User Filipon

57 votes

6 answers

8k views

Should we release the security issues we found in our product as CVE or we can just update those on weekly release notes?

asked Mar 13, 2019 at 11:27

12 votes

1 answer

719 views

Canadian police mentioned a new line-trapping technique, but what is that?

asked Dec 15, 2019 at 3:44

12 votes

1 answer

7k views

esim vs sim card, what is more secure?

asked Dec 27, 2019 at 1:25

11 votes

3 answers

504 views

How to calculate our application security debt?

asked Sep 18, 2018 at 15:55

11 votes

4 answers

2k views

Why should we prevent users from saving their passwords in their password manager?

asked Sep 29, 2018 at 13:53

8 votes

8 answers

3k views

What are the techniques to detect malware call home/beaconing activities?

asked Sep 23, 2018 at 6:18

6 votes

0 answers

179 views

What security isolation exists between VDI instance to VMware Horizon to ESX?

asked Mar 14, 2019 at 17:11

3 votes

2 answers

3k views

Mutual TLS and Cert Pinning solving the same problem?

asked Oct 18, 2019 at 18:23

3 votes

3 answers

255 views

How should we implement responsible discovery program internally only for our organization employees?

asked Sep 29, 2018 at 12:24

3 votes

2 answers

941 views

How we can prevent innocent looking USBNinja (USBHarpoon) attacks?

asked Oct 6, 2018 at 1:00

3 votes

5 answers

797 views

What are the benefits of enabling antivirus full scanning?

asked May 23, 2020 at 2:42

2 votes

3 answers

461 views

What are some best practices for WiFi security, in light of recently discovered vulnerabilities?

asked Nov 25, 2018 at 9:43

2 votes

0 answers

123 views

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

asked Mar 14, 2019 at 16:58

2 votes

2 answers

402 views

How should we mitigate threats that are keep coming to our security monitoring system?

asked Oct 2, 2018 at 12:58

2 votes

3 answers

328 views

Is fileless malware is a new type of attack or the media just bringing them now more to our attention to promote sales of related "new" solutions?

asked Apr 27, 2019 at 0:28

2 votes

1 answer

736 views

How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise? [duplicate]

asked Apr 1, 2019 at 5:16

1 vote

1 answer

114 views

How we can PoC our product that needs training data for our machine learning algorithm of the the bank clients?

asked Apr 3, 2019 at 16:21

1 vote

1 answer

412 views

Is VM escape has the same severity as me getting in a car crash? [closed]

asked Apr 7, 2019 at 1:46

1 vote

1 answer

370 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

asked Mar 18, 2019 at 16:56

1 vote

1 answer

145 views

What is the logic behind Microsoft recommending that creation of "god group" / Tier -0 in their Red Forest model for AD?

asked May 10, 2019 at 13:20

1 vote

2 answers

3k views

How an ISP can detect if someone having a WhatsApp call or video call? without detecting or blocking the rest of the app [duplicate]

asked Oct 19, 2019 at 13:36

1 vote

3 answers

439 views

If we integrate CDR in our email solution, do we really need Sandbox as well?

asked Dec 28, 2019 at 3:07

1 vote

0 answers

92 views

What are the most important security controls to implement when deploying BYOD in an organization? [closed]

asked Sep 29, 2018 at 10:40

1 vote

2 answers

278 views

How to explain to our developer manager the benefits of using a linter also as a security feature?

asked Sep 10, 2018 at 4:25

1 vote

1 answer

388 views

Is the zero trust approach really so safe? [closed]

asked Feb 27, 2019 at 6:50

1 vote

2 answers

176 views

How to create non-generic security requirements for an idea phase?

asked Dec 3, 2018 at 15:50

1 vote

0 answers

112 views

What are the security controls to consider to prevent usage of malicious SDK when developing our fintech mobile app? [closed]

asked Mar 31, 2019 at 17:01

1 vote

1 answer

172 views

What are some of malware-based MITM attacks that can compromise the organization when working remotely?

asked Mar 18, 2020 at 14:44

0 votes

1 answer

104 views

What are the risks when using QR to authenticate when using offline MFA in cases network is unavailable due to a network outage

asked Feb 24, 2019 at 12:01

0 votes

4 answers

469 views

Should the recent Tiny Chip attack teach us to invest less in our security posture?

asked Oct 6, 2018 at 1:15

Stack Exchange Network

40 Questions

Should we release the security issues we found in our product as CVE or we can just update those on weekly release notes?

Canadian police mentioned a new line-trapping technique, but what is that?

esim vs sim card, what is more secure?

How to calculate our application security debt?

Why should we prevent users from saving their passwords in their password manager?

What are the techniques to detect malware call home/beaconing activities?

What security isolation exists between VDI instance to VMware Horizon to ESX?

Mutual TLS and Cert Pinning solving the same problem?

How should we implement responsible discovery program internally only for our organization employees?

How we can prevent innocent looking USBNinja (USBHarpoon) attacks?

What are the benefits of enabling antivirus full scanning?

What are some best practices for WiFi security, in light of recently discovered vulnerabilities?

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

How should we mitigate threats that are keep coming to our security monitoring system?

Is fileless malware is a new type of attack or the media just bringing them now more to our attention to promote sales of related "new" solutions?

How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise? [duplicate]

How we can PoC our product that needs training data for our machine learning algorithm of the the bank clients?

Is VM escape has the same severity as me getting in a car crash? [closed]

Virtualized or Container (Remote) Based Browser Isolation is more secure?

What is the logic behind Microsoft recommending that creation of "god group" / Tier -0 in their Red Forest model for AD?

How an ISP can detect if someone having a WhatsApp call or video call? without detecting or blocking the rest of the app [duplicate]

If we integrate CDR in our email solution, do we really need Sandbox as well?

What are the most important security controls to implement when deploying BYOD in an organization? [closed]

How to explain to our developer manager the benefits of using a linter also as a security feature?

Is the zero trust approach really so safe? [closed]

How to create non-generic security requirements for an idea phase?

What are the security controls to consider to prevent usage of malicious SDK when developing our fintech mobile app? [closed]

What are some of malware-based MITM attacks that can compromise the organization when working remotely?

What are the risks when using QR to authenticate when using offline MFA in cases network is unavailable due to a network outage

Should the recent Tiny Chip attack teach us to invest less in our security posture?