#risk-mitigation — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #risk-mitigation, aggregated by home.social.
-
Stop Guessing, Start Measuring: The Cold Math of the Passphrase Transition
1,644 words, 9 minutes read time.
The Structural Collapse of the Legacy Password
The traditional eight-character alphanumeric password is a broken line of defense that offers nothing more than a false sense of security. For decades, users have been instructed to construct complex strings filled with uppercase letters, numbers, and obscure symbols, under the mistaken belief that this fragmentation creates an impenetrable barrier. The contemporary threat landscape has rendered these legacy methodologies entirely obsolete, as attackers no longer rely on manual guessing but on automated, high-velocity cryptographic assaults that exploit the inherent predictability of human patterns. To survive in this environment, enterprise architecture must shift toward the passphrase, a credential strategy rooted in length rather than fragmented complexity. This analytical deep dive will demonstrate that information entropy heavily favors length over a constrained character pool, proving that longer strings fundamentally break the mathematical models used by modern cracking tools. Furthermore, an examination of hardware acceleration will reveal how easily graphics processing units dismantle complex but short passwords through sheer processing volume. The analysis will also expose the human failure point, showing how predictable character substitutions actually aid automated dictionary attacks rather than hindering them. Finally, this post will outline the institutional shift led by regulatory frameworks that officially mandates the transition to high-entropy passphrases as a baseline security requirement.
Why Entropy Defeats Arbitrary Complexity
The security of any credential rests entirely on its mathematical entropy, which measures the total number of possible combinations an attacker must search through to guarantee a successful breach. Legacy security policies focused intensely on expanding the character pool by forcing users to mix uppercase letters, lowercase letters, numbers, and symbols, assuming this diversity would stall an attack. This logic fails because the total search space scales linearly when adding character types, but scales exponentially when increasing the overall length of the string. An eight-character password drawing from an expanded pool of ninety-four possible characters yields a search space that modern computing clusters can exhaust in a matter of hours. Conversely, a twenty-character passphrase composed exclusively of standard lowercase letters draws from a smaller pool of twenty-six characters, yet its sheer length creates a computational search space that is astronomically larger. The exponential power of length completely dwarfs the linear additions of complexity, making the long string mathematically superior in every measurable metric. Security is a game of resource depletion, and forcing an attacker to calculate permutations across a massive length consumes their time and computational power far more effectively than a short, complex puzzle. Relying on symbols to protect a short credential is a fundamental misunderstanding of cryptographic reality.
How Modern Computing Power Obliterates Standard Credentials
The rise of massive hardware acceleration has turned password cracking into an industrialized, automated process that operates at a scale most organizations fail to comprehend. Modern threat actors do not target live login portals where rate-limiting defenses exist; they exfiltrate hashed credential databases and conduct offline attacks using specialized graphics processing unit clusters. A single consumer-grade graphics card can execute billions of cryptographic hash calculations every second, and when multiple cards are parallelized, the throughput becomes devastatingly efficient. Legacy hashing algorithms that were once considered robust offer minimal resistance against this level of raw processing power when the target credential is short. A complex, eight-character password is reduced to a minor computational speed bump when confronted by an array capable of cycling through trillions of permutations in a single afternoon. Passphrases alter this dynamic entirely by forcing the attack automation to scale up its calculations to a point that becomes financially and logistically unviable for the adversary. When a credential possesses sufficient length, the time required to exhaust the mathematical possibilities extends from hours into decades, effectively neutralizing the advantage of hardware acceleration. Organizations that continue to permit short, complex credentials are explicitly ignoring the reality of modern computing capability and leaving their infrastructure vulnerable to rapid automated compromise.
The Illusion of Security in Character Substitution
Human psychology is inherently predictable, and when users are forced to create complex strings that defy natural memory retention, they invariably take shortcuts that automated attack tools are specifically designed to exploit. The common practice of replacing a letter with a lookalike number or symbol does not create randomness; it merely creates a predictable pattern that mirrors basic human behavior. Automated dictionary attacks do not guess randomly across the entire character space from the first second; they utilize highly sophisticated rule sets that automatically apply common substitutions to known words. This means an obfuscated password is often broken just as quickly as its plain-text counterpart because the underlying structure remains entirely unoriginal. Furthermore, forcing users to memorize these fragmented, unnatural strings leads directly to credential reuse across multiple platforms, creating a systemic risk where a single third-party breach compromises the entire enterprise. Passphrases solve this fundamental human vulnerability by leveraging words arranged in a sequence that is easy for a human to remember but entirely disjointed to an algorithm. By aligning credential policy with the way the human brain naturally retains information, organizations eliminate the need for dangerous substitutions and drastic reuse, creating a security model that functions in reality rather than only on paper.
