Credit: Joe Basirico
This month I’ve been thinking a lot about how security engineering teams collaborate effectively with development teams. In my experience, it comes down to these three phases: Awareness, Enablement, and Enforcement. This month I’ll be dedicating an article to each, but as a subscriber to this newsletter, I want to give you a sneak peek. The focus of these articles will be on the critically important area of application security, focused on the roles involved in building software: developers (DevOps), testers, and architects.
Read more >>
Credit: Joe Basirico
It’s hard to believe, but we’ve been writing these newsletters for more than a year now! Our last newsletter had an amazing open rate (about 50%) in our last newsletter, 2-4 times the national average! When we started this newsletter and blog our goal was to give you the best security insights out there without a hint of sales or marketing spin. No BS, just good information to help you be successful. We want to deliver this newsletter to people who really want to read it, I couldn’t be happier that you’ve joined us and continue to participate.
Read more >>
Credit: Joe Basirico
Instead of a full fledged long-form article or two I decided to write a couple of mini-articles, these are small ideas that I’ve been kicking around for a while, but haven’t made into full fledged articles yet. I’ve included these here and will publish them on the blog as well. Of course, I’ve also included lots of security articles from around the web as usual. “If you could wave a magic wand and do anything to reduce vulnerabilities, what would you do?”ReThink Mini-Articles
Reducing vulnerability classes to near zero through secure defaults and good choices.
Read more >>
Credit: Joe Basirico
Since COVID started I’ve been having a hard time keeping track of time. It feels like it’s been somewhere between 2 weeks and 2 years since this all began. After a bit of a hiatus I’m excited to start back on a regular cadence, sending out the ReThink Security Newsletter each month. Barring another global catastrophe, I’m happy to focus on bringing you security insights and interesting security related news.
Read more >>
Credit: Joe Basirico
I’m excited to announce that we’ve launched a twitter account. If you’re on twitter, please follow us: @ReThinkSec . I’d like to use twitter to send out interesting articles and insights that may not make it into the newsletter or for topics that are more timely and can’t wait a month to get out. It’s also a good way for you to send interesting topics to me, if there’s something you think would be good for an upcoming article or a piece of news that should be in an upcoming newsletter just @mention us or DM it to us and we’ll help get the word out.
Read more >>
Credit: Jay Heike @ Unsplash
A month later and the world has shifted underneath us all. Most of us are working from home and adjusting to the new normal of having drinks with friends over video chat and conducting work from slack only. If you’re like me you’ve probably found yourself becoming an amateur virologist and epidemiologist very quickly. While I usually read dozens of security articles each month to curate a nice list of articles that are critical for security leaders, like yourself, to be aware of, this month I’ve found myself grappling with COVID and the fastest financial slide in history.
Read more >>
Credit: Smithsonian American Art Museum and its Renwick Gallery
While everybody has been discussing the Coronavirus and the elections we have been focused on providing you with the best application security guidance and news out there. The March edition of this newsletter brings two new ReThink articles and a variety of interesting articles that I’ve found this month. The threat landscape is evolving. Attackers continue to use novel attack vectors and techniques to gain access to networks and systems. Don’t forget to subscribe to the newsletter to receive this in your inbox as soon as we write them!
Read more >>
This edition of the ReThink Newsletter includes two new ReThink articles, both of which cover important topics for our industry. It also includes five articles we think are the most interesting or important security news from the industry. Jason published an interview with Loren Kohnfelder, the father of Public Key Infrastructure. Jason met Loren while at Microsoft in the 90’s and both of them have been working on security issues ever since. In this long-form article Jason and Loren discuss PKI history, the current state of security and some predictions for the future . It’s amazing to hear from such an iconic pioneer of cryptography who rubbed elbows with Adelman and Rivest (the R and A in RSA) and get a chance to hear his perspective after over forty years of experience in the field.Don’t forget to subscribe to the newsletter to receive this in your inbox as soon as we write them!
Recent ReThink Articles
Read more >>
Don’t forget to subscribe to the newsletter to receive this in your inbox as soon as we write them! Our last newsletter of the year brings quite a few great new articles from the end of November and the beginning of December. There was a lot going on this month. We have four new articles and a brand new website. We got a lot of feedback that the old website was slow, difficult to view on mobile, and included an unnecessary amount of JavaScript. So we rewrote it from scratch. The new pages should be blazingly fast and easy to access.Please be sure to subscribe
Read more >>