Ben Schmerler

Find me on:

Recent Posts

Why Do Organizations Struggle to Scope Penetration Tests Effectively?

During my time at ISE, I have scoped out a lot of pen tests. I’ve scoped so many, the details start to blur. But while the fine details may fade over time, I see a few problems ...
Penetration Testing Read article

Wrapping Your Mind Around a Salt Typhoon

Around August 2024, the media began reporting on a troubling hack. The Chinese backed hacking group, Salt Typhoon, had gained persistence in two major Internet Service Provider ...
Read article

Why People are so Wishy-Washy When Talking About Security

A few weeks ago, I attended RSA Conference with the ISE team as a part of the IoT Village. We set up an exhibit in the RSA Sandbox to talk about some of the cool stuff we do when ...
Read article

Praise the Hacker

At Defcon 31, I was chatting with my colleague Mickey about random stuff as he was running our CTF, and the topic of dedication and persistence came up when it came to effective ...
Read article

Lessons About 3rd Party Risk and Application Security from MOVEit

By now, you probably heard about the cascade of data breaches that occurred because of a zero-day vulnerability in the MOVEit file transfer application that was exploited by the ...
Read article

Level Up Your Security: Discover the Advantages of Increased Effort in a Security Assessment

We all make choices about effort. There are only so many hours in a day, and there are only so many things we can focus our energy on. It’s not just about personal energy, but ...
Read article

What's the Point in Hacking Toilets?

So…what’s the point in hacking toilets?
Read article

Who should be responsible for security?  Providers or Stakeholders?

A discussion with Steve Bono, Founder and CEO of Independent Security Evaluators. One of the great things about working with security experts with different backgrounds and ...
Read article

Log4J One Year Later: What You Need To Know

Effective security management relies on consistent disciplines like maintaining technology, incorporating security into design, and regular assessments to identify ...
Read article

Subscribe to Our Blog

Stay up-to-date on the latest ISE and cybersecurity news.

We're committed to your privacy. ISE uses the information you provide to us to contact you about our relevant content, products, and services. You may unsubscribe from these communications at any time. For more information, check out our privacy policy.