Adam Shostack

JANUARY 2, 2025

[no description provided] For Threat Model Thursday, I want to use current events here in Seattle as a prism through which we can look at technology architecture review. Let's transition from the housing crisis here in Seattle to the architecture crisis that we face in technology. No, actually, I'm not quite there.

Architecture 130

Architecture Marketing Technology Software 130

IT Security Guru

JANUARY 9, 2025

Key elements in protecting against AI-driven threats include timely software updates, network security improvements and strong password policies. Resolution #2: Take a Quantum Leap in Security As quantum computing improves, organizations must prepare today to address the security risk posed by this emerging technology.

Cybersecurity 113

Cybersecurity Cyber threats Architecture Digital transformation 113

eSecurity Planet

NOVEMBER 18, 2021

Gartner analyst Ruggero Contu noted that security risks are becoming external: the software supply chain , the public cloud , the trading of breached data, and IoT and operational technology (OT) are all threats outside of traditional perimeter security. Security analytics, intelligence and triggers. A distributed identity fabric.

Technology 136

Technology Cybersecurity Architecture Ransomware 136

CyberSecurity Insiders

MAY 17, 2023

” Or said another way, “architecture matters”. Gartner provides several statistics to help us understand the reason: · Gartner surveys in 2020 showed 80% of enterprises using IaaS are multi-cloud · In 2024, 60% of IT spending on application software will be directed at Cloud technologies. · Ask the critical questions.

Architecture 136

Architecture Engineering Marketing Internet 136

Google Security

OCTOBER 15, 2024

Posted by Alex Rebert, Security Foundations, and Chandler Carruth, Jen Engel, Andy Qin, Core Developers Error-prone interactions between software and memory 1 are widely understood to create safety issues in software. It is estimated that about 70% of severe vulnerabilities 2 in memory-unsafe codebases are due to memory safety bugs.

Computers and Electronics 119

Computers and Electronics Software Risk Architecture 119

Adam Shostack

JANUARY 2, 2025

In his excellent blog post on " Who Pays? ," Steve Bellovin discusses how "achieving a significant improvement in a product's security generally requires a new architecture and a lot of changed code. We can demand that vendors pay, even many years after the software has shipped. Compatability is harder.

Software 130

Software Insurance Architecture Government 130

The Last Watchdog

JULY 19, 2023

Here are a few takeaways: A converged ecosystem Cloud migration and rapid software development were both on a rising curve when Covid 19 hit and the global economy suddenly shut down in 2020. the architecture must come first, and then they can decide which product choices they would prefer.”

CISO 244

CISO Architecture Network Security Technology 244

The Last Watchdog

DECEMBER 16, 2024

Ransomware targeting critical services highlights the need for secure software lifecycles and vendor verification. With adversaries destroying backups to increase extortion payouts, recovery will grow harder and slower, emphasizing the need for stronger security controls and architecture.

Cyber threats 264

Cyber threats CISO IoT Phishing 264

Krebs on Security

DECEMBER 1, 2022

ConnectWise , which offers a self-hosted, remote desktop software application that is widely used by Managed Service Providers (MSPs), is warning about an unusually sophisticated phishing attack that can let attackers take remote control over user systems when recipients click the included link. build and the then-canary 22.9

Phishing 315

Phishing Architecture Passwords Accountability 315

The Last Watchdog

NOVEMBER 8, 2021

M&A invariably creates technology gaps that bad actor’s prey upon. Access controls are the nexus of security and the expanding perimeter, and zero trust is the architecture that encompasses it. Zero trust is an all-inclusive security and privacy architecture. Patient data exposures.

Healthcare 268

Healthcare Technology Architecture IoT 268

The Last Watchdog

NOVEMBER 4, 2019

Blockchain technology in 2019 may prove to be what the internet was in 1999. Blockchain, also referred to as distributed ledger technology , or DLT, is much more than just the mechanism behind Bitcoin and cryptocurrency speculation mania. However, cryptocurrencies are only one small part of blockchain technology.

Technology 179

Technology Cryptocurrency Internet Internet 179

Adam Shostack

JANUARY 2, 2025

Bugs, tickets, stories and the like are all intended as actionable elements of software development. I suspect that there are extreme impedance mismatches between software developers and people who get PhDs in ethical AI. Stop and reflect doesnt fit that mold.

Architecture 130

Architecture Accountability Software Risk 130

Duo's Security Blog

DECEMBER 6, 2022

Experts in the fields of data protection and information security now look towards new technologies to make system access much more secure. In this article, we will go in-depth on the basic building blocks of passwordless technology: WebAuthn, FIDO, CTAP, FIDO2, and how it all comes together for the user. What is WebAuthn?

