Krebs on Security

MARCH 22, 2024

On March 14, KrebsOnSecurity published a story showing that Onerep’s Belarusian CEO and founder Dimitiri Shelest launched dozens of people-search services since 2010, including a still-active data broker called Nuwber that sells background reports on people. Onerep and Shelest did not respond to requests for comment on that story.

Media 245

Media Government Data breaches Marketing 245

Jane Frankland

MARCH 12, 2024

Could these two seemingly synonymous words actually spell out different narratives in the screenplay of our lives? It’s the glossy finish on the surface of our day-to-day exchanges. It’s about understanding the value of being kind to yourself as well as to others. But is there more to it? Why Draw a Line?

Cyber Attacks 162

Cyber Attacks Authentication 162

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. I didn’t know either of them, but I have been writing about cryptography, security, and privacy for decades. I thought about it a lot before agreeing.

Surveillance 293

Surveillance Computers and Electronics Encryption Government 293

Schneier on Security

FEBRUARY 13, 2021

Bloomberg News has a major story about the Chinese hacking computer motherboards made by Supermicro, Levono, and others. The US government has known about it for almost as long, and has tried to keep the attack secret: China’s exploitation of products made by Supermicro, as the U.S. Yes, it’s plausible.

Surveillance 357

Surveillance Government Internet Internet 357

The Last Watchdog

SEPTEMBER 14, 2023

Leveraging WebAssembly’s sandboxing capabilities allows us to isolate potential risks, while Rust provides the memory safety essential for our modern internet applications. Our major platforms, tools integral to modern life, are now used as vehicles for misinformation and chaos. The trust deficit we experience today is palpable.

Internet 267

Internet Internet Technology Risk 267

Schneier on Security

NOVEMBER 13, 2020

It feels like writing this story was a welcome distraction from writing about the US election: “No one has to worry about the integrity of our bird election,” she told Radio New Zealand, adding that every vote would be counted.

308

308

Krebs on Security

FEBRUARY 7, 2023

KrebsOnSecurity will likely have a decent amount of screen time in an upcoming Hulu documentary series about the 2015 megabreach at marital infidelity site Ashley Madison. What stood out about the inquiry from Wall to Wall was that their researchers had already gathered piles of clues about the breach that I’d never seen before.

Media 202

Media 202

Troy Hunt

JULY 20, 2023

I doubt there is a more well known name in our industry but if he’s unfamiliar to you (or you haven’t read this book), go and grab “Ghost in the Wires” which is an exceptional read. Watch the demo today! 🤯 (the.mil conflation with.ml

InfoSec 169

InfoSec 169

Anton on Security

SEPTEMBER 13, 2023

I want to share a few additional things here on top our official launch blog. Notice, for example, that I was asking every guest on these podcast episodes about their view of this topic. By the way, it became very clear to me that most sane people today are more concerned about data theft rather than about the freakin’ robot rebellion.

Artificial Intelligence 130

Artificial Intelligence CISO Software Government 130

Anton on Security

JANUARY 10, 2024

So, we ( Tim and Anton , the crew behind the podcast ) wanted to post another reflections blog based on our Cloud Security Podcast by Google being almost 3 (we will be 3 years old on Feb 11, 2024, to be precise), kind of similar to this one. But we realized we don’t have enough new profound reflections…. We do have a few fun new things!

Cloud Migration 130

Cloud Migration Government Network Security Risk 130

The Security Ledger

NOVEMBER 14, 2023

Like the actual favelas and shanty towns that have sprung up in developing nations over the last century, our application ecosystem is sprawling, unregulated, ad-hoc and prone to shocking. » Related Stories Sickened by Software? Read the whole entry. »

Software 98

Software Hacking Data breaches 98

Anton on Security

AUGUST 30, 2023

So, if you are too busy to read our amazing (duh!) You can do this, using ̶p̶o̶w̶e̶r̶f̶u̶l̶ ̶A̶I̶ ̶v̶o̶o̶d̶o̶o̶ ̶m̶a̶g̶i̶c̶ many of the approaches and practices ( our blog again has the details ) that you should have started doing years ago, but most never did. Don’t just read this blog about the blog, just read the blog.

Firewall 130

Firewall Software Threat Detection Cybersecurity 130

Jane Frankland

MARCH 8, 2024

International Women’s Day is one of those annual landmarks that shouldn’t just be about the magnolia-laden rhetoric and floral tributes. It’s about access, it’s about scaling opportunities, it’s about leveraging 50% of the global population to their fullest potential.

