Jane Frankland

JUNE 7, 2023

Have you ever experienced (or witnessed) someone making a comment that seemed harmless, but it left you feeling uneasy? ” In this blog, I’m examining subtle micro-aggressions as well as outright aggressive remarks that we see so often in tech. Just think about it.

Education 130

Education Accountability Cybersecurity Internet 130

Javvad Malik

OCTOBER 29, 2020

And that is a very good comment, but I’m here to tell you that the best movie ever made infosec (and arguably one of the best movies ever made) is Predator, starring Arnold Schwarzenegger. This is the sign of a good leader. You make a plan, go in, save the data, get out. But they are all way way waaaaay off the mark.

CISO 246

CISO InfoSec Banking Backups 246

Malwarebytes

APRIL 4, 2022

It is now officailly spring in the Northern Hemisphere, and with spring and the longer days comes the inescapable urge to shake off the lethargy of Winter and embrace the need to go through your stuff, throw a bunch of it out, and give the rest of it a shiny new lustre. And how many different passwords do you have for all those accounts?

Passwords 97

Passwords Accountability Malware Scams 97

Javvad Malik

NOVEMBER 5, 2021

I was the at that stage of life where I had the perfect balance of youthful arrogance, a disdain of authority, and just enough knowledge to give me illusions that I could do my boss, and his boss, and his bosses job better than they could combined. I kept checking to make sure my phone was working and that I hadn’t missed any calls.

Banking 133

Banking Retail Education Marketing 133

Troy Hunt

SEPTEMBER 11, 2018

Here's how it normally plays out: It all begins when a company pops up online and makes some sort of ludicrous statement related to their security posture, often as part of a discussion on a public social media platform such as Twitter. So I wrote a blog post. Or chastising, putting them in their place or taking them down a peg or two.

Media 261

Media Accountability Passwords Mobile 261

Troy Hunt

SEPTEMBER 17, 2019

This just feels wrong but I can’t come up with a strong argument against it. — Peter Ullrich (@PJUllrich) September 15, 2019 It feels wrong because 5 digits presents an extremely limited set of different possible combinations the password can be. Any thoughts? troyhunt @SmashinSecurity ? 6 characters.

Banking 239

Banking Passwords Accountability Authentication 239

The Last Watchdog

MAY 15, 2021

We discussed current developments that suggest SOAR and EDR will continue to improve and make a difference. We discussed current developments that suggest SOAR and EDR will continue to improve and make a difference. For a full drill down on our conversation, please give the accompanying podcast a listen.

Technology 157

Technology Hacking CISO Threat Detection 157

Troy Hunt

JULY 12, 2018

Does it do any good? The HTTPS Is Easy video series is 4 short videos of about 5 minutes each that make it dead simple to serve almost any site over a secure connection. However, there remains an undercurrent of dissent; Scott Helme recently wrote about this and dispelled many of the myths people have for not securing their traffic.

DNS 277

DNS Wireless Risk Banking 277

Duo's Security Blog

JULY 23, 2021

Giving back to our local and global communities has always been a big part of Duo’s culture. We’re really excited to highlight our five winners, who each earned a $5,000 grant for Bright Funds, Cisco’s charitable giving and matching platform. You can learn more about Rose and Alexis in this interview.)

Engineering 98

Engineering Accountability Education Software 98

Duo's Security Blog

MARCH 23, 2022

It made sense on paper, and it was a good next step based on her career trajectory. In the short term it might not have looked good on paper, but I was able to work really hard and turn it into a full-time job at the end, and it opened doors to incredible opportunities and relationships.

Marketing 95

Marketing Technology Engineering Risk 95

Jane Frankland

JANUARY 7, 2021

I’m only giving you 6 lessons, but in truth they’re all really part of same lesson. With good friends there, and being an environmentalist, I put my emotions down to this. They’re setting goals, getting clear on what they want to resolve, and embracing fresh starts and new ways of being. This time is cherished. It’s time to recharge.

CISO 189

CISO Cybersecurity Education Banking 189

SC Magazine

APRIL 20, 2021

But life is hard, and there are challenges, there are obstacles… and so we have built these strategies along the way that allow us to cope better and allow us to see situations a little differently, so we can respond better.”. Baseball can be a game of heart-stopping pressure. One that requires patience, perseverance, stamina and resilience.