Aligning Enterprise Standards with High-Entropy Passphrases
The transition from short, complex passwords to long passphrases is no longer a matter of structural debate; it is a formalized directive established by major global cybersecurity frameworks. The National Institute of Standards and Technology explicitly overhauled its digital identity guidelines to eliminate the legacy requirements for arbitrary character complexity and forced periodic expiration. Modern compliance frameworks recognize that frequent password changes and complex character mandates directly degrade security by encouraging predictable patterns and user fatigue. The updated standards heavily prioritize credential length, explicitly advising organizations to configure their identity providers to accept long strings while screening out known compromised entries. Implementing this architecture requires a deliberate reconfiguration of active directory environments, single sign-on platforms, and enterprise identity management systems to support minimum lengths of at least fifteen to twenty characters. Legacy applications that artificially restrict input length must be systematically updated or replaced, as they represent a critical vulnerability that prevents the enforcement of modern entropy standards. Failing to align enterprise architecture with these updated frameworks is a failure of technical oversight that leaves an organization legally and operationally exposed when a breach occurs.
The Definite Verdict on Credential Architecture
The data dictates a clear and uncompromising conclusion regarding enterprise credential policy. The legacy framework of short, complex passwords has utterly failed to withstand the realities of modern computing power, automated attack methodologies, and predictable human psychology. Information entropy proves that string length is the primary factor in resisting cryptographic attacks, while hardware acceleration has turned the cracking of short credentials into a trivial task. Human-generated substitutions offer zero protection against sophisticated dictionary rule sets, serving only to complicate user experience while leaving the underlying data vulnerable to exploitation. True security requires a complete rejection of outdated complexity mandates in favor of long, high-entropy passphrases that leverage exponential mathematical growth to exhaust attacker resources. Enterprise infrastructure must adapt immediately to these established standards to mitigate the threat of automated compromise and align with modern regulatory frameworks.
Enterprise identity architecture must be updated to enforce minimum lengths of fifteen to twenty characters to resist automated exploitation.
Information entropy mathematically favors credential length over character set complexity, creating exponentially larger search spaces.
Modern graphics processing unit clusters can rapidly exhaust short, complex credentials through high-velocity offline cracking.
Predictable human character substitutions fail to deceive modern automated dictionary attacks and encourage dangerous credential reuse.
Global security frameworks have officially shifted toward prioritizing length and eliminating arbitrary complexity mandates.
Audit Your Network: Secure Your Enterprise Infrastructure With High-Entropy Passphrases
Stop relying on an obsolete defense strategy that invites catastrophe. Audit your identity providers immediately, systematically dismantle the arbitrary complexity rules that compromise your user base, and configure your active directory to enforce a strict minimum threshold of fifteen or more characters. The transition to high-entropy passphrases is not an operational preference; it is an immediate cryptographic necessity to shield your enterprise from automated exploitation.
SUPPORTSUBSCRIBECONTACT MED. Bryan King
Sources
- NIST Special Publication 800-63B: Digital Identity Guidelines – Authentication and Lifecycle Management
- CISA: Protecting Against Brute Force Attacks
- CISA: Cyber Threats and Advisory Library
- MITRE ATT&CK: Brute Force Techniques (T1110)
- MITRE ATT&CK: Password Cracking (T1110.002)
- MITRE ATT&CK: Password Spraying (T1110.003)
- MITRE ATT&CK: Password Guessing (T1110.001)
- MITRE ATT&CK: Credential Stuffing (T1110.004)
- MITRE ATT&CK: Credentials from Password Stores (T1555)
- IEEE Xplore: Computational Metrics of Password Entropy
- IEEE Xplore: Analysis of Password Cracking Dynamics Using GPUs
- IEEE Xplore: Human Behavior Patterns in Alphanumeric Character Substitutions
- IEEE Xplore: Performance Optimization of Offline Dictionary Attacks
- OWASP: Password Creation Requirements Control Guidelines
- OWASP Top 10: Identification and Authentication Failures
- OWASP: Comprehensive Guide to Brute Force Attacks
- OWASP: Mechanics of Automated Credential Stuffing
- SANS Institute: The Mathematics of Length vs. Complexity
- SANS Institute: Defending Against Modern GPU Password Cracking Clusters
- SANS Institute: Rethinking Enterprise Password Expiration Policies
- SANS Institute: Implementation Strategies for High-Entropy Passphrases
- ENISA: Guidelines for Secure Password and Authentication Schemes
- Australian Cyber Security Centre (ACSC): Password Governance and Policies
- UK National Cyber Security Centre (NCSC): Password Policy Re-thought
- UK NCSC: Using Three Random Words for Strong Passphrases
- NIST Computer Security Resource Center: SP 800-63B Structural Reference
- BSI Germany: IT-Grundschutz Standards for Authentication
- ACM Digital Library: Analysis of Leaked Password Datasets and Substitution Rules
- ACM Digital Library: Guessing Human Passwords via Probabilistic Context-Free Grammars
- ACM Digital Library: The Security of Length-Based Passphrase Configurations
- ISO/IEC 27002: Information Security, Cybersecurity, and Privacy Protection Controls
- PCI DSS: Document Library for Identity and Access
Disclaimer:
The views and opinions expressed in this post are solely those of the author. The information provided is based on personal research, experience, and understanding of the subject matter at the time of writing. Readers should consult relevant experts or authorities for specific guidance related to their unique situations.
