Tag

Security Training

Find resources and insights on cybersecurity training programs for employees and organizations. These posts cover training methodologies, awareness campaign design, compliance requirements, skill-building exercises, and strategies for measuring the effectiveness of your security education initiatives.

posts

Dark Web

What Is the Dark Web? A Security Pro's Honest Guide

Your Employees' Passwords Are Probably Already There In 2024, the FBI's Internet Crime Complaint Center (IC3) reported over 880,000 complaints with potential losses exceeding $12.5 billion — and a significant chunk of that activity traces back to credentials and data bought and sold on the dark

Carl B. Johnson May 29, 2026 5 min read
SQL Injection

SQL Injection Explained: The Attack That Won't Die

A 20-Year-Old Exploit Still Topping the Charts In 2023, the MOVEit Transfer vulnerability — a SQL injection flaw — led to the compromise of over 2,600 organizations and roughly 90 million individuals' records. One vulnerability. One technique that's been publicly documented since the early 2000s. And it still

Carl B. Johnson May 26, 2026 5 min read
Data Breach

What Causes a Data Breach: 7 Root Causes in 2025

In May 2024, Ticketmaster confirmed a breach that exposed the personal data of over 560 million customers. The attack vector? Stolen credentials used to access a third-party cloud database. It wasn't some exotic zero-day exploit. It was a login and password that fell into the wrong hands. If

Carl B. Johnson Jul 15, 2025 7 min read
SQL Injection

SQL Injection Explained: The Attack That Won't Die

In 2023, the MOVEit Transfer vulnerability — a SQL injection flaw — led to the compromise of over 2,600 organizations and exposed data on more than 77 million individuals. One vulnerability. One injection point. Billions in damage. And here's what should keep you up at night: SQL injection has

Carl B. Johnson Jul 14, 2019 7 min read