Troy Hunt

NOVEMBER 25, 2020

In part 1 of this series, I posited that the IoT landscape is an absolute mess but Home Assistant (HA) does an admirable job of tying it all together. I also looked at custom firmware and soldering and why, to my mind, that was a path I didn't need to go down at this time. Let's dive into it.

IoT 358

IoT Firmware Risk Manufacturing 358

Troy Hunt

DECEMBER 15, 2021

The machine had full disk encryption and it's not known whether the thief was ever actually able to access the data. The whole discussion around what constitutes a breach came up again last week after I loaded email addresses scraped off Gravatar into Have I Been Pwned (HIBP). It's not clear if the car was locked or not.

Data breaches 322

Data breaches Hacking Passwords Accountability 322

Anton on Security

JULY 20, 2022

Let’s continue our fun conversation on threat detection in the cloud that we started in “Who Does What In Cloud Threat Detection?” and “Does the World Need Cloud Detection and Response (CDR)?” Many organizations, and industry at large, still have challenges with defining what good looks like in threat detection in general.

Threat Detection 100

Threat Detection Cloud Migration Engineering Technology 100

Security Boulevard

JULY 20, 2022

Let’s continue our fun conversation on threat detection in the cloud that we started in “Who Does What In Cloud Threat Detection?” and “Does the World Need Cloud Detection and Response (CDR)?”. Many organizations, and industry at large, still have challenges with defining what good looks like in threat detection in general.

Threat Detection 98

Threat Detection Cloud Migration Engineering Technology 98

Security Boulevard

MARCH 24, 2022

To put what cert-manager does into context, you’ll first need to be familiar with Public Key Infrastructure (PKI)— the unsung hero of cybersecurity. What is cert-manager? Using TLS encryption to secure connections between users’ browsers and web applications across the Internet, X.509 Thu, 03/24/2022 - 11:05.

Encryption 52

Encryption Technology CISO Internet 52

Security Affairs

APRIL 13, 2023

The question isn’t why to build out an insider threat prevention program: it’s how. The origin and impact of insider risk To understand best how to combat them, it helps to know where insider threats originate and why. Dealing with issues of insider cyber risk can be different and nuanced. Nine in ten result from human error.

Data privacy 90

Data privacy Risk Media Software 90

The Last Watchdog

OCTOBER 19, 2021

I don’t know what I’d do without my tech tools, but I also have a foreboding sense that I spend way too much with them. Social theorists like Harvard business professor Dr. Shoshana Zuboff and economist Jeremey Rifkin have mapped out thoughtful, well-reasoned ideas about how we got here — and what can be done about it.

Internet 223

Internet Internet Cryptocurrency Software 223

Security Boulevard

JANUARY 17, 2024

This blog post describes methods that SpecterOps consultants have researched to successfully circumvent this technology during offensive assessments. What is RBI and Why Use It? In this function, it does an excellent job. Why Do We Care? Authored By: Lance B. The general concept of RBI is relatively simple.

DNS 64

DNS Penetration Testing Passwords Encryption 64

Cisco Security

JULY 8, 2021

On Friday in the US, people were just about to clock off for what would hopefully be a relaxing Fourth of July long weekend. Nick, can you break down what happened for us? This is what was actually encrypting and ransoming these systems to their victims. Only for cybercriminals to have other plans. Nick Biasini.

Ransomware 126

Ransomware Software Social Engineering Cyber Attacks 126

Security Through Education

MAY 31, 2021

However, the Innocent Lives Foundation highlighted an important point in one of their blog posts, “We teach our children fire safety, water safety, and car safety skills, yet our children are not fearful of fires, crossing the street, or swimming.” However, that number soared to 18.4 Predators knew that millions of kids were now at home.

Media 98

Media Education Internet Internet 98

Centraleyes

DECEMBER 25, 2023

Understanding Zero Trust Traditionally, cybersecurity operated on a simple principle: trust what’s inside, be wary of what’s outside. zero trust strongly focuses on data protection, allowing you to encrypt, monitor, and control data flows rigorously. This is where zero-trust steps in.

Authentication 52

Authentication Architecture Cyber threats Accountability 52

SiteLock

AUGUST 27, 2021

Now, let’s take a closer look at SSL and HTTPS to understand why this was such an important feature to support, and why you should have HTTPS enabled on your website no matter your CMS or business case. So what is SSL? And what is HTTPS? Why everyone should have SSL on their website.

eCommerce 52

eCommerce Insurance Encryption Internet 52

McAfee

JANUARY 28, 2020

It’s Data Privacy Day and when it comes down to it, most of us don’t know exactly how many organizations have our data—let alone how it’s being collected or what it is being used for. It’s all too easy to over-share without realizing what else is in the folder—or to forget who you shared it with (or that you shared it at all!)