Architecture 121

Architecture Authentication Passwords Technology 121

Hacker's King

MAY 15, 2025

As with any other field, accuracy, time, and synchronization are of the essence in architecture and design. The architecture world is slowly adapting to new changes, and one notable tool is the qoruv.com Architect App. Design Suggestions Powered by AI Innovative qoluv.com has incorporated AI technology to a new extent.

Architecture 52

Architecture Technology Artificial Intelligence Engineering 52

eSecurity Planet

APRIL 7, 2023

DMZ networks are also helpful for separating out third-party servers, routers, and other technologies and platforms that don’t have as many manageable security features and controls built in. DMZ networks typically contain external-facing resources such as DNS, email, proxy and web servers.

Architecture 103

Architecture Firewall Network Security Technology 103

eSecurity Planet

NOVEMBER 30, 2021

PAM software is based on the principle of Least Privilege Access, which is about granting users access to and control over only the specific segments of a network they need to do their job. What to Look for in Privileged Access Management Software. Best Privileged Access Management (PAM) Software. BeyondTrust. ThycoticCentrify.

Software 137

Software Accountability Government Passwords 137

eSecurity Planet

DECEMBER 20, 2023

Attack surface management (ASM) is a relatively new cybersecurity technology that combines elements of vulnerability management and asset discovery with the automation capabilities of breach and attack simulation (BAS) and applies them to an organization’s entire IT environment, from networks to the cloud.

Software 115

Software Risk Architecture Internet 115

The Last Watchdog

JUNE 6, 2022

Both the technology and the teams responsible for specific cyber assets tend to operate in silos. Software-defined everything is the mantra and mushrooming complexity is the result. And cloud-hosted, data analytics technology is now readily available to ask smart questions about network security, at scale, and get actionable answers.

Network Security 262

Network Security Cloud Migration Digital transformation Technology 262

SecureWorld News

MAY 2, 2025

This reality is driving demand for IoT security solutions, cloud security posture management, and zero-trust network architectures to secure an ever-widening perimeter. As virtual care becomes a standard offering, healthcare organizations are recognizing the need to secure telehealth software and protect remote connections.

Healthcare 101

Healthcare Marketing Cybersecurity CISO 101

SecureList

JANUARY 17, 2025

Their report is a good starting point for diving deep into the MBUX internals and understanding the architecture of the system. In our research, we used a combination of diagnostic tools: a certain hardware interface and a corresponding software application to communicate with the vehicle through the hardware device. SMR-F and *.bin

Backups 123

Backups Architecture Firmware Software 123

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. An integration with Cigent Technology is now available for Secure Endpoint customers to integrate with. Kenna has a healthy 3rd Party ecosystem of technology partners.

Technology 143

Technology Firewall VPN Authentication 143

CyberSecurity Insiders

JUNE 7, 2022

NVIDIA Clara Holoscan MGX platform is the name and it will from now on provide medical grade reference architecture and long-term support to all AI powered medical devices. As they will receive a 10-year long-term software support and a design visionary on hardware architecture that will also benefit end users.

Artificial Intelligence 130

Artificial Intelligence Architecture Manufacturing Healthcare 130

The Last Watchdog

FEBRUARY 10, 2025

I had an edifying conversation about this with Steve Hanna , distinguished engineer at Infineon Technologies , a global semiconductor leader in power systems and IoT, based in Neubiberg, Germany. The chipmakers, software developers and device manufacturers all have a role to play. The industry has to work together, he says.

Internet 130

Internet Internet IoT Manufacturing 130

SecureWorld News

FEBRUARY 5, 2025

The State of Cybersecurity in Canada 2025 report, published by the Canadian Cybersecurity Network (CCN) and the Security Architecture Podcast , delivers an in-depth analysis of the evolving threat landscape, emerging risks, and strategic recommendations for Canadian organizations. Key findings: the cyber threat landscape in 2025 1.

InfoSec 77

InfoSec Cybersecurity Energy and Utilities Education 77

Thales Cloud Protection & Licensing

JUNE 16, 2025

Customers turn to trusted leaders like Thales and HPE not just for their technologies, but for the confidence they inspire. Thales Luna Hardware Security Modules (HSMs) provide the foundation for cryptographic trust across HPE infrastructure, including GreenLake, compute, storage, networking, and HPE Zerto Software.

