Security News and Reporting Gets a New Blog

Brian Krebs announced on 24 December that his last day at  The Washington Post Company would be 31 December. Krebs will continue to blog at Krebs on Security. He has a good history of security reporting, and generally concentrates on investigative reporting and analysis.

He notes:

With a few exceptions, I will continue to eschew chasing the security story-of-the day, as there are plenty of sites you can go for that. My focus will remain on publishing information and reporting that you won’t find anywhere else – and with a minimum of editorializing.

I see this as a good description of his work and his first story, Virus Scanners for Virus Authors, is a good example of the type of reporting he has handled over recent years.

Tweet

Harlan Carvey's memory tool round-up

Harlan Carvey has a good round-up of incident response tools for collection and analysis of physical memory. His blog is definitely a good read for security professionals, particularly those that do any incident response or forensics. He is really good at posting his analysis processes and explaining which tools he uses for which tasks.

This post is just a reminder to myself to try some of the tools on his list that I have not yet used and to look more deeply into the tools that I have used. I hope to play with a number of the tools in a lab environment.

Tweet

December Dailydave; a recurring topic and 25C3

I've posted links to Dailydave quite a few times. The month of December had the last discussion ^* on a recurring topic. It also had some good guesses beforehand then a discussion of the rogue CA attack that was presented at 25C3.

^* of 2008

Tweet