Passwords 71

Passwords Mobile Identity Theft VPN 71

Centraleyes

DECEMBER 17, 2023

What is a PCI Audit? What’s New? Here’s a quick tour of what’s new: PCI DSS 4.0: Here’s a quick tour of what’s new: PCI DSS 4.0: Important Note: PCI DSS current version, Version 3.2.1, is being phased out and will be replaced by the newly-released version, PCI DSS version 4.0,

Passwords 52

Passwords Computers and Electronics Software Risk 52

Thales Cloud Protection & Licensing

MARCH 22, 2018

This blog was originally published on Business Reporter. Like it or not, fair trade is essentially based on mutual mistrust – if one side can’t see what the other side is doing, or smell the food or feel the cash at the time of the transaction, then they may feel unwilling to do business. What does the future hold?

Banking 107

Banking Financial Services Accountability Technology 107

Security Boulevard

MAY 17, 2023

That’s why so many businesses today are still in position to fall victim to the same types of attacks that were so successful a decade ago. To be able to finally tackle the real work implementing proper threat protection, it’s crucial to know exactly what happened.

Data breaches 52

Data breaches DNS Malware Phishing 52

McAfee

OCTOBER 26, 2021

What cyber security threats should enterprises look out for in 2022? But guess what? A result of this has seen the targeting of executives with promises of job offers from specific threat groups; and why not? Ransomware, nation states, social media and the shifting reliance on a remote workforce made headlines in 2021.

Cybercrime 118

Cybercrime Ransomware Risk B2C 118

Anton on Security

AUGUST 19, 2022

Great blog posts are sometimes hard to find (especially on Medium ), so I decided to do a periodic list blog with my favorite posts of the past quarter or so. This covers both Anton on Security and my posts from Google Cloud blog , and our Cloud Security Podcast too ( subscribe ). Why Is Threat Detection Hard?” “A

Threat Detection 188

Threat Detection Cloud Migration Encryption CISO 188

BH Consulting

JANUARY 28, 2021

First up, BH Consulting founder and CEO Brian Honan gave some context to explain why this issue has emerged. The main objective for the EU is to only allow international transfers if the country you are transferring to can guarantee the same level of protection as an EU country does, he said.

Risk 52

Risk Encryption Government Accountability 52

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Taylor Monahan is founder and CEO of MetaMask , a popular software cryptocurrency wallet used to interact with the Ethereum blockchain.

Cryptocurrency 349

Cryptocurrency Passwords Encryption Accountability 349

SecureList

AUGUST 15, 2022

While fileless malware is nothing new, the way the encrypted shellcode containing the malicious payload is embedded into Windows event logs is. The malware does not contain the exact address of the C2 (command-and-control) server, making it harder for security researchers to find it. IT threat evolution in Q2 2022. Mobile statistics.

Mobile 78

Mobile Ransomware Malware Encryption 78

CyberSecurity Insiders

SEPTEMBER 8, 2021

What job do you do today? What problems does your job/company solve? Why did you first decide to get into cybersecurity? I was obsessed with encryption. I was fascinated by the fact that nothing in the world could reverse an operation of encryption without the needed key to decrypt the item.

Computers and Electronics 52

Computers and Electronics Architecture Education Cybersecurity 52

Spinone

MARCH 10, 2019

There are constantly new headlines, blog posts, statistics, and other information pointing to the fact that security breaches, malware, ransomware, data leak events, phishing and other security concerns are not going away. Top Ransomware Attacks in 2018 – What was Learned? Ransomware is as destructive as it is simple in nature.

Ransomware 53

Ransomware Energy and Utilities Backups Encryption 53

ForAllSecure

FEBRUARY 23, 2021

Okay, that’s not what I thought an astronomer does. But what does the day to day look like for the average pentester? To help more people to become penetration testers, Kim Crawley and Phillip L. Wylie wrote The PenTester BluePrint: Starting A Career As An Ethical Hacker. And yeah, there’s some of that.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

ForAllSecure

FEBRUARY 23, 2021

Okay, that’s not what I thought an astronomer does. But what does the day to day look like for the average pentester? To help more people to become penetration testers, Kim Crawley and Phillip L. Wylie wrote The PenTester BluePrint: Starting A Career As An Ethical Hacker. And yeah, there’s some of that.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

Troy Hunt

JANUARY 10, 2018

Especially in a rapidly modernising country with over a billion people (a huge number of which still live in poverty), there are many reasons why much of what Aadhaar sets out to achieve does make sense. India's Aadhaar implementation is the largest biometric system in the world, holding about 1.2 billion locals' data.

