↓Skip to main content

Post

“Independent cybersecurity commentary. No fluff. No spin. Just signal.”

2022

How to Identify Attack Surface that Must be Addressed

8 November 2022·Updated: 1 November 2025·2336 words·11 mins

by: Juhani Eronen

How can you identify threats to network security through attack surface assessments and prioritise the findings to fix the discovered issues.

Integrity Checking - an Integral Part of Cyber Security

12 July 2022·Updated: 29 October 2025·2335 words·11 mins

by: Tomi Koski and Joona Hoikkala

A case study in responsible vulnerability disclosure for a man in the middle attack in FreshService inventory management software.

Further Examination into External Attack Surface

28 June 2022·Updated: 1 November 2025·2901 words·14 mins

by: Juhani Eronen

Getting from assets to exposure, or why identifying critical attack surface exposed by your assets might not be that straightforward after all.

Practical Methods for Assessing Your External Attack Surface

22 March 2022·Updated: 1 November 2025·2309 words·11 mins

by: Juhani Eronen

The siege of Château Gaillard between September 1203 and March 1204 is a good example of determined attackers exploiting a weakness in the defenders' threat model. As the story has it, a French soldier clambered up the latrine chute and let in his compatriots to take over the castle. Photo (c) Lari Huttunen. — The siege of Château Gaillard between September 1203 and March 1204 is a good example of determined attackers exploiting a weakness in the defenders’ threat model. As the story has it, a French soldier clambered up the latrine chute and let in his compatriots to take over the castle.

←
1
2