Related Posts
Rate this:
#accessControl #accessManagement #accessVulnerability #accountProtection #activeDirectoryConfiguration #authenticationPolicy #automatedCyberAttacks #bruteForceDefense #characterSubstitution #CISAPasswordGuidelines #computerSecurity #credentialReuse #credentialStuffing #cryptographicHash #cyberThreatMitigation #cybersecurityBestPractices #cybersecurityCompliance #dataBreachPrevention #digitalIdentityGuidelines #enterpriseIdentityArchitecture #enterpriseSecurity #GPUPasswordCracking #hardwareAcceleration #highEntropyPassphrase #identityManagement #identityProviders #informationEntropy #ITCompliance #mathematicalEntropy #multiGPUCracking #networkAudit #networkDefense #networkSecurity #NISTSP80063B #offlineDictionaryAttack #passphraseVsPassword #passwordCracking #passwordEntropyFormula #PasswordSecurity #riskMitigation #securityAuditing #securityFrameworks #securityInfrastructure #singleSignOn #stringLength #systemVulnerability -
Residential fire safety requires physical validation, not just passive hardware deployment. Standard piezo-electric smoke alarms operating at 3 kHz often fail to trigger arousal in sleeping children due to deep-wave sleep cycles.
Optimizing your domestic safety infrastructure requires a proactive framework. Review the complete operational protocol here: https://securelylife.com/fire-escape-drills-for-kids/
#FireSafety #HomeSecurity #EmergencyPreparedness #RiskMitigation
-
A deep dive into how Android’s early warning system alerted millions ahead of the Venezuela earthquake. Learn about the sensors, algorithms, and implications for emergency response. Read the full analysis: https://wix.to/3q9f2lw
#Android
#Seismology
#TechForGood
#RiskMitigation
#EarthquakeResponse -
A deep dive into how Android’s early warning system alerted millions ahead of the Venezuela earthquake. Learn about the sensors, algorithms, and implications for emergency response. Read the full analysis: https://wix.to/3q9f2lw
#Android
#Seismology
#TechForGood
#RiskMitigation
#EarthquakeResponse -
Prediction Markets are moving beyond just taking individuals' "bets" and are attempting to woo institutions such as hedge funds and brokerages to execute big-ticket "trading" like hedging against specific business risks. https://www.nytimes.com/2026/06/17/business/dealbook/hedging-prediction-markets-kalshi.html?unlocked_article_code=1.rFA.L6RD.G_CozRXwosjn&smid=url-share
#Predictions #PredictionMarkets #Kalshi #PolyMarket #WallStreet #Hedging #Brokerages #HedgeFunds #Risk #RiskMitigation #Securities #CFTC #CryptoCurrencies #Insurance
-
Prediction Markets are moving beyond just taking individuals' "bets" and are attempting to woo institutions such as hedge funds and brokerages to execute big-ticket "trading" like hedging against specific business risks. https://www.nytimes.com/2026/06/17/business/dealbook/hedging-prediction-markets-kalshi.html?unlocked_article_code=1.rFA.L6RD.G_CozRXwosjn&smid=url-share
#Predictions #PredictionMarkets #Kalshi #PolyMarket #WallStreet #Hedging #Brokerages #HedgeFunds #Risk #RiskMitigation #Securities #CFTC #CryptoCurrencies #Insurance
-
Enterprises Lag in AI-Agent Risk Mitigation Despite Funding
Most enterprise leaders are bracing for a major security breach or fraud incident driven by AI agents within the next year, yet their organizations are woefully unprepared to mitigate the risks. A recent survey of 300 security leaders reveals a stark gap between threat awareness and adequate safeguards.
