Schneier on Security

OCTOBER 2, 2020

Six months into the pandemic with no end in sight, many of us have been feeling a sense of unease that goes beyond anxiety or distress. It’s a nameless feeling that somehow makes it hard to go on with even the nice things we regularly do. The answer can be found in an extreme thought experiment about death.

Education 351

Education Risk 351

Schneier on Security

AUGUST 7, 2023

A bunch of networks, including US Government networks , have been hacked by the Chinese. The hackers used forged authentication tokens to access user email, using a stolen Microsoft Azure account consumer signing key. The phrase “ negligent security practices ” is being tossed about—and with good reason.

Authentication 229

Authentication Government Hacking Accountability 229

Troy Hunt

JANUARY 29, 2024

That's the analogy I often use to describe the data breach "personal stash" ecosystem, but with one key difference: if you trade a baseball card then you no longer have the original card, but if you trade a data breach which is merely a digital file, it replicates. Ashley Madison.

Data breaches 275

Data breaches Passwords Advertising Personal Security 275

Schneier on Security

AUGUST 23, 2023

Imagine that we’ve all—all of us, all of society—landed on some alien planet, and we have to form a government: clean slate. We don’t have any legacy systems from the US or any other country. We don’t have any special or unique interests to perturb our thinking.

Government 195

Government Artificial Intelligence Technology Hacking 195

Schneier on Security

DECEMBER 15, 2023

In 2016, I wrote about an Internet that affected the world in a direct, physical manner. And it had smarts in the middle, using sensor data to figure out what to do and then actually do it. We’ve been building a world-sized robot without even realizing it. It was connected to your smartphone.

Internet 269

Internet Internet IoT Banking 269

Daniel Miessler

FEBRUARY 2, 2022

There’s something strange about how our InfoSec community is reacting to cryptocurrency, NFTs, and Web3. They find everything interesting and can’t wait to learn about new things. Kind of like people who only like underground bands until they get popular. Everyone’s talking about it. We can do better.

InfoSec 352

InfoSec Internet Internet Cryptocurrency 352

Schneier on Security

JULY 7, 2023

We’re now in a different sort of resource rush, with companies peddling bits instead of oil: generative AI. Everyone is talking about these new AI technologies—like ChatGPT—and AI companies are touting their awesome power. But they aren’t talking about how that power comes from all of us.

Technology 242

Technology Small Business Artificial Intelligence Government 242

Troy Hunt

OCTOBER 4, 2023

Read more: [link] — Have I Been Pwned (@haveibeenpwned) August 16, 2022 When you think about it now, the simple mechanics of purchasing either metaphorical or literal s**t online dictates collecting information that, if disclosed, leaves you anything but anonymous. Now, where have we heard all this before?

Internet 331

Internet Internet Data breaches 331

Schneier on Security

JANUARY 26, 2024

Early on in our respective explorations of ChatGPT, the two of us found ourselves typing a word that we’d never said to a computer before: “Please.” One direction that these chatbots may lead us in is toward a society where we ascribe humanity to AI systems, whether abstract chatbots or more physical robots.

Advertising 262

Advertising Marketing Media Technology 262

Daniel Miessler

MAY 15, 2023

Introduction Purpose Components Attacks Discussion Summary Introduction This resource is a first thrust at a framework for thinking about how to attack AI systems. It’ll take time, but we’ve never seen a technology be used in real-world applications as fast as post-ChatGPT-AI. So things are very early.

Technology 364

Technology Internet Internet Mobile 364

Schneier on Security

OCTOBER 13, 2020

One of the things we learned from the Snowden documents is that the NSA conducts “about” searches. An about search would something like “show me anyone that has used this particular name in a communications,” or “show me anyone who was at this particular location within this time frame.”

Surveillance 337

Surveillance Wireless Accountability Architecture 337

Malwarebytes

MARCH 26, 2024

Federal US authorities have asked Google for the names, addresses, telephone numbers, and user activity of accounts that watched certain YouTube videos, according to unsealed court documents Forbes has seen. In another case, related to a bomb threat, the authorities asked for information about the viewers of eight selected live streams.

VPN 145

VPN Surveillance Mobile Accountability 145

Krebs on Security

OCTOBER 31, 2023

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. “We have not found any legitimate content served through their shorteners.” US phishing domains.

