Recent Posts

When multi-factor will not save you

When multi-factor will not save you

There is a lot of discussion lately about multi-factor authentication and how this will upgrade everyone's security. Indeed, it is an improvement and it was about time we start becoming more conscious about the security issues related to authentication. As usually though, these discussions generated a lot of confusing and "why it didn't work" moments when we see cases such as Reddit's hack in August of 2018.

Preparing for CRISC

Preparing for CRISC

I enjoy learning new things. Everyone who knows me can attest to that. I also have fun taking tests and quizzes. So it's not a surprise that I always try to find ways to combine these two activities.

I have pursued one academic degree per decade (approximately). I got my BSc in 1993, my MSc in 2000 and my MBA in 2007. Maybe it's time for another academic degree, but it's getting more and more difficult due to time constraints and, of course, the fact that I'm getting old. Not to mention the cost.

Don't you wanna cry?

Don't you wanna cry?

It looks like we're in the middle of one of the worse attacks in the last decade. The WannaCry attack has already crippled more than 230.000 computers, in more than 100 countries.
We already saw big organizations like Telefonica and the NHS, like Renault and Deutsche Bahn having their operations impacted. And it's not over yet. But...

Bsides Hannover 2017

Bsides Hannover 2017

In March 2017 I visited Hannover in Germany for the Security BSides conference. My first Bsides. I had the opportunity to present one of my favourite subjects, how security can help business grow. The venue was nice, and the presentations were very interesting and some of them eye-opening. Overall I really enjoyed the conference; the setup and organisation was very good and all the participants were friendly. That helped having interesting discussions; always useful if you are eager to learn more things and see other peoples' perspectives.

Mobile Application Infrastructure Security

Mobile Application Infrastructure Security

In October of 2016 I travelled to Dublin in Ireland, to present at the two-day event organized by (ISC)2. I took advantage of the pre-congress workshops which were eye - opening in many aspects. The event, (ISC2) Security Congress EMEA 2016, titled "Advancing Security Leaders" took place at the Croke Park Stadium and it was a huge success.