#AiagentRisk #EnterpriseSecurity #ArtificialIntelligence #RiskMitigation #EmergingThreats
-
🏮 [Level 2] - SHIKI: 2 Tokens.
Sifu-Level Validation via Bayesian-Transformer Hybrid + 100k Vectorized Monte Carlo Simulations. Shiki doesn't just predict risk; she flies the vendor through 100k failure scenarios to find the kill-shot.
"Beyond the peaks are higher mountains; beyond the skies are loftier heavens."
#Shiki #BlackSwan #MonteCarlo #RiskMitigation #Shaolin
-
🏮 [Level 2] - SHIKI: 2 Tokens.
Sifu-Level Validation via Bayesian-Transformer Hybrid + 100k Vectorized Monte Carlo Simulations. Shiki doesn't just predict risk; she flies the vendor through 100k failure scenarios to find the kill-shot.
"Beyond the peaks are higher mountains; beyond the skies are loftier heavens."
#Shiki #BlackSwan #MonteCarlo #RiskMitigation #Shaolin
-
Operational Resilience Strategies | Fractional COO https://kamyarshah.com/operational-resilience-strategies/ #OperationalResilience #BusinessContinuity #RiskMitigation #ResilienceStrategy #BusinessAdaptability
-
ICE agents will assist US security operations at Italy`s Winter Olympics, focusing on vetting and risk mitigation against transnational crime. https://english.mathrubhumi.com/sports/ice-agents-italy-winter-olympics-security-m8hig63v?utm_source=dlvr.it&utm_medium=mastodon #ICEAgents #WinterOlympics #Italy #RiskMitigation
-
Key Strategies for Risk Mitigation in Business
#commercestheoris #commerce #RiskMitigation #RiskManagement #StrategicPlanning #BusinessResilience
read more:- https://commercestheories.com/key-strategies-for-risk-mitigation-in-business/ -
Why Trade Rules Exist
📌 Trade Lesson from History
Trade rules were not created to slow business down.
They were created because history demanded them.
Every major trade regulation exists because something once went wrong:
– illegal shipments
– manipulated pricing
– undocumented goods
– collapsed supply chainContinue ⤵️
#TradeCompliance #InternationalLaw #BusinessEthics #RegulatoryAffairs #RiskMitigation #Governance #GlobalTrade #SupplyChainStrategy #ImportExport #B2B #TradeFinance
-
Key Strategies for Risk Mitigation in Business
#commercestheories #commerce #RiskMitigation #BusinessStrategy #BusinessGrowth
visit:-https://commercestheories.com/2025/01/29/key-strategies-for-risk-mitigation-in-business/ -
Server Security Checklist — Essential Hardening Guide
Securing your servers isn’t optional — it’s your first line of defense against data breaches, ransomware, insider threats, and lateral movement. Use this checklist as a baseline for Linux, Windows, cloud, hybrid, or on-prem servers.
⸻
🔧 1. System & OS Hardening
• Keep OS & packages updated (apply security patches frequently).
• Remove / disable unused services & software.
• Enforce secure boot + BIOS/UEFI passwords.
• Disable auto-login and guest accounts.
• Use minimal OS images only (reduce attack surface).⸻
🔐 2. Access Control
• Enforce strong passwords & MFA everywhere.
• Use RBAC & least privilege access.
• Disable root/Administrator login over SSH/RDP.
• Rotate credentials & keys regularly.
• Implement just-in-time access for privileged users.⸻
🌐 3. Network Security
• Restrict inbound/outbound traffic via firewalls.
• Segment critical servers from general LANs/VLANs.
• Disable unused ports & protocols.
• Enable DoS/DDoS protection.
• Apply zero-trust network principles.⸻
🔑 4. Secure Remote Access
• Use SSH key-based authentication (disable password login).
• Enforce VPN for admin access.
• Log & monitor all remote access sessions.
• Disable legacy protocols (Telnet, FTP, SMBv1).
• Require bastion/jump host for critical access.⸻
📊 5. Logging & Monitoring
• Enable centralized logging (syslog / SIEM).
• Track failed login attempts & anomalies.
• Configure alerts for privilege escalation or config changes.
• Monitor log tampering.
• Retain logs securely for audits & forensics.⸻
🔒 6. Data Protection
• Encrypt data at rest (LUKS, BitLocker, etc.).