Phishing 254

Phishing Telecommunications Malware Scams 254

Daniel Miessler

JUNE 28, 2022

A problem for who? I think what we’re facing is an instance of the Two-Worlds Problem that’s now everywhere in US society. We’re living in two different worlds. We’re living in two different worlds. That’s why we’re a Tesla family. million people. Is gas expensive?

Cybersecurity 364

Cybersecurity Government Information Security 364

Krebs on Security

MAY 2, 2023

KrebsOnSecurity was recently contacted by a security researcher who said he found a huge tranche of full credit card records exposed online, and that at first glance the domain names involved appeared to be affiliated with the USPS. The website FederalJobsCenter promises to get you a job at the USPS in 30 days or your money back.

Marketing 252

Marketing Advertising Scams Telecommunications 252

Schneier on Security

JANUARY 31, 2024

In October, the Consumer Financial Protection Bureau (CFPB) proposed a set of rules that if implemented would transform how financial institutions handle personal data about their customers. Since most of us can’t reasonably avoid getting a loan or using a credit card, we’re forced to share our data.

Banking 240

Banking Financial Services Marketing Data privacy 240

Krebs on Security

DECEMBER 29, 2023

Nor do I wish to hold forth about whatever cyber horrors may await us in 2024. After wolfing down some food, I tried to slink away to the elevator with another copy aide, but was pulled aside by the guy who hired me. Our advertising partners are how we keep the lights on over here. Being Used to Phish So Many of US?

Phishing 206

Phishing Scams Mobile Advertising 206

Schneier on Security

JUNE 16, 2021

TorrentFreak surveyed nineteen VPN providers, asking them questions about their privacy practices: what data they keep, how they respond to court order, what country they are incorporated in, and so on. I’ve been thinking about this since Trojan Shield was made public. You don’t know who actually owns and runs the VPNs.

VPN 288

VPN Surveillance Encryption Risk 288

Jane Frankland

MARCH 8, 2024

International Women’s Day is one of those annual landmarks that shouldn’t just be about the magnolia-laden rhetoric and floral tributes. It’s a day that should starkly remind us of the work left undone, the chasms unbridged, and the opportunities squandered due to the gender divide. Who’s Asking the Right Question?

Banking 130

Banking Government Technology Cybersecurity 130

Troy Hunt

MARCH 18, 2024

I hate having to use that word - "alleged" - because it's so inconclusive and I know it will leave people with many unanswered questions. But sometimes, "alleged" is just where we need to begin and over the course of time, proper attribution is made and the dots are joined. For my part, I've got 4.8M

Data breaches 347

Data breaches Encryption Identity Theft InfoSec 347

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. I didn’t know either of them, but I have been writing about cryptography, security, and privacy for decades. I thought about it a lot before agreeing. It made sense.

Surveillance 298

Surveillance Computers and Electronics Encryption Government 298

Krebs on Security

AUGUST 16, 2021

“We have determined that unauthorized access to some T-Mobile data occurred, however we have not yet determined that there is any personal customer data involved,” T-Mobile wrote. “This investigation will take some time but we are working with the highest degree of urgency. .

Mobile 308

Mobile Data breaches Accountability Wireless 308

Joseph Steinberg

MARCH 8, 2022

At the same time, however, your virtual graffiti efforts have allowed us to learn quite a bit about the vulnerabilities present in our computer systems – and we are applying that knowledge now to fortify our defenses, starting, of course, with systems far more important to us than the websites that you chose to deface.

Artificial Intelligence 342

Artificial Intelligence Hacking Penetration Testing Government 342

Schneier on Security

MAY 11, 2023

We will all soon get into the habit of using AI tools for help with everyday problems and tasks. We should get in the habit of questioning the motives, incentives, and capabilities behind them, too. Imagine you’re using an AI chatbot to plan a vacation. But we’re not there yet.

Artificial Intelligence 287

Artificial Intelligence Computers and Electronics Risk Technology 287

Krebs on Security

NOVEMBER 17, 2022

“We’ve found someone who can crack the encryption.” ” Peter, who spoke candidly about the attack on condition of anonymity, said the FBI told him to contact a cybersecurity consulting firm in New Jersey called Unit 221B , and specifically its founder — Lance James. ” they wrote.

Ransomware 300

Ransomware Encryption Backups Healthcare 300

Duo's Security Blog

FEBRUARY 19, 2024

The Cisco Duo team is filled with excellent researchers, designers, product managers, engineers, and more who know what we are doing when it comes to building a great product - but we also know that we are better together with input from our customers. Duo Care Premium Support was created because we really do care.

