Adam Shostack

AUGUST 19, 2020

These are the books that I read in Q2 2020 that I think are worth your time. Because Internet by Gretchen McCulloch. Let me be frank: I hate most business books. Sorry it’s late. They’re still worthwhile. You’ll See This Message When It Is Too Late , by Josephine Wolff. Leading Change by John Kotter.

Internet 147

Internet Internet Software Government 147

Schneier on Security

FEBRUARY 8, 2022

Amy Zegart has a new book: Spies, Lies, and Algorithms: The History and Future of American Intelligence. Now everyone is racing for insight and the internet gives them tools to do it. I have not yet read the book. Wired has an excerpt : In short, data volume and accessibility are revolutionizing sensemaking.

Internet 178

Internet Internet Technology Government 178

Schneier on Security

APRIL 2, 2024

And a 1994 review of Applied Cryptography by redacted : Applied Cryptography, for those who don’t read the internet news, is a book written by Bruce Schneier last year. Schneier has gathered academic research, internet gossip, and everything he could find on cryptography into one 600-page jumble. There are many redactions.

Internet 267

Internet Internet 267

Schneier on Security

SEPTEMBER 4, 2018

I am pleased to announce the publication of my latest book: Click Here to Kill Everybody: Security and Survival in a Hyper-connected World. This is a book about technology, and it's also a book about policy. The regulation-free Internet that we've enjoyed for the past decades will not survive this new, more dangerous, world.

Government 143

Government Internet Internet Authentication 143

Schneier on Security

FEBRUARY 27, 2020

This law journal article discusses the role of class-action litigation to secure the Internet of Things. And it was inspired by my book, Click Here to Kill Everybody. Basically, the article postulates that (1) market realities will produce insecure IoT devices, and (2) political failures will leave that industry unregulated.

Internet 287

Internet Internet IoT Manufacturing 287

Adam Shostack

APRIL 5, 2019

Thought-provoking survey of the problems that come from the book above not being better read. The Internet of Garbage by Sarah Jeong. As a summary of the problems and challenges of the internet, it’s aged sadly well since 2015. As it turns out, all three fiction books are re-imaginings of other stories.

Marketing 150

Marketing Internet Internet Software 150

Schneier on Security

JANUARY 5, 2018

My next book is still on track for a September 2018 publication. What a Secure Internet+ Looks Like 8. How We Can Secure the Internet+ 9. How to Engender Trust on the Internet+. It also needs to telegraph: "everyone needs to read this book." I'm using the word "Internet+," and I'm not really happy with it.

Internet 151

Internet Internet Government Authentication 151

The Last Watchdog

FEBRUARY 24, 2020

I recently had a chance to have a rich discussion about the state of cybersecurity with Stiennon, the occasion being him sending me a copy of his new book: Security Yearbook 2020: A History and Directory of the IT Security Industry. Then along came cloud computing and the Internet of Things. You see it everywhere.” I’ll keep watch.

Artificial Intelligence 149

Artificial Intelligence Cybersecurity Digital transformation Firewall 149

Adam Shostack

DECEMBER 1, 2019

It’s bad news for people who want to be able to control their computer, because these attacks are leading vendors to lock down even their traditional operating systems, as Jonathan Zittrain predicted in his 2008 book, The Future of the Internet–And How to Stop It. Cult of the Dead Cow , Joseph Menn. How to design games.

Technology 100

Technology Hacking Internet Internet 100

CSO Magazine

MARCH 29, 2022

Shodan is a search engine for everything on the internet — web cams, water treatment facilities, yachts, medical devices, traffic lights, wind turbines, license plate readers, smart TVs, refrigerators, anything and everything you could possibly imagine that's plugged into the internet (and often shouldn't be).

Engineering 132

Engineering Internet Internet 132

Hot for Security

JUNE 4, 2021

Fraudsters and scammers are in full attack mode as they prepare this year’s arsenal of fake booking websites and holiday offers to steal personal information and money from holidaymakers looking for last-minute deals and cheap property rentals. Why identifying fake booking deals can be difficult.

