SENKI

"Cybercrime is a borderless, multi-billion-dollar enterprise. We cannot defend against it solely by building taller walls around individual networks. Operation Ramz proves that actionable intelligence, combined with trusted public-private partnerships, results in actual arrests & dismantlement.

Peter Neumann said, “Security is a set of end-to-end total-system emergent properties,” and “Strength in Depth is desirable, but we have Weakness in Depth.” He quotes Einstein — “Everything should be made as simple as possible, but no simpler” — and warns that oversimplifying security leads to flaws

Someone was asking me about the evolution of the Protective DNS. So pulled all my notes into Claude and started collecting the history (from my point of view). There is a lot more to write. Many more peers who contribute in this collective effort. I just wish more organizations deployed.

All this talk about "Mythos" and "Vulnpocalypse" can put you at risk - distracted by the hype-cycle. Basic "meaningful cybersecurity conversations" are more important today .... just add the questions on AI.

FAQ - Which Shadowserver Reports list CVEs

One of my cybersecurity peers asked me "which of the multitude of Shadowserver reports have the CVEs listed." I used that question as a way to help them see how they can use LLMs as a learning tool. Check it out.

Many were surprised at the level of collaboration in last week's Kimwolf/Aisuru disruption. This level of operational trust takes time to build. How do you build operation trust in the cybersecurity community? Here are some recommendations to start your team's journey. It is worth the investment - especially when your organization is experiencing a cyber incident.

Many were surprised at the level of collaboration in last week's Kimwolf/Aisuru disruption. This level of operational trust takes time to build. How do you build operation trust in the cybersecurity community? Here are some recommendations to start your team's journey. It is worth the investment - especially when your organization is experiencing a cyber incident.

BEC's Payroll Diversion Fraud Investigation Report: Operational Modalities, Threat Actor Investigation, and Defensive Architectures

CVE-2025-40778: Uncovering the Real DNS Vulnerability Risks

All networks need to be worried about threats from state sponsored threat actors. But first, make sure your architecture is digitally safe, your processes assume "zero vendor trust," you expect threat actors to get inside, and you have the operational tools to battle active threats. "Blame the Vendor" is a distraction. Find vendors who work with you, not against you. There are vendors in the US are work hard to not collaborate to safeguard their equipment.

"Blame the Vendor" Distractions

Threat Researchers find critical vulnerabilities that the worlds needs to know, mitigate, and resolve. Collaborate and leverage the Shadowserver Foundation's infrastructure and community to get the word out to thousands ... all through a trusted non-profit cybersecurity organization focused on a safer Internet.

Yes, Publish Your Threat Model!

You missed it! Threat Actors simple paths into your network.

Using your Printer Ports to Attack?

Is ASEAN Ready for Serious Cybersecurity?