Engineering 104

Engineering Accountability Cybersecurity 104

Jane Frankland

JULY 27, 2022

This week, I’m writing to you about call-out culture. I’ve taken inspiration from a post on this topic by Andrea Gibson from Button Poetry who wrote recently about this and community behaviour. . To do that, we need to know how to handle online criticism and to have guardrails. Behaving this way builds trust.

Education 130

Education Authentication CISO Accountability 130

Daniel Miessler

SEPTEMBER 13, 2020

I think we’ve lost the plot on disinformation. Ideally we’d reduce both the attacks and the vulnerability. Of course it would be nice to keep attacks from being used against higher numbers of vulnerable people. Of course it would be nice to keep attacks from being used against higher numbers of vulnerable people.

Education 346

Education Scams Government Information Security 346

Malwarebytes

NOVEMBER 22, 2023

Question: Who said the sentence below? Privacy is at the heart of everything we do.” Google makes lots and lots of money by knowing what we are looking for. And to achieve that goal it needs to gather as much information as possible about us. But so far, big tech is consistently letting us down in this regard.

Identity Theft 128

Identity Theft Consumer Protection Surveillance Data privacy 128

Jane Frankland

MARCH 12, 2024

It buys us smiles, polite nods, and superficial harmony. ”—the taglines of niceness are scripts we’ve all memorised. It’s about understanding the value of being kind to yourself as well as to others. On the surface, both suggest a pleasantness, a quality of being agreeable or gentle in nature.

Cyber Attacks 162

Cyber Attacks Authentication 162

Anton on Security

DECEMBER 21, 2021

As we discussed in “Achieving Autonomic Security Operations: Reducing toil” (or it’s early version “Kill SOC Toil, Do SOC Eng” ), your Security Operations Center (SOC) can learn a lot from what IT operations learned during the SRE revolution. To me, this constitutes current conventional wisdom about automation in your SOC.

Engineering 338

Engineering Phishing Technology Ransomware 338

Security Affairs

APRIL 28, 2024

ICICI Bank, one of the leading private banks in India, accidentally exposed data of thousands of new credit cards to customers who were not the intended recipients. As an immediate measure, we have blocked these cards and are issuing new ones to the customers.” “We regret the inconvenience caused.

Banking 73

Banking Financial Services Retail Mobile 73

Thales Cloud Protection & Licensing

NOVEMBER 1, 2023

Thales Wins Big in 2023 madhav Thu, 11/02/2023 - 05:09 Here at Thales, we are incredibly proud of what we do. Protecting our customers from cybersecurity threats brings us immense satisfaction, and being recognized for our efforts is both humbling and validating. It’s heartening to be recognized for our efforts.

Marketing 143

Marketing Cybersecurity Technology CISO 143

Security Boulevard

APRIL 11, 2024

Moderately relevant AI made image about AI papers :-) steampunk ofc! We also don’t touch on responsible AI and AI ethics because frankly there are many (and I mean … MANY!) We also don’t touch on responsible AI and AI ethics because frankly there are many (and I mean … MANY!) experts on this here and they’re not us.

Artificial Intelligence 62

Artificial Intelligence Government Risk Technology 62

Malwarebytes

APRIL 12, 2024

After seeing their Social Security Number (SSN) leaked in the AT&T breach , some US citizens are wondering if and how they can change their SSN. But if you’ve ever had to abandon an email address that you used for years, imagine all of the hassle that came with that, and then imagine it being about 10 times worse.

Insurance 107

Insurance Identity Theft Government Banking 107

IT Security Guru

JULY 10, 2023

I don’t typically like awards; let’s be honest, more often than not, they’re pay to play – and most of us see them for what they are! It begs the question; how come we ended up running an award that literally makes no money and takes a huge amount of time to organise for the heroes that work for me – Beth Smith and Nicole Sigrist?

CISO 100

CISO Security Awareness Marketing Government 100

Security Boulevard

APRIL 8, 2024

Every border crossing meant proving your identity – who you were, where you came from, your purpose. Today's identity struggles aren't about camel caravans and silk, but that same core battle remains: proving who you are and protecting that identity from those who'd use it against you. This one makes your heart sink.

Identity Theft 62

Identity Theft Passwords Banking Password Management 62