Tag: CISSP
The npm Supply Chain Attack
On May 11, 2026, over 170 npm packages were poisoned in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, and OpenSearch. This post breaks down what happened, why it matters, and what every professional needs to know — with dedicated insights for CISSP, CCSP, and AAISM certification candidates. … More The npm Supply Chain Attack
Threat Modelling with STRIDE: A Practitioner’s Guide to Systematic Security Design
STRIDE is one of the most effective frameworks for systematic threat identification at the design stage. This practitioner's guide covers the methodology, toolchain, and application in modern cloud and API architectures. … More Threat Modelling with STRIDE: A Practitioner’s Guide to Systematic Security Design
Navigating the Depths of Cryptography: A CISSP Recap
Navigating the Depths of Cryptography: A CISSP Recap Hey there, friends! Welcome back to another episode of “Concepts of CISSP.” Today, I’m excited to dive into a recap of our last discussion, focusing on the intriguing realm of cryptography. So grab a seat, and let’s embark on this journey together. In our previous video, we … More Navigating the Depths of Cryptography: A CISSP Recap
CISSP Series Domain3 Episode 24 – Cryptography 1000ft overview #cissp
Welcome back!!! It’s been a while since our last episode in the CISSP series, but I’m thrilled to dive back into the fascinating world of information security with you all. Apologies for the delay; life has a way of keeping us on our toes, doesn’t it? But here we are, ready to unravel the mysteries … More CISSP Series Domain3 Episode 24 – Cryptography 1000ft overview #cissp
Risk Appetite vs. Risk Tolerance
Let’s use a metaphorical scenario to create a vivid representation in words to understand the difference between risk appetite and risk tolerance in cybersecurity: Imagine a Tightrope Walker: Risk Appetite: Risk Tolerance: Key Takeaway from this analogy: In cybersecurity, just like the tightrope walker needs both a daring spirit and a safety net, organizations need … More Risk Appetite vs. Risk Tolerance
Spectre and Meltdown
Spectre: Spectre is a type of security vulnerability that exploits speculative execution in modern computer processors. In simple terms, processors try to predict what tasks they’ll need to do next to speed things up, and Spectre takes advantage of this prediction process. It’s like guessing what the chef is going to cook next and using … More Spectre and Meltdown
It is worth revisiting the famous “Seven Acts of Courage”
CISSP Series A-Z – Domain1 Complete
This is the running YouTube Playlist i am working on to cover complete CISSP syllabus in my way of explaining. Subscribe to it if you find this useful.
How to pass CISSP Exam
A brief strategy discussion

