Executive summary ISO/IEC 42001 is the first international management system standard dedicated to artificial intelligence. It provides a structured, auditable framework to govern AI systems across their lifecycle. For organisations using AI in production, the standard addresses growing regulatory pressure, operational risk, and accountability expectations by embedding AI governance, risk management, and continual improvement into… Continue reading ISO/IEC 42001: Implementing an Artificial Intelligence Management System (AIMS)

The security.txt file is a standardized mechanism that allows organizations to clearly communicate how security vulnerabilities should be reported for their website or online service. It acts as a single, authoritative source of truth for security researchers, ethical hackers, and automated tools looking to disclose vulnerabilities responsibly. Purpose of security.txt The primary goal of security.txt… Continue reading What Is security.txt and Why It Matters for Websites

Reverse shells are a common technique in penetration testing to gain remote interactive access to a machine. They rely on the target system initiating an outbound connection to an operator-controlled host. One of the simplest examples uses Bash and the /dev/tcp interface. What the Command Does This command tells Bash to: When successful, the remote… Continue reading Understanding Bash Reverse Shells and Port Listeners

Here is a list of actual Threat Hunting Queries based on OSQuery / SQL and Apache Solr Language Sensor Analysis Active Sensor Policies Schedule: As neededDescription: See every policy running on the sensor.Results: Lists policies running on the sensor, such as ASMI, DRE, and console-defined policies. Console-defined policies include the policy name and time stamp.Carbon Black Recommendation: Run this… Continue reading Threat Hunting Jitsu

You can create a lightboard effect in Zoom using a Wacom tablet through two primary methods: using the built-in Zoom Whiteboard feature for simple digital inking, or by using Open Broadcaster Software (OBS) Studio with a physical lightboard for a professional “transparent glass” effect.  and use Picture-in-Picture Mode. You can purchase your own, or do this virtually for better… Continue reading Lightboard Effect using Wacom

Introduction Threat modelling enables security teams to answer four core questions: This process helps organizations reduce risk, demonstrate due diligence, improve controls, and ensure readiness if a breach occurs. 1. What Are We Working On? This stage defines context and establishes the scope of the analysis. Frameworks and Methodologies Common threat modelling methods include: Identify… Continue reading Threat Modelling Manfiesto

https://isaiprofitable.com The fastest growth is Algorithms and a break through to make them better is close. I started writing this blog start of December 2025 and m research was telling me that Apple Mac was the way to go for local AI, even though Nvidia for Image Generation and Linux support is far superior ,… Continue reading Local AI is the Future [ Perpetually in Draft] Published – 2025/11/20 at 11:00 pm

The first AI driven APT espionage campaign is here. This Anthropic report is a huge turning point for our industry. It documents the first known AI led espionage campaign by an APT group, running intrusion chains at machine speed and breaching around 30 organisations. Around 80 to 90 percent of the operation was handled autonomously,… Continue reading AI driven APT espionage campaign

Australian Information Commissioner v Australian Clinical Labs: first civil penalty under the Privacy Act When lawyers get involved in cyber security, it usually means they sense money and things are getting real. CISOs, CIOs, and CEOs are now facing real-world consequences. When Australian Clinical Labs Limited (ACL) was fined AUD 5.8 million by the Federal… Continue reading A Seismic Shift for Cyber Leaders: The First Civil Penalty under the Privacy Act 1988 (Cth)

Figure 1: Cringe AI Image! I’ve been using Excel to create an expense report. I export or copy and paste my credit card data into Excel, sanitize it, add categories, and then import it into a Pivot Table to analyze all our expenses. I switched to Google Sheets to share it with my wife but… Continue reading Vibe Coding a Pivot Table