Being an InfoSec Professional / Cybersecurity

The Engineers get busy: the Spectre/Meltdown patch roller coaster

The aspect of the latest Spectre/Meltdown vulnerability that interests me is not how wide-spread it might be.  Not that it is down below the OS level.  And while I am thankful I cannot find reports of it being exploited in the wild, not even that is what really interests me (though I am of course … Continue reading

Being an InfoSec Professional / Cybersecurity

A change is gonna come

This will start with the first law of thermodynamics and end up with change management.  All the while, we will keep information security in focus. So, simply put, the first law of thermodynamics says that the amount of energy in a closed system cannot be increased or decreased.   If we substitute “effectiveness of security controls” … Continue reading