Social Engineering 111

Social Engineering Engineering Advertising Media 111

SC Magazine

JUNE 25, 2021

Western Digital is asking customers to disconnect My Book Live hard drives from the internet to prevent malware from wiping them of data. “Western Digital has determined that some My Book Live and My Book Live Duo devices are being compromised through exploitation of a remote command execution vulnerability. .

Firmware 86

Firmware Media Internet Internet 86

Adam Shostack

FEBRUARY 4, 2019

I hate reviewing books by people I know, because I am a picky reader, and if you can’t say anything nice, don’t say anything at all. I also tend to hate management books, because they often substitute jargon for crisp thinking. It is not a book for the CSO. The book is organized into two major parts.

CSO 100

CSO Cyber Risk Backups Risk 100

Security Boulevard

SEPTEMBER 13, 2022

But even in our small corner of this world on the edge of the Soviet Empire behind the Iron Curtain, when my father and I read Stefan Zweig’s book on Magellan together, I could dream of the vast world beyond. The post Misinformation and propaganda in the authoritarian internet appeared first on Security Boulevard.

Internet 98

Internet Internet Network Security 98

The Last Watchdog

MARCH 19, 2024

A close friend of mine, Jay Morrow, has just authored a book titled “Hospital Survival.” ” Related: Ransomware plagues healthcare Jay’s book is very personal. Here are excerpts of our discussion, edited for clarity and length: LW: Your book is pretty gripping. Morrow: That’s right. I’m assertive by nature.

Technology 264

Technology Risk Healthcare Ransomware 264

Schneier on Security

MARCH 27, 2024

Their technique starts with obtaining any keycard from a target hotel—say, by booking a room there or grabbing a keycard out of a box of used ones—then reading a certain code from that card with a $300 RFID read-write device, and finally writing two keycards of their own. Some older installations may take years.

Internet 249

Internet Internet Encryption Hacking 249

Troy Hunt

OCTOBER 20, 2021

The full tale of what I first did (and how disastrous it ultimately became), is up front early in the book so I won't relay it here, but it's quite the story. The book title - Pwned - also seemed like a natural fit. I'm even in the story of how it became the internet's favourite taunt , again, somehow.

Data breaches 316

Data breaches Internet Internet 316

The Last Watchdog

APRIL 27, 2020

Related: The Golden Age of cyber spying A new book by Dr. Chase Cunningham — Cyber Warfare – Truth, Tactics, and Strategies — accomplishes this in a compelling, accessible way. If you look at the way your IPhone and a Surface Book sign in works that’s where we are going.

Passwords 149

Passwords VPN Digital transformation Cyber Attacks 149

Schneier on Security

SEPTEMBER 10, 2020

The book won’t be published until December, but Ross has been making drafts of the chapters available online as he finishes them. Now that the book is completed, I expect the publisher to make him take the drafts off the Internet. Ross Anderson’s fantastic textbook, Security Engineering , will have a third edition.

Engineering 203

Engineering Internet Internet 203

The Last Watchdog

FEBRUARY 1, 2021

Ted Harrington’s new book Hackable: How To Do Application Security Right argues for making application security a focal point, while laying out a practical framework that covers many of the fundamental bases. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.

Risk 154

Risk Social Engineering Password Management Software 154

SecureWorld News

OCTOBER 12, 2023

This exploit, tracked as CVE-2023-44487 , enabled cybercriminals to orchestrate what has been dubbed the largest Distributed Denial of Service (DDoS) attack ever recorded, targeting multiple internet infrastructure companies. HTTP/2, the successor to the widely-used HTTP/1.1

DDOS 89

DDOS Internet Internet Cyber threats 89

CyberSecurity Insiders

JANUARY 20, 2022

The book was written by several members of ERI’s leadership team, Aaron Blum, Kevin Dillon, Brendan Egan, John Shegerian and Tammy Shegerian and is available for purchase via Amazon Prime as a physical copy or digitally on Amazon. ERI’s mission is to protect people, the planet and privacy.

Computers and Electronics 52

Computers and Electronics Manufacturing Data breaches Hacking 52