Banking 130

Banking Government Technology Cybersecurity 130

Krebs on Security

FEBRUARY 9, 2024

George discovered that after logging in with a regular customer account, Juniper’s support website allowed him to list detailed information about virtually any Juniper device purchased by other customers. We are actively working to determine the root cause of this defect and thank the researcher for bringing this to our attention.”

Artificial Intelligence 257

Artificial Intelligence Healthcare Accountability Banking 257

Krebs on Security

OCTOBER 5, 2022

“It’s hit like hell since about January of this year. Virtually all of these profiles were removed from LinkedIn after KrebsOnSecurity tweeted about them last week. “I wrote our LinkedIn rep and said we were considering closing the group down the bots were so bad,” Miller said.

Accountability 259

Accountability Scams Artificial Intelligence Cryptocurrency 259

Krebs on Security

AUGUST 19, 2021

Reached via LinkedIn, Sociogram founder Oluwaseun Medayedupin asked to have his startup’s name removed from the story, although he did not respond to questions about whether there were an inaccuracies in Hassold’s report. Open our letter at your email. Image: Abnormal Security. billion in 2020. Image: FBI.

Ransomware 355

Ransomware Social Engineering Cybercrime Scams 355

Cisco Security

MAY 21, 2021

In the latest episode of the Security Stories podcast , we welcome three leaders from Cisco Talos for a discussion on mental health, stress and burnout. Check it out on your podcast platform of choice, available via the Security Stories webpage. . Sharing our experiences.

117

117

Schneier on Security

MAY 16, 2019

Studying this case, our experts found other samples that used similar algorithms. According to our researchers, the attackers either had access to the source code of the victims' projects or they injected malware at the time of project compilation, meaning they were in the networks of those companies. Me on supply chain security.

Malware 235

Malware 235

Adam Shostack

FEBRUARY 15, 2021

I really like how he doesn’t complain about the communication issues between security and management, but offers up a concrete suggestion for improvement. Improve defenses by adding one test case for each of STIDE per sprint to existing code for at least 75% of sprint stories. ”).

239

239

The Security Ledger

SEPTEMBER 5, 2022

In our latest podcast, Paul caught up with Sick Codes (@sickcodes) to talk about his now-legendary presentation at the DEF CON Conference in Las Vegas, in which he demonstrated a hack that ran the Doom first person shooter on a John Deere 4240 touch-screen monitor. Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk.

Hacking 98

Hacking Cyber Risk Software Risk 98

Cisco Security

APRIL 26, 2022

For my very first interview for the Security Stories podcast , I met a wonderful person called Mick Jenkins, MBE. Mick is sadly no longer with us, but his story will stay with me forever. I’ve been thinking about those words a lot lately, and what they mean (for me, at least). Make it about something else.

CISO 111

CISO Data privacy Cybersecurity Technology 111

Security Boulevard

APRIL 11, 2024

Moderately relevant AI made image about AI papers :-) steampunk ofc! Recently our team has written several papers and blogs focused on securing AI. The post Our Security of AI Papers and Blogs Explained appeared first on Security Boulevard. source ) Related blogs: New Paper: “Securing AI: Similar or Different?“

Artificial Intelligence 62

Artificial Intelligence Government Risk Technology 62

Adam Shostack

DECEMBER 16, 2020

What are the Russians going to do with plans for our nuclear weapons? Plans for our next generation weapons may, indeed, be useful to them for finding weaknesses in those systems or copying them. Focusing in on assets helps us tell stories about those assets. This is assets in the sense of things which are valuable to us.

Government 182

Government Hacking 182

Daniel Miessler

APRIL 2, 2023

There is much being said right now about the AI Alignment Problem. Russell argues that we need uncertainty built into our alignment efforts. We don’t know what AI will do when it wakes up, but we should try present it our best self. It would be hard for us to invite phytoplankton to our next city council meeting.

Information Security 168

Information Security 168

Security Boulevard

JUNE 25, 2023

Paul Asadoorian, OG security podcaster and host of the popular Paul’s Security Weekly podcast, joins us in this episode to talk about his career as one of the original security podcasters. The post Security Podcasting, Hacking Stories, and The State of Firmware Security with Paul Asadoorian appeared first on Security Boulevard.

