Here’s exactly how Stairwell helps our customers massively accelerate and automate big portions of their detection and response efforts around the big MOVEit vulnerability. — TL;DR — this is quite literally one of the main use cases we were built to solve. In case you missed it, here’s a quick summary via Mandiant: Zero-Day Vulnerability in MOVEit Transfer Exploited for Data Theft Mandiant has observed wide exploitation of a zero-day vulnerability in the MOVEit Transfer secure managed file transfer software for subsequent data theft…

… and whatever’s next I read through yesterday’s big Microsoft / National Security Agency release on state sponsored actors and after some collaborative brainstorming with Mike Wiacek, Chris St.Myers, …

I am ridiculously excited to announce my appointment as VP of Business Development at Stairwell. Under the visionary leadership of Mike Wiacek, the Stairwell team has created a revolutionary security automation solution that is quite literally redefining how we fundamentally approach detection and response at scale. In my two-decade career…

CyberSecurity 101. There are many like it, but this one is mine. Tony Robinson’s excellent “The Big Blog Post of Information Security Training Materials” and supporting Github is absolutely more comprehensive. Mine is an attempt to provide a linear path to going from 0–60 in Information Security. One of our…

4 simple reasons your security program is probably struggling — I recently crossed 20 years invested in the Information Security industry. That’s a lot of time wearing a white hat, doing my best to fight the good fight, punching miscreants as much as possible trying to protect a number of organizations and generally working to try to make the Internet…