• Encrypt data in transit (TLS 1.2+).
• Strict database access policies.
• Regular, offline, immutable backups.
• Test restore procedures (don’t assume backups work).⸻
🔁 7. Application & Patch Management
• Keep middleware, frameworks, and apps patched.
• Delete default credentials & sample files.
• Enable code signing for software packages.
• Use secure coding practices (OWASP Top 10).
• Implement dependency scanning (Snyk, Trivy, etc.).⸻
🛡️ 8. Malware & Intrusion Defense
• Deploy EDR/AV on endpoints.
• Enable IDS/IPS at network edge.
• Automatic vulnerability scans (schedule weekly/monthly).
• Monitor persistence techniques (cron, startup scripts).
• Block known malicious IP ranges & TLDs.⸻
🏢 9. Physical & Cloud Security
• Restrict physical access to server racks/rooms.
• Enable provider security tools (AWS Security Groups, Azure NSG, IAM).
• Harden cloud images (CIS benchmarks).
• Review cloud logging & audit trails regularly.
• Disable unused cloud API keys / roles.⸻
📜 10. Policy & Compliance
• Use CIS / NIST / ISO-27001 benchmarks.
• Track & document every access change.
• Force annual access reviews & key rotation.
• Perform regular security training for admins.
• Maintain disaster recovery & incident plans.⸻
➕ Additional 5 Critical Controls (Advanced Hardening)
🧠 11. Privileged Access Management (PAM)
• Use jump hosts & session recording.
• Just-In-Time access for admins.
• Store keys in secure vaults (HashiCorp Vault, CyberArk).🚨 12. Real-Time Threat Detection
• Use behavioral analytics → UEBA/XDR.
• AI-based anomaly detection recommended.
• Block suspicious IPs automatically.🧪 13. Red Team & Pentesting
• Run regular internal pentests.
• Validate configuration weaknesses.
• Simulate phishing + lateral movement scenarios.🧱 14. Container / VM Isolation
• Use AppArmor, SELinux, Seccomp profiles.
• Limit Docker socket access & root containers.
• Scan images before deployment.📦 15. Automated Configuration Management
• Use IaC (Terraform, Ansible, Puppet) for repeatable and secure builds.
• Detect drift using compliance scanning.
• Version control all infrastructure.⸻
🧠 Core Reminder
A server is only as secure as the team who maintains it.
Hardening isn’t one task — it’s an ongoing#ServerSecurity #SystemHardening #InfoSec #CyberSecurity #BlueTeam
#DevSecOps #SysAdmin #ThreatDetection #AccessControl #NetworkSecurity
#LinuxSecurity #SecureArchitecture #RiskMitigation #SecurityChecklist
#CloudSecurity #InfrastructureSecurity #ZeroTrust #SecurityMonitoring -
#PatrickBreyer warns that the #EU is pushing through a more intrusive version of #ChatControl, disguised as “#riskmitigation.” This proposal could force #serviceproviders to #scan all #privatemessages, including those on #endtoendencrypted services, and use #AI to #massscan #chat texts for suspicious keywords. Breyer urges EU governments to block this proposal and protect #digitalfreedom and #privacy. https://www.patrick-breyer.de/en/chat-control-2-0-through-the-back-door-breyer-warns-the-eu-is-playing-us-for-fools-now-theyre-scanning-our-texts-and-banning-teens/?eicker.news #tech #media #news
-
#PatrickBreyer warns that the #EU is pushing through a more intrusive version of #ChatControl, disguised as “#riskmitigation.” This proposal could force #serviceproviders to #scan all #privatemessages, including those on #endtoendencrypted services, and use #AI to #massscan #chat texts for suspicious keywords. Breyer urges EU governments to block this proposal and protect #digitalfreedom and #privacy. https://www.patrick-breyer.de/en/chat-control-2-0-through-the-back-door-breyer-warns-the-eu-is-playing-us-for-fools-now-theyre-scanning-our-texts-and-banning-teens/?eicker.news #tech #media #news
-
You Still Shouldn’t Use a Browser Password Manager
https://web.brid.gy/r/https://www.wired.com/story/browser-password-managers/
-
You Still Shouldn’t Use a Browser Password Manager
https://web.brid.gy/r/https://www.wired.com/story/browser-password-managers/
-
New visual for the 'Digital Forensics' section of 'Data Science for the Modern Enterprise'! We're diving deep into vulnerabilities, threats, and risk mitigation.
