All articles/Author
David Booth
Cutting vulnerability noise: using AI and public data to demote CVEs that don't matter
A container image scan finishes and hands back a few hundred findings. A dozen are critical. Most of the rest are base image packages with a CVE ID, a CVSS score, and no patched version anywhere in the world. The team…
#vulnerability-management#cve#patch-management#devsecops#osv
Ransomware early warning: watching leak sites for your name, your clients and your suppliers
On 13 August the Clop ransomware group posted claims naming Shell and Philips, and both companies confirmed they had experienced a security incident once the claims were reported (NL Times). Philips called it an…
#ransomware#threat-intelligence#incident-response#supply-chain#notifiable-data-breaches
An LLM-triaged SIEM: reviewing thousands of security events a day with a small team
Most health providers we talk to have the same shape of problem. Log sources everywhere, a security budget that funds part of one person's week, and an alert console nobody has opened since the fortnight after it was…
Practical AI in Cyber Security: the series
This series is about how a small senior team covers security operations work that normally needs a much bigger roster. Everything we write about comes out of a platform we built and still run: more than 100 scheduled…
#cyber-security#llm#security-operations#essential-eight#monitoring
Using Trello to manage tasks and issues in Software Projects
We use Trello in our software projects to help us better manage tasks and issues as well as to increase efficiency through better collaboration between the developers, BA, QA/testers and Project Managers. I'm going to…
#agile#project-management#scrum#trello
in It Support
Cloud is changing the IT Professional's Skills
The shift from "traditional" IT to cloud IT is well and truly underway. Many public, private organisations and government agencies are moving a part or all of their IT systems into the cloud. The move to the cloud has…
#cloud-computing#devops#employment#skills
in It Support