The Bad Security Blog - By Claudiu Popa

Sign in Subscribe

Claudiu's Bad Security Blog

Expert commentary on critical cybersecurity issues. Claudiu Popa brings you the latest, most important discussions.

35 for 35: Answering the call for equitable access to cybersecurity and data protection across Canada

Nov 1, 2024 canada cybersecurity Equity

35 for 35: Answering the call for equitable access to cybersecurity and data protection across Canada

To celebrate 35 years in business, we started a movement. The “35 for 35” initiative invites business and community partners to help establish equity and fairness in access to cybersecurity, online safety and privacy protection to the 35 regions and sectors in greatest need across Canada.

Evidence: Why Vendor Selection and the Security of Your Supply Chain Fundamentally Depend On It

Sep 20, 2024 supplychain risk AI Safety duediligence

Evidence: Why Vendor Selection and the Security of Your Supply Chain Fundamentally Depend On It

Recent events have forced supply chain activities into the top spot in the public’s awareness. Supply chain security is a subset of supply chain management that addresses the threats posed by external suppliers, vendors, resellers, logistics, and transportation.

Understanding Threat Intelligence: Why It's Becoming Critical for Companies

Sep 13, 2024 risk management threat intel vulnerability management compliance

Understanding Threat Intelligence: Why It's Becoming Critical for Companies

Why does it seem like threat intelligence is a requirement for businesses today, and why do industry standards insist on it for breach prevention and risk management?

The Gold Standard in Multifactor Authentication is Flawed. Should You Drop YubiKey?

Sep 6, 2024 password multifactor vulnerability access

The Gold Standard in Multifactor Authentication is Flawed. Should You Drop YubiKey?

Multifactor leader Yubikey's cloning vulnerability underscores FIDO compliance and puts security-savvy companies in an awkward spot. Is the risk real, or just theoretical?

In cybersecurity, as in everything else, words matter.

Aug 23, 2024 cybercrime human rights surveillance information diplomacy

In cybersecurity, as in everything else, words matter.

Claudiu Popa says that before criminalizing cyberfraud and illicit ICT (information and communication technologies) activity, we first need to define "cybercrime" and understand "information" so as to establish a global, common language.