When the attack vector is a person

Security spending hardened everything except the one decision point that still has to be made by a person, in the moment, with no script to check against.

Read →

New pieces are published as the work warrants, not on a schedule. If a question keeps surfacing in delivery, it tends to end up here.