? It will be in-person here in North Carolina! Okay, maybe that’s not actually the best part. The best part is probably the concept overall. We wanted to give people access to training and […]
Democratized Security and the Role of Network Admins
I don’t believe there’s a heavy dividing line between networking and security. In fact, I think IT operations is, in fact, a critical part of cybersecurity, which means that every IT professional is also a security professional. Or, they should be. But, organizations often work in silos — sometimes loose constructs on an org chart, […]
How to Handle Rogue APs (Without getting arrested)
One of the primary ways we’ve been handling rogues is in direct violation of the FCC regulations in the United States, and I’m told similarly illegal in other countries. Let’s be honest, you’re all too pretty for prison. So then, here’s how to handle rogues without getting arrested or paying fines. For the purposes of […]
My Return to Techno Security Conference
I have a long history with the Techno Security Conference, thanks to my mentor and friend "Uncle" Jack Wiles. At one point, over 10 years ago, I was the conference's youngest ever keynote speaker. It's with great honor I return again this year to deliver a technical session on Zero Trust.