Aggregator
每周勒索威胁摘要
锦行科技多款产品同时入选广州市2024年度创新产品目录
专题·漏洞治理 | 网络攻防对抗下的漏洞治理探索与实践
微软2024年7月补丁日重点漏洞安全预警
还是看漫画学越权的文章4
报名即将截止!ICANN亚太地区域名系统论坛:域名系统功能和安全特性的演进发展,7月15日与您相约北京!
Weekly Update 408
I get the frustration and anger those working at organisations that have been breached feel, and I've seen it firsthand in my communications with them on so many prior occasions. They're the victim of a criminal act and they're rightly outraged. However... thinking back
2024-08-08 - 16 days of server scans and probes
Akamai?s Perspective on July?s Patch Tuesday 2024
Application Security report: 2024 update
Euro 2024’s impact on Internet traffic: a closer look at finalists Spain and England
Eldorado: A New Ransomware Targeting ESXi VMs
大模型两则:尚不存在的AI手机和大模型产品化的两条路
破局与重塑:一家头部券商的研发精益效能之路
6 Tips for a Successful Security Vendor Consolidation
Blue Team Diaries E015: Tony Wilson
In this month’s episode, host Peter Manev meets with Tony Wilson, IT Security Director at Wolters Kluwer to discuss his current projects and experience with advanced adversaries and share advice for prospective Blue Team members.
Tony kicks the episode off with his recent experience setting up and maintaining a FedRAMP environment. He highlights the challenges of FedRAMP authorization that arise from controls needed and the additional steps that must be taken for each control.
Tony also reflects on an ongoing Blue Team activity he participated in with a large retail organization and shares a fascinating example of a credential-stuffing attack, where a highly organized adversary routinely changed tactics to avoid capture.
Peter and Tony close out the episode with some advice for Blue Team hopefuls or SOC team members early in their careers: embrace the chaos, don’t shy away from the hard work, and above all stay curious.
This interview provides great insight into what young cybersecurity professionals could expect to see out in the field, and Tony provides wisdom that can only be gained through years of experience.
Biography
Tony Wilson is an IT Security Director at Wolters Kluwer. He is responsible for supporting the CISO and Divisional CIO/CTOs in developing, aligning, and implementing the global information security strategy. As one of the lead incident handlers during the infamous Target Corporation data breach of 2013 and its aftermath, he has an acute appreciation for the value of sound information security. He holds a Bachelors degree in MIS and has obtained over a dozen certifications including CISSP, CISM, and GCIH. He has also taught a cybersecurity bootcamp at the University of Minnesota and maintains mentor relationships with his former students.
Tony was born and raised in Saint Paul, Minnesota, and will debate anyone over its superiority over Minneapolis. He’s closer to 50 than 30, but still enjoys to break a sweat by staying active and lifting weights. Other “hobbies” include blockchain investment, serverless architecture engineering, and cocktail experimentation.
Important Links:
- LinkedIn: https://www.linkedin.com/in/tony-wilson-58b3b89/