Firmware 52

Firmware Hacking Internet Internet 52

SecureWorld News

OCTOBER 10, 2023

Our goal is to unite technologists and IT professionals worldwide around breast cancer awareness, education, and fundraising, maximizing the collective impact in the fight against breast cancer. What do you wish more people knew about Tech Day of Pink? At ELC, I know our employees will rally for the issues they deeply care about.

Education 93

Education Media Cybersecurity Mobile 93

Krebs on Security

SEPTEMBER 30, 2023

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. “I’ve been using this login since about 2013 on all the forums where I register, and I don’t always set a strong password. .

Ransomware 206

Ransomware Accountability Cybercrime Backups 206

CyberSecurity Insiders

OCTOBER 26, 2021

While October is famous for National Cybersecurity Awareness Month , and we provide resources and recommendations for our customers, really every month should focus on this business-critical topic. Stories from the SOC. The most recent story is about detecting and remediating data exfiltration in our SOC for a customer.

Cybersecurity 128

Cybersecurity Threat Detection Energy and Utilities Ransomware 128

Jane Frankland

FEBRUARY 14, 2024

And as I dive into this debate with you, I’m going to explore how nurturing a culture of love—where dedication, empathy, and connection thrive—can lead to more sustained and fulfilling corporate success stories in our cybersecurity field. Examples and Case Studies Some of the most enduring business stories are marked by love.

Cybersecurity 100

Cybersecurity Authentication Marketing Accountability 100

Anton on Security

DECEMBER 8, 2023

In recent weeks, coincidentally, I’ve had several conversations that reminded me about the confusion related to “modern SOC.” It is tempting to point at that approach, as we did in our original ASO paper , as the best model for modern “SOC” (even if you don’t want to call it “a SOC”, because the letter “O” is not truly relevant anymore).

Engineering 130

Engineering Phishing 130

Malwarebytes

FEBRUARY 6, 2024

When I was asked to write about the topic, I misunderstood the question and heard: “can you cover save the internet” and we all agreed that it might be too late for that. While we laughed about it, it made me think. But in our defense, criminals have gotten a lot better at convincing us to do the “wrong” things.

Internet 81

Internet Internet Media Artificial Intelligence 81

The Last Watchdog

MAY 30, 2022

Better still, cybersecurity jobs offer the individuals who have served our country a fulfilling career. While veterans are well-suited to transition into cybersecurity, there is often a disconnect when raising awareness about these opportunities and outlining paths to entry.

Cybersecurity 261

Cybersecurity InfoSec Education Cyber threats 261

The Last Watchdog

APRIL 30, 2023

I spoke at length with Ravi Srivatsav and Venkat Thummisi of InsideOut Defense , and separately with Venkat Raghavan , founder and CEO of Stack Identity, all about reconstituting IAM. about the role of advanced wearable authentication devices, going forward. And thus they are destined to endure as our primary user interface.

Mobile 200

Mobile Cloud Migration Penetration Testing Authentication 200

Cisco Security

JUNE 13, 2022

In cyber security, we are used to two types of stories. The first story is common for reports written by humans. The second story comes from machine detections. It is much terser in content and sometimes leaves us scratching our heads. Instead, they attempt to seek the first story type. The challenge.

DNS 106

DNS Engineering Authentication Malware 106

Malwarebytes

MARCH 13, 2023

By just a few messages later, "Thomas Smith" had run off, refusing to respond to Holmes' follow-up requests about what body part she fancied, along with her preferred seasoning (paprika). And, there's the story of the fake Brad Pitt: " My favorite story is Brad Pitt and the the dead tumble dryer repairman. I'm not weird lol."

Scams 92

Scams Malware Accountability Cybersecurity 92

Security Boulevard

AUGUST 30, 2021

Information security is no longer staying on our laptops and in our browsers. As our devices become increasingly interconnected too, we have to start thinking about the security of our IoT devices. We talk about the business, people, products, and culture of technology?—?with with a security twist.

IoT 104

IoT Hacking Education Technology 104

Kali Linux

FEBRUARY 27, 2024

As this is our the first release of the year, it does include new visual elements! Along with this we also have some exciting new mirrors to talk about, and of course some package changes - both new tools and upgrades to existing ones. Here’s the story. Hello 2024! Today we are unveiling Kali Linux 2024.1.

Software 145

Software Firmware VPN Internet 145