cybersecurity-writing-course 
Lenny Zeltser
DECEMBER 20, 2018
My new writing course for cybersecurity professionals teaches how to write better reports, emails, and other content we regularly create. It captures my experience of writing in the field for over two decades and incorporates insights from other community members. Why “hack”?
Lenny Zeltser
JUNE 13, 2024
Creating an informative and readable report is among the many challenges of responding to cybersecurity incidents. This blog highlights my advice on writing such incident reports. In general, people want to know the following about a cybersecurity incident: What happened and when? Download it and take a look.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MARCH 9, 2024
The issue is an out-of-bounds write vulnerability that can be exploited by sending specially crafted HTTP requests to vulnerable instances. A out-of-bounds write vulnerability [CWE-787] in FortiOS may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.” reads the advisory.
Lenny Zeltser
JULY 1, 2020
Writing about cybersecurity threats, such as phishing campaigns, malware infections, and attack groups, is challenging for many reasons. I’m happy to share what I’ve learned over the years about writing effective threat reports in the following 36-minute video. How should you decide what details to include?
Schneier on Security
FEBRUARY 22, 2022
The devil is in the details, of course, but he’s 100% right when he writes that the market cannot solve this: that the incentives are all wrong. While he never actually uses the word “regulation,” the future he postulates won’t be possible without it. Or the surveillance capitalists, for that matter.
Lenny Zeltser
APRIL 19, 2020
You can now take my malware analysis and cybersecurity writing courses online in two formats at SANS Institute, depending on how you prefer to learn: OnDemand: Self-paced, recorded training with four months of access to course materials and labs. Cybersecurity Writing. Malware Analysis.
Schneier on Security
OCTOBER 8, 2019
It's cracking down on the whistleblowers and reporters who write their stories. Of course, now everyone is writing about the story. I am at this conference, speaking on Wednesday morning (today in Australia, as I write this). ACSC used to have its own government cybersecurity conference. I hope it's the last.
Expert insights. Personalized for you.
96 
Let's personalize your content