● SYSTEM ONLINE Friday August 21, 2026 00:00:00.00
// LOG INTERCEPT: "The Illusion of Coverage Many still confuse vulnerability scanning with penetration testing.They sound similar. They..."// LOG INTERCEPT: "Running in Circles You are lost in a security rabbit hole, and you are not..."// LOG INTERCEPT: "it does but only if it is originated from a intelligent programmer. AI is as..."// LOG INTERCEPT: "Most management failures come back to one thing: the manager does not know what resources..."// LOG INTERCEPT: "Articles will be revealing in many aspect of information security and information technology in general,..."

Category: IT Management

2021.09.12 ID: 472

Security solution which acts like traditional painkiller

most security solutions are like traditional painkillers, we certainly feel better after talking them, but the root cause of pain remains intact and unresolved! as long as we do not address root cause of security incidents and vulnerabilities, we will be feeling better from short-term pain relief of “Security Solutions” and then suffering again soon […]

[ READ TRANSMISSION → ]
2021.07.04 ID: 476

zero-trust: reselling old under a different name

the market has been acting as a reseller since late 90’s. we simply resell an old solution under a different shiny name again and again. one of the best examples is zero trust. with all noises around this concept, poor desperate companies waiting to resolve their security issues, or perhaps thirsty budgets waiting to find […]

[ READ TRANSMISSION → ]
2021.06.21 ID: 442

Does AI help us in security operations?

it does but only if it is originated from a intelligent programmer. AI is as smart as the people who did its modeling. an artificial intelligence cannot be more intelligent than its origination. presuming AI will be helping us securing cyberspace is like presuming we will have a accurate Accounting system or flawless GL just […]

[ READ TRANSMISSION → ]
2021.03.04 ID: 478

*DR

security community has been certainly obsessed with creating a new acronym every day instead of focusing on techniques and enhancing what is already there. basically we do not even try to enhance any thing, we just need to understand definitions and satisfy what has already been stated. XDR is one of those things now particularly […]

[ READ TRANSMISSION → ]
2021.02.12 ID: 458

what is information security management?

information security management is almost similar to every other thing that is Subject to Management, or requires management, and I am not going to explain why we need a management function in a system to make sure system is running and functioning as expected, at least not in this article. by similarity, I mean there […]

[ READ TRANSMISSION → ]
2021.01.03 ID: 435

having something vs doing something

There is a difference between knowing the path and walking the path, right? just because I have something, does not mean I know something, or I do something. just because there are technologies, software or tools for a thing, let’s say GDPR compliance metrics, patch management, ITIL platforms, vulnerability scanning, application security testing…and so on, […]

[ READ TRANSMISSION → ]
2020.01.05 ID: 409

Is EFS secure?

I have seen many official statements about EFS being so insecure and we should not use it blah blah…and that is so surprising for me something from professional sources hearing a unprofessional statement, or better say, inaccurate assumption about one of the simplest and effective ways towards cryptographic practices!  Assuming you know what Encrypting File […]

[ READ TRANSMISSION → ]
2019.12.22 ID: 663

Management Without Understanding Is Not Management

The same problem, only louder Looks like nothing has changed. The same leadership failures I talked about years ago are still here, only more polished, more decorated, and more destructive. Companies keep pretending they have “leadership,” but what they really have is a chain of people giving deadlines without understanding the work behind them. The […]

[ READ TRANSMISSION → ]
2019.11.05 ID: 422

The Main Source of Cyber Threat Intelligence

Which firm, company or solution can have the most comprehensive source of threat intelligence? The question should come to your mind when you are shopping for this security matter for any reason. Sources can have different type of data and then convert it to useful information via either active or passive mechanisms to gather intelligence, […]

[ READ TRANSMISSION → ]
2019.09.06 ID: 381

Is Whitelisting a Good Security Practice?

Whitelisting has been for sure a relatively standard and sometimes as a hardening security measure but it depends how we implement and maintain it and where it is initially enforced.  Whitelisting could be against you if setup at the wrong spot or with inadequate supportive elements. I highly recommend whitelisting behavior rather than whitelisting elements […]

[ READ TRANSMISSION → ]
2019.08.02 ID: 358

Monitoring: The Forgotten Discipline

The Myth of “Proactive” Every company claims to be proactive. They buy dashboards, automate alerts, and call it visibility. But visibility without interpretation is just noise. And noise is the enemy of monitoring. These days, the market is full of tools that promise prediction. None deliver it. They only record symptoms faster. What You Actually […]

[ READ TRANSMISSION → ]
2019.07.04 ID: 370

No Silver Bullet in Computer Security

There is no silver bullet in any aspect of information security. All the answers like EDR, MFA, SIEM… might get you in a better or worse security posture, it all depends to how you implement and manage but none of them are silver bullet in their area (malware protection, authentication, monitoring…). It is all about […]

[ READ TRANSMISSION → ]