TL;DR  Introduction   In my previous blog post, I wrote about finding your path into DFIR; how to get started, where to focus your time, and why curiosity and good fundamentals matter more than just chasing every certification.  That is still true, but once you have been in the field for a while, you start to realise that...

TL;DR  Introduction   There is a widely held belief that penetration testing Operational Technology networks is impossible. That simply connecting a laptop to a network will take down everything. That running nmap will take down a factory. That the only safe approach is to not test at all.  This belief is wrong. Or rather, it is a massive […]

TL;DR:  What DORA is, who it affects, and what “good” looks like  If you run a financial services business in the EU, or you provide tech to one, DORA (the Digital Operational Resilience Act) is now part of your world.  DORA (formally Regulation (EU) 2022/2554) is an EU legislation designed to make sure financial services...