In recent months I have been asked to ensure we are auditing both successful and failed logins, not just failed...  Read more...

This is spurred on by a comment a pen tester made. He was referring to a particular technology and said something to the effect of, "What do you expect? It's 30 year-old technology." I was stunned when the comment was relayed to me. My response...  Read more...