Compromised Network Indicators and Secure Application Risk Mitigations

Cybersecurity & Infrastructure Security Agency. (2021). Best practices for securing your home network [CSIA Guide 21-01]. U.S. Department of Homeland Security. https://www.cisa.gov/sites/default/files/publications/CISA_H…

November 3, 2025 · 3 min · 622 words · Joshua Wortz

Secure Software Development Life Cycle (SDLC) Phase Analysis and Control Gates

GeeksforGeeks. (2025). Top 8 Software Development Models Used in Industry. https://www.geeksforgeeks.org/software-engineering/top-8-software-development-models-used-in-industry/…

October 27, 2025 · 4 min · 827 words · Joshua Wortz

Supply Chain Cyber Attack Investigation: Root Cause Analysis, Impact Scoping, and Remediation

In late 2024, 1inch, a leading decentralized exchange (DEX), became one of several organizations indirectly impacted by a sophisticated supply chain attack on the open-source Lottie Player web component. The attacker did…

October 18, 2025 · 9 min · 1835 words · Joshua Wortz

Post-Exploitation Detection and Network Reconnaissance Signature Analysis

Open-source tools used by attackers are often the same tools defenders rely on for network visibility, troubleshooting, and validating security controls. This dual-use nature creates both risk and opportunity. Attackers …

September 29, 2025 · 8 min · 1489 words · Joshua Wortz

Open Source Intelligence (OSINT) and Mobile Telemetry for Blue Team Defense

Protecting an enterprise environment requires defenders to think like attackers. One of the best ways to prepare defenses is to anticipate how adversaries can gather and leverage publicly available information, exploit u…

September 20, 2025 · 7 min · 1338 words · Joshua Wortz

Honeypots and Deception Technologies: Strategic Attacker Disruption and Early Warning

Honeypot and deception methodologies, along with the technologies designed to implement them for proactive defense, have gained popularity in recent years. Understanding the threat landscape is one of the most fundamenta…

September 14, 2025 · 5 min · 1042 words · Joshua Wortz

Cybersecurity and International Law: State Sovereignty, Tallinn Manual, and Extraterritorial Jurisdiction

The growing reliance on interconnected technology ecosystems has magnified the risk of large-scale cyber incidents that transcend national borders. These risks extend beyond traditional cybercrime to sophisticated state-…

August 11, 2025 · 8 min · 1569 words · Joshua Wortz

HyperBeard COPPA Compliance Analysis: Children's Online Privacy Enforcement

As the digital gaming market continues to expand, so too do the regulatory responsibilities of developers, particularly those creating content for children. In 2020, the Federal Trade Commission (FTC) announced a settlem…

August 1, 2025 · 6 min · 1083 words · Joshua Wortz

The Blue Team Mindset: Active Defense, Telemetry Engineering, and Defensive Posture

Cybersecurity today is defined by a dynamic contest between defenders and adversaries. Organizations operate in an environment where advanced persistent threats, ransomware, and supply-chain compromises continually chall…

August 1, 2025 · 7 min · 1361 words · Joshua Wortz

DMCA and IoT Security: Legal Analysis of Reverse Engineering, Firmware Access, and Copyright Protections

The rise of the Internet of Things (IoT) has transformed the digital landscape, connecting everything from home appliances to critical infrastructure systems. This technological evolution has opened new opportunities but…

July 28, 2025 · 9 min · 1832 words · Joshua Wortz