Cybersecurity 120

Cybersecurity Media InfoSec Passwords 120

Anton on Security

MAY 13, 2021

We got a lot of great questions, and just like in the good old times , I am writing a blog where I cover some of the answers. They’re also other situations that require human decision-making to deal with a high degree of uncertainty. Q: What is the difference between SIEM and SOC? Also see this paper.

Risk 100

Risk Threat Detection Technology Cybersecurity 100

SiteLock

AUGUST 27, 2021

Moving from the Classic Editor, Gutenberg has a bit of a foreign feel at first, and then begins to feel almost magical. If you need a different type of content block, there is a simple block type switcher where you can select the type of content you need in that block. WordPress 5.0 The New WordPress Editor. Classic Editor.

Passwords 52

Passwords Internet Internet Malware 52

Malwarebytes

JUNE 28, 2021

We’ve been warning about advergaming—the combination of virtual reality (VR) and ads— for years on the Labs Blog. VR gaming: The hardware differences. This was a pretty sophisticated setup, similar in look and feel at the sign-up process to other ad platforms, like Google Ads. The more expensive option is the dedicated headset.

Advertising 94

Advertising Mobile Software Technology 94

Malwarebytes

SEPTEMBER 21, 2021

Whether you’re looking for a smartphone, a laptop, a gaming device or something else, or even just signing up for an account online, you want to make sure your kids are protected. Nothing can replace having good and open communication with your kids. Of course, setting controls shouldn’t be a be-all and end-all. C O N T E N T S.

Internet 104

Internet Internet Passwords Password Management 104

Security Through Education

APRIL 7, 2021

Are you feeling pandemic fatigue? Consequently, the prolonged effort to contain the virus may make us feel tired or burned out from safety measures. The pandemic changed our lives and society in so many ways. Cyber-based crimes increased to levels never previously seen. .” Healthcare sees 580% jump in ransomware attacks.

Scams 92

Scams Computers and Electronics Insurance Social Engineering 92

Malwarebytes

JUNE 13, 2022

In this blog, we break down what we call the IP2Scam tech support scheme, by going back in time to track previously used infrastructure. It is customized based on the browser’s user agent to display a slightly different template for Windows, Mac and the choice of Chrome or Firefox. Browlocks IP space. Malvertising flow.

Scams 60

Scams 60

Herjavec Group

APRIL 26, 2021

Today, the way we give access to our employees is generally the same way we give access to third parties. Commerce is now advancing at a speed that makes it extremely difficult for infosec professionals to keep up. How can we face what feels like “an unwinnable war” between security and effective business operations?

Risk 52

Risk Government InfoSec Cybersecurity 52

Troy Hunt

DECEMBER 19, 2017

It's also geographically specific in that there are different legal definitions in different places and indeed different social expectations due to cultural differences too. I wrote a free course for Varonis on GDPR earlier this year and I'm going to be referring to points from there quite a bit in this blog post.

Data breaches 134

Data breaches Data collection B2B Mobile 134

Cisco Security

MARCH 11, 2021

The challenge is that the most active threats change over time, as the prevalence of different attacks ebb and flows. Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. For more information on our methodology, see the Methodology section at the end of this blog.

DNS 144

DNS Phishing Ransomware Internet 144

Security Boulevard

JUNE 10, 2022

And are you comfortable having your key and certificate management split between different third-party providers? Would you feel comfortable giving your keys and certificates to someone you don’t know? Identity and Access Management in Multi-Cloud Environments. brooke.crothers. Fri, 06/10/2022 - 17:06.

Architecture 78

Architecture Encryption Risk Technology 78

McAfee

OCTOBER 4, 2021

This year’s theme also encourages us to reflect on the contributions Hispanics have made in the past and will continue to make in the future. This year’s theme also encourages us to reflect on the contributions Hispanics have made in the past and will continue to make in the future. My experience in the US has not been very different.

InfoSec 83

InfoSec System Administration Cybersecurity Engineering 83

Security Boulevard

FEBRUARY 17, 2022

Take me back to the top. 25 vulnerabilities to look out for in Node JS applications: Directory traversal, prototype pollution, XSSI, and more…. Photo by Greg Rakozy on Unsplash. Securing applications is not the easiest thing to do. With all these components to secure, building a secure application can seem really daunting. applications.

Authentication 105

Authentication Encryption Engineering Firewall 105

ForAllSecure

JUNE 2, 2021

He also gives a preview of his new YouTube series on the sudo vulnerability. With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. How did he get started and what’s next? One of those interests that took off was computer security. MODEM SOUND]. Or share gaming cheats.

