Cyber Security and Network Administration

Defences get stronger, attackers get smarter. And so it goes. Now that strong MFA has made compromising identities a lot more difficult, attackers are increasingly looking for other ways to compromise accounts and organisations. Social engineering isn’t new, but what they are asking users to…

Grafana is a powerhouse for observability, but it is only as useful as the data it has access to. Breaking down data silos to build an overall picture is the best thing administrators can do to provide a clear picture into their security posture, and…

I’m currently studying for CISSP (Certified Information Systems Security Professional), and while it does dive deep into risk analysis and business cyber security objectives, it also has a couple of history lessons baked into it. The "Orange Book" is the common name for the Trusted…

Firstly, if you haven’t updated Google Chrome on all your devices, go and do so. Whilst the headlines around CVE-2026-0628 have mostly been exaggerated fearmongering, it has raised a very serious issue for administrators - do you let users install whatever browser extensions they want?…

This week I’ve been focusing on reviewing multi factor authentication, particularly in a Microsoft environment. I’ve learnt a lot about session binding, and about how both Microsoft and Google and protecting users in the background. It’s cemented my belief that personal devices are the biggest…