Digital transformation 62

Digital transformation Encryption Architecture Risk 62

SecureWorld News

MAY 19, 2025

Our dependency on satellite technology means even minor hacks could be devastating, especially against the new threats and attack vectors brought about by AI. Let's not forget that the production space hardware and software creates a sprawling surface for supply chain attacks.

Cybersecurity 98

Cybersecurity Architecture Cyber Risk Risk 98

eSecurity Planet

AUGUST 5, 2021

Amid discussions on the security of open source technologies like eBPF and Hadoop, OpenSSF speakers Jennifer Fernick, SVP and head of global research at NCC Group, and Christopher Robinson, Intel’s director of security communications, outlined the group’s vision to secure open source software “end to end, at massive scale.”

Big data 143

Big data Architecture Software DNS 143

eSecurity Planet

APRIL 25, 2022

Regardless of the preferred acronym, here are our top picks for UTM hardware and software vendors. Also offers cloud-based central management, advanced threat protection (ATP), Tunnel Independent Network Architecture VPN protocol, and CudaLaunch VPN app. WatchGuard. Stormshield. Check Point. Sophos firewall features.

Software 121

Software Firewall VPN Antivirus 121

The Last Watchdog

APRIL 23, 2019

Just about every large enterprise today relies on software written by far-flung third-party developers, who specialize in creating modular “ microservices ” that can get mixed and matched and reused inside of software “ containers.” On top of that, we have machine learning-based technology that is tailor made for microservices.”

Marketing 193

Marketing Firewall Architecture Software 193

The Last Watchdog

JUNE 19, 2024

LW: In what noteworthy ways have legacy technologies evolved? Ollmann: Cybersecurity technologies are continuously evolving; they must because both the threat and the business requirements are continuously changing. That said, to date the two biggest changes and influences upon legacy technologies have been public cloud and AI.

Digital transformation 212

Digital transformation Technology Penetration Testing Cybersecurity 212

SecureList

MARCH 12, 2021

However, as technology evolves, we also observe a growing interest in the newly released platform from malware adversaries. For example, a sample with the MD5 hash sum 914e49921c19fffd7443deee6ee161a4 contains two architectures: x86_64 and ARM64. Introduction. The unexpected release was a milestone in the Apple hardware industry.

Malware 145

Malware Adware Architecture Technology 145

The Last Watchdog

SEPTEMBER 20, 2021

New frameworks, like SASE , CWPP and CSPM , seek to weave security more robustly into the highly dynamic, intensely complex architecture of modern business networks. A broad push is underway to retool an old-school software monitoring technique, called observability , and bring it to bear on modern business networks. Forget phases.

Software 205

Software Cloud Migration Architecture Engineering 205

The Last Watchdog

DECEMBER 12, 2023

John Benkert , CEO, Cigent Technologies Benkert A crucial takeaway from 2023 is the recognition that traditional cybersecurity strategies are no longer sufficient, necessitating a shift from reactive to proactive security measures. Implementing a Zero Trust architecture involves verifying every attempt to access the system.

Cybersecurity 258

Cybersecurity Social Engineering Cyber threats Software 258

The Last Watchdog

JANUARY 8, 2023

Business initiatives demand faster, more efficient outcomes and technology responds. The need for reset and oversight is so great that a new class of technology is emerging to give organizations a better grip on the digital sprawl that’s come to define modern-day enterprise architecture.

Risk 214

Risk Cybersecurity Technology CISO 214

The Last Watchdog

OCTOBER 18, 2023

NTT is partnering with the University of Technology Sydney to introduce an ABE service that fits with existing IT infrastructure, including cloud computing, healthcare, IoT and secure data sharing. Today, Goto says, ABE is fully ready to validate in real world deployments.

Encryption 264

Encryption Surveillance Internet Internet 264

The Last Watchdog

JUNE 27, 2023

Typical applications include green IIoT technologies like charging stations, smart meters, and PV inverters, for which only a small amount of memory is required to run boot software or to communicate with cloud applications. The proliferation of IIoT technologies is particularly evident in smart cities.

IoT 184

IoT Manufacturing Media Technology 184

Jane Frankland

NOVEMBER 20, 2023

My Predictions for Cybersecurity in 2023 were… Technology enables opportunities as fast as it introduces threats. Unsurprisingly, cyberattacks and data breaches show no signs of slowing as companies invest in technology to fuel growth, enhance customer experiences, support remote and hybrid workforces, and meet ESG goals.

Cybersecurity 130

Cybersecurity Digital transformation Artificial Intelligence Architecture 130