Hacking 279

Hacking Government Risk Encryption 279

ForAllSecure

DECEMBER 16, 2020

This is a blog post for advanced users with binary analysis experience. This is a blog post for advanced users with binary analysis experience. What's Special about Firmware? For this blog post we will be looking at the Netgear N300 (henceforth referred to as DGN2200v4) router firmware image. Prerequisites.

Firmware 52

Firmware Architecture Engineering Authentication 52

ForAllSecure

DECEMBER 15, 2020

This is a blog post for advanced users with binary analysis experience. This is a blog post for advanced users with binary analysis experience. What's Special about Firmware? For this blog post we will be looking at the Netgear N300 (henceforth referred to as DGN2200v4) router firmware image. Prerequisites.

Firmware 52

Firmware Architecture Engineering Authentication 52

Security Boulevard

AUGUST 19, 2022

Great blog posts are sometimes hard to find (especially on Medium ), so I decided to do a periodic list blog with my favorite posts of the past quarter or so. This covers both Anton on Security and my posts from Google Cloud blog , and our Cloud Security Podcast too ( subscribe ). Why Is Threat Detection Hard?”. “A

Threat Detection 52

Threat Detection Cloud Migration Encryption CISO 52

McAfee

SEPTEMBER 9, 2021

Trust in the cybercriminal underground is based on a few things, such as keeping your word and paying people what they deserve. Ransomware has been generating billions of dollars in recent years and with revenue like that, it’s only a matter of time before some individuals who believe they aren’t getting their fair share become unhappy.

Marketing 138

Marketing Ransomware Cybercrime Accountability 138

Troy Hunt

FEBRUARY 27, 2018

When I launched Pwned Passwords V2 last week , I made it fast - real fast - and I want to talk briefly here about why that was important, how I did it and then how I've since shaved another 56% off the load time for requests that hit the origin. Why Speed Matters for Pwned Passwords. Then the server can warn the user.

Passwords 200

Passwords Internet Internet Architecture 200

Troy Hunt

SEPTEMBER 17, 2018

The problem is, people simply aren't conditioned to expect to see the company name and there's very simple, effective demonstration of why this is the case: Watching with amusement as @CertCouncil (backed by commercial CAs) pushes for pricey EV certs. That's it - I'm calling it - extended validation certificates are dead.

Marketing 275

Marketing Encryption Phishing Banking 275

Fox IT

DECEMBER 12, 2022

To make matters worse, advisories heavily differed in the early hours of the incident, resulting in conflicting information about which products were affected. This 1-year anniversary seems like an appropriate time to look back and reflect on what we did right and what we could do better next time.

Software 74

Software Internet Internet Ransomware 74

Troy Hunt

DECEMBER 30, 2018

When you boil it down, what do those three things have in common? This is part of the opening monologue of the Ozark series and when I first heard it, I immediately stopped the show and dropped it into this blog post. Those are choices. Money is not peace of mind. Money’s not happiness. I’m kinda a bit excited about this one!

Technology 279

Technology Education Marketing Insurance 279

Identity IQ

MAY 2, 2023

What are the Benefits of a Password Manager? This blog discusses why passwords matter, how password managers work, and what benefits they offer. What is a Password Manager? How Does a Password Manager Work? How Does a Password Manager Work?

Password Management 52

Password Management Passwords Identity Theft Accountability 52

ForAllSecure

MAY 13, 2022

After hearing a talk, a Dallas-based hacker set out to find out what was going on inside the smart meter attached to his home, and what he found was surprising. So I reached out to someone who shared that curiosity in wanting to know what was possible with smart meters already in our homes.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52

Webroot

FEBRUARY 10, 2022

Here are a couple factors to consider that might help reframe how we think about ransomware, who’s targeted and why small businesses can’t escape the gaze of ransomware groups. We don’t typically think of these organizations as having excess budget earmarked for ransomware actors, so why are they so often targets?

Ransomware 106

Ransomware Small Business Backups Threat Reports 106