Forensics isn't just about after-the-fact analysis—it's a critical part of proactive defense. What's the most surprising digital forensics case or concept you've encountered? Share your thoughts below! 👇
#digitalforensics #CyberSecurity #DataScience #RiskMitigation #InfoSec #TechTalk #Vulnerabilities #Threats #EnterpriseSecurity -
New visual for the 'Digital Forensics' section of 'Data Science for the Modern Enterprise'! We're diving deep into vulnerabilities, threats, and risk mitigation.
Forensics isn't just about after-the-fact analysis—it's a critical part of proactive defense. What's the most surprising digital forensics case or concept you've encountered? Share your thoughts below! 👇
#digitalforensics #CyberSecurity #DataScience #RiskMitigation #InfoSec #TechTalk #Vulnerabilities #Threats #EnterpriseSecurity -
Innovator Spotlight: Replica Cyber – Source: www.cyberdefensemagazine.com https://ciso2ciso.com/innovator-spotlight-replica-cyber-source-www-cyberdefensemagazine-com/ #rssfeedpostgeneratorecho #missiondrivensecurity #cyberdefensemagazine #cyberdefensemagazine #operationalstealth #secureenvironments #AIexperimentation #CyberSecurityNews #instantdeployment #digitalworkspace #CISOinnovation #cyberisolation #riskmitigation #Spotlight #zerotrust
-
Innovator Spotlight: Replica Cyber – Source: www.cyberdefensemagazine.com https://ciso2ciso.com/innovator-spotlight-replica-cyber-source-www-cyberdefensemagazine-com/ #rssfeedpostgeneratorecho #missiondrivensecurity #cyberdefensemagazine #cyberdefensemagazine #operationalstealth #secureenvironments #AIexperimentation #CyberSecurityNews #instantdeployment #digitalworkspace #CISOinnovation #cyberisolation #riskmitigation #Spotlight #zerotrust
-
The Future of the Climate is Now?!
Find out how the DIRECTED and I-CISK projects support user-centered climate solutions in our ever-changing world.
https://blog.52north.org/2025/06/02/the-future-of-the-climate-is-now/
#riskmitigation #climatechange #opensource #climateservices #DIRECTED #ICISK -
The Future of the Climate is Now?!
Find out how the DIRECTED and I-CISK projects support user-centered climate solutions in our ever-changing world.
https://blog.52north.org/2025/06/02/the-future-of-the-climate-is-now/
#riskmitigation #climatechange #opensource #climateservices #DIRECTED #ICISK -
I'm going to take advantage of the current #eruption on Mt #Etna to discuss some of the challenges of #modelling #lava flows. Buckle up (or just silence me) because this is going to be a long thread.
First of all, why do we want to model lava flows? The answer most definitely isn't «because we can», since —as I'm going to explain momentarily— we actually cannot. Still having an idea about how lava flows and sets in place is a powerful tool for the assessment (and possibly mitigation) of the associated #hazard and #risk: if we can tell how lava flows, we can tell which areas are going to be reached by the lava, and hopefully also improve the design of tactical and strategic actions that can be taken to minimize the damage.
(Of course, whether or not those actions will then be taken is an entirely different matter, but that's mostly politics, not science.)
1/
#MtEtna #modelling #simulation #CFD #NaturalHazard #hazardAssessment #riskAssessment #riskMitigation
-
I'm going to take advantage of the current #eruption on Mt #Etna to discuss some of the challenges of #modelling #lava flows. Buckle up (or just silence me) because this is going to be a long thread.
First of all, why do we want to model lava flows? The answer most definitely isn't «because we can», since —as I'm going to explain momentarily— we actually cannot. Still having an idea about how lava flows and sets in place is a powerful tool for the assessment (and possibly mitigation) of the associated #hazard and #risk: if we can tell how lava flows, we can tell which areas are going to be reached by the lava, and hopefully also improve the design of tactical and strategic actions that can be taken to minimize the damage.
(Of course, whether or not those actions will then be taken is an entirely different matter, but that's mostly politics, not science.)
1/
#MtEtna #modelling #simulation #CFD #NaturalHazard #hazardAssessment #riskAssessment #riskMitigation
-
Unauthorised network access remains a significant threat, especially for organisations lacking robust network security controls. Attackers can capture privileged credentials from automated tasks and vulnerability scanners if these tasks are configured with an excessive scope or are insufficiently protected by network or host controls...
