Stephen and Chey Cobb: Independent Researchers

I'm hoping that the Ashley Madison hack will be a turning point in cyber-ethics, the point in time when we collectively decide that: h...

The cost of cybercrime = $66.66. That rather beastly number is a rough and very modest approximation of the cost of 18 minutes of my tim...

Good evening. Welcome. Just time for a quick update (with apologies to John Oliver and Last Week Tonight). The following links are humbly ...

Willie Sutton was one of the most notorious American bank robbers of the twentieth century, spending two years on the FBI's list of Te...

Here are two links that are essential reading for anyone tempted to invoke the term "cyberwar" to describe the hacking of Sony Pic...

The following letter was written in response to remarks made by the actor and activist, George Clooney, in this article: Hollywood Cowardice...

Let the line A show the rate at which we are increasing the following variables: number of people with cyber skills the amount of res...

If you or your organization is the original creator of the following Sample Information Security Policy then I would like to hear from you:...

I published "Privacy for Business: Web sites and email" in 2002. Much of the content about privacy principles in business is still...

Lately, I've been revisiting an area of information security into which I have dived deeply on several occasions over the years: Disaste...

Last month I tweeted a picture of some computer code that was part of an Internet voting system. That picture was re-tweeted so many times i...

You don't have to watch all of this video to know that Josh Corman has clearly articulated the massive scope of the IT security challeng...

My prediction that data privacy is going to be a hot topic in 2014 was not surprising, but I am surprised at how many interview requests I...

With the number of potential victims of the Target data breach now topping 100 million , a lot of people who have never really given much th...

As we enter 2014 it is clear that two events in 2013 have rocketed data privacy and information security to the highest level of public aw...

I predict, and sincerely hope, that in 2014 most of us information security professionals will stop apologizing whenever we use the letters ...

Here is another of the privacy and security predictions I am making for 2014. This is in addition to the ones I contributed to We Live Secur...

Here is one of the privacy and security predictions I am making for 2014. This is in addition to the ones I contributed to We Live Security ...

First of all, welcome. I am glad you found this page. Please don’t hack it. Who am I? I am a computer security professional with over 20...

Here's an update on the information security stuff we've been writing. Three articles from SearchSecurity by Mike and a link to my a...

Just a quick note to say that the website I created at CelticCurse.org is offline at the moment due to compromise by illegal access. It loo...

Heading Off Advanced Social Engineering Attacks March 18, 2013 An inside look at how social engineering attacks are developed -- ...

This is just a quick post to update links to Cobb-sourced information security resources. Here's a round of articles by Mike Cobb, CISSP...

As you may know from my previous post, my first book on computer security was published in 1992. That led to an invitation to speak at the ...

The Stephen Cobb Complete Book of PC and LAN Security first appeared in print in 1992, an amazing 20 years ago. In celebration of this anni...

I thought I would update the blog for June by listing some of my recent articles and posts from elsewhere, mainly the ESET Threat Blog, unle...

Ouch! After saying that I thought AT&T had done a better-than-average job with its QR code scanner app for the iPhone someone pointed o...