Media 52

Media Hacking InfoSec Marketing 52

ForAllSecure

JUNE 2, 2021

He also gives a preview of his new YouTube series on the sudo vulnerability. With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. How did he get started and what’s next? One of those interests that took off was computer security. MODEM SOUND]. Or share gaming cheats.

Media 52

Media Hacking InfoSec Marketing 52

Troy Hunt

JANUARY 17, 2024

It feels like not a week goes by without someone sending me yet another credential stuffing list. But even then, the rapid appearance of Collections #2 through #5 (and more) quickly became, as I phrased it in that blog post, "a race to the bottom" I did not want to take further part in. Until the Naz.API list appeared.

Passwords 355

Passwords Password Management Hacking Accountability 355

Security Boulevard

FEBRUARY 26, 2021

As discussed in the first post in the Infrastructure Hygiene series, the most basic advice we can give on security is to do the fundamentals well. How do you block and tackle well when you have to worry about three different fields and multiple teams playing on each field? Posted under: Research and Analysis.

Risk 64

Risk Accountability Cyber Attacks Network Security 64

Kali Linux

OCTOBER 23, 2022

The following blog post was written by a moderator on the Kali Linux & Friends Discord server, Tristram. A massive thank you to Tristram for writing this blog post and to all of the participants! I conduct pentests in a variety of different fields, and have been working in Android malware analysis for the last year.

Penetration Testing 52

Penetration Testing Software Engineering Malware 52

Cisco Security

MARCH 8, 2021

Some of those experts’ responses appeared in a previous blog post . This is the second installment of a two-part series for which Cisco asked a group of women cybersecurity experts to discuss someone who meant the most to them as an ally and how that person affected their career. The remaining answers are presented below.

Cybersecurity 70

Cybersecurity Engineering Marketing Technology 70

Security Boulevard

MAY 13, 2021

We got a lot of great questions, and just like in the good old times , I am writing a blog where I cover some of the answers. They’re also other situations that require human decision-making to deal with a high degree of uncertainty. Q: What is the difference between SIEM and SOC? Also see this paper.

Risk 51

Risk Threat Detection Technology Cybersecurity 51

Herjavec Group

NOVEMBER 18, 2021

If that device begins acting like something else, say a wireless access point, it is a good sign that the device needs to be investigated. Contributed by Robert Herjavec , CEO & Founder. A strong Vulnerability Management program is essential to a comprehensive and proactive cybersecurity program. Asset and Vulnerability Discovery.

Risk 52

Risk Healthcare Wireless InfoSec 52

ForAllSecure

MARCH 8, 2023

I wrote two books, one on IoT Security and another with Kevin Mitnick, then jumped around a couple of different jobs. I can dream about being different because there are white male role models. And the good news? Booth babes and rampant sexism were more of a problem in infosec in the past. That is, until Chenxi Wang spoke up.

InfoSec 40

InfoSec Engineering CSO Technology 40

Kali Linux

AUGUST 8, 2022

With the publishing of this blog post, we have the download links ready for immediate access , or you can update any existing installation. We will be sure to add details about this in every blog post release going forwards. Feel free to be a fly on the wall, come by to say a hello, or ask questions!

Architecture 52

Architecture Education Media Passwords 52

McAfee

NOVEMBER 25, 2019

As he began to make his way toward a freight entrance, he was dumbfounded to hear only his own footsteps reverberating off the walls. He chanced a look back at the officer, who had not moved. He looked back at the officer, who was still frozen in place. The criminal, fear-stricken, turned to run. You’re under arrest!”

Backups 52

Backups Marketing Technology Cybersecurity 52

ForAllSecure

FEBRUARY 22, 2023

In a moment I’ll introduce you to the person who has done this, and given his experience with live broadcasts of CTFs, is working now to make live CTFs a regular e-sport. What if you could see their screens and have interviews with the players in the moment? Jordan Wiens, from Vector 35 , maker of Binary Ninja, is no stranger to CTFs.

Engineering 40

Engineering Hacking Wireless Marketing 40

Cisco Security

MARCH 11, 2021

The challenge is that the most active threats change over time, as the prevalence of different attacks ebb and flows. Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. For more information on our methodology, see the Methodology section at the end of this blog.

DNS 65

DNS Phishing Ransomware Internet 65