Read our latest blog, "Watch where you point that cred," by Tom Thomas-Litman, for insights and recommendations for securing internal networks: https://www.pentestpartners.com/security-blog/watch-where-you-point-that-cred-part-1/
#CyberSecurity #Infosec #NetworkSecurity #VulnerabilityScanning #CredentialTheft #Honeypots #LeastPrivilege #RiskMitigation
-
WEF recommends ‘Sandbox-first approach’ for DeFi adoption - The World Economic Forum has recommended using regulatory sandboxes to f... - https://cointelegraph.com/news/wef-recommends-sandbox-approach-defi-regulation #decentralizedfinance #regulatorysandboxes #cryptoregulation #riskmitigation #digitalassets #stablecoins #innovation #defi #wef
-
WEF recommends ‘Sandbox-first approach’ for DeFi adoption - The World Economic Forum has recommended using regulatory sandboxes to f... - https://cointelegraph.com/news/wef-recommends-sandbox-approach-defi-regulation #decentralizedfinance #regulatorysandboxes #cryptoregulation #riskmitigation #digitalassets #stablecoins #innovation #defi #wef
-
Major tech firms launch coalition for AI security standards
https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/
#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity
-
Major tech firms launch coalition for AI security standards
https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/
#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity
-
Security-Focused Crypto ISAC Debuts With Founding Members Including Coinbase, Kraken, Circle - The Crypto ISAC (Information Sharing and Analysis Center) launches on Wednesday as... - https://news.bitcoin.com/security-focused-crypto-isac-debuts-with-founding-members-including-coinbase-kraken-circle/ #informationsharing #threatintelligence #cryptocurrency #riskmitigation #cybersecurity #newsbytes-2 #blockchain #cryptoisac #newsbytes #coinbase #security #bitcoin #circle #crypto #kraken
-
Security-Focused Crypto ISAC Debuts With Founding Members Including Coinbase, Kraken, Circle - The Crypto ISAC (Information Sharing and Analysis Center) launches on Wednesday as... - https://news.bitcoin.com/security-focused-crypto-isac-debuts-with-founding-members-including-coinbase-kraken-circle/ #informationsharing #threatintelligence #cryptocurrency #riskmitigation #cybersecurity #newsbytes-2 #blockchain #cryptoisac #newsbytes #coinbase #security #bitcoin #circle #crypto #kraken
-
Identifying Inherent Threats: The Key to Effective Threat Modeling and Risk Mitigation #ThreatModeling #Shostack #InherentThreats #RiskMitigation #CyberSecurity #SystemDesign #CustomThreatLibrary #ScalingThreatModeling
https://jpmellojr.blogspot.com/2024/05/identifying-inherent-threats-key-to.html -
🛡️ 6/10: Preparing for the Worst
Just as we would salt the roads or stock up on supplies, investors should consider defensive moves—like trimming portfolios or shifting to safer asset classes. #PortfolioManagement #RiskMitigation -
#RiskMitigation #Covid and other #viruses
So you're risking it and visiting with friends or extended family indoors today...
In #Los Angeles, covid levels are rising and on track to replicate last year's peak. I'd isolate for several days post potential exposure & maybe do a couple tests at 3 & 4 days point to protect others. Mask around others.
#RSV is near a peak much higher than last year's. anecdotally, persistent cough is a prevalent symptom this year. Mask & Wash hands frequently. Isolate if ill.
#Flu prevalence is rising STEEPLY and significantly higher than last year. Mask & wash hands frequently. Isolate if ill.
-
#RiskMitigation #Covid and other #viruses
So you're risking it and visiting with friends or extended family indoors today...
In #Los Angeles, covid levels are rising and on track to replicate last year's peak. I'd isolate for several days post potential exposure & maybe do a couple tests at 3 & 4 days point to protect others. Mask around others.
#RSV is near a peak much higher than last year's. anecdotally, persistent cough is a prevalent symptom this year. Mask & Wash hands frequently. Isolate if ill.
#Flu prevalence is rising STEEPLY and significantly higher than last year. Mask & wash hands frequently. Isolate if ill.
-
Also promoted by recent subconscious dream activity:
Please have a reliable deployment and rollback strategy, and deploy to production as often as possible. I swear doing so will actually reduce the risk of production deployments!
-
HIRING: Business Information Security Officer / Los Angeles, CA 👉 https://infosec-jobs.com/J41626/ #InfoSec #infosecjobs #CyberSecurity #CyberCareer #cyber #security #jobsearch #techjobs #hiringnow #riskmitigation #SCRRA #BISO #LAjobs #CISSP #CISA #CRISC #CISM #HIPPA #ISO27001
-
It’s only #Exchange when it’s from the On-Prem region of your org, otherwise it’s just sparkling #RiskMitigation.
-
It’s only #Exchange when it’s from the On-Prem region of your org, otherwise it’s just sparkling #RiskMitigation.
-
5 smart contract vulnerabilities: How to identify and mitigate them - Explore five critical smart contract vulnerabilities that pose ri... - https://cointelegraph.com/news/5-smart-contract-vulnerabilities #smartcontractvulnerabilities #decentralizedapplications #blockchainsecurity #contractauditing #riskmitigation #securecoding.
-
5 smart contract vulnerabilities: How to identify and mitigate them - Explore five critical smart contract vulnerabilities that pose ri... - https://cointelegraph.com/news/5-smart-contract-vulnerabilities #smartcontractvulnerabilities #decentralizedapplications #blockchainsecurity #contractauditing #riskmitigation #securecoding.
-
⚡️ Tragic incident in Nevada as a 2-year-old boy dies from Naegleria fowleri infection, known as "Brain-eating amoeba". The amoeba enters the brain through the olfactory nerve when contaminated water is inhaled through the nose. Symptoms include severe headache, fever, nausea, stiff neck, seizures, hallucinations, and coma. Caution advised in warm freshwater environments. #PublicHealth #RiskMitigation https://www.riskmap.com/incidents/1862202/articles/184833344/?utm_source=dlvr.it&utm_medium=mastodon
-
The Kessler Syndrome Explains Why Hunks of Space Junk Are ‘Ticking Time Bombs’
--
https://www.popularmechanics.com/space/satellites/a43797134/kessler-syndrome-explained/ <-- shared article
--
[even a TINY fragment can be incredibly destructive at orbiting speeds]
#GIS #spatial #mapping #spacedebris #survey #solutions #engineering #communication #science #communications #military #television #satellites #orbit #cleanup #policy #planning #cooperation #risk #hazard #dangerous #riskassessment #riskmanagement #riskmitigation #riskanalysis #GPS #remotesensing #earthobservation #KesslerSyndrome #engineering #engineeringsolutions #debris #space #rocket #payloads #launches #orbit #orbiting #junk #spacejunk -
The Kessler Syndrome Explains Why Hunks of Space Junk Are ‘Ticking Time Bombs’
--
https://www.popularmechanics.com/space/satellites/a43797134/kessler-syndrome-explained/ <-- shared article
--
[even a TINY fragment can be incredibly destructive at orbiting speeds]
#GIS #spatial #mapping #spacedebris #survey #solutions #engineering #communication #science #communications #military #television #satellites #orbit #cleanup #policy #planning #cooperation #risk #hazard #dangerous #riskassessment #riskmanagement #riskmitigation #riskanalysis #GPS #remotesensing #earthobservation #KesslerSyndrome #engineering #engineeringsolutions #debris #space #rocket #payloads #launches #orbit #orbiting #junk #spacejunk -
The schaden has freuded.
HEH.
Gift link below!
#TuckerCarlson #FOXNews #Media #Dominion #RiskMitigation #Karma #BowTies #DumbHaircuts
-
The schaden has freuded.
HEH.
Gift link below!
#TuckerCarlson #FOXNews #Media #Dominion #RiskMitigation #Karma #BowTies #DumbHaircuts
-
🚨 [#PatchNow] New VM2 #SandboxEscape... Two critical vulns are out in the #VM2 #Sandbox Library. These flaws affect all versions prior to 3.9.17 and both carry a CVSS score of 9.8.
If exploited, a threat actor could escape protection boundaries and execute arbitrary code. A patch has been released. so get it and update: https://www.bleepingcomputer.com/news/security/new-sandbox-escape-poc-exploit-available-for-vm2-library-patch-now.
These two CVEs (CVE-2023-29199 and CVE-2023-30547) were discovered by Seung Hyun Lee.
https://nvd.nist.gov/vuln/detail/CVE-2023-29199
-
🚨 [#PatchNow] New VM2 #SandboxEscape... Two critical vulns are out in the #VM2 #Sandbox Library. These flaws affect all versions prior to 3.9.17 and both carry a CVSS score of 9.8.
If exploited, a threat actor could escape protection boundaries and execute arbitrary code. A patch has been released. so get it and update: https://www.bleepingcomputer.com/news/security/new-sandbox-escape-poc-exploit-available-for-vm2-library-patch-now.
These two CVEs (CVE-2023-29199 and CVE-2023-30547) were discovered by Seung Hyun Lee.
https://nvd.nist.gov/vuln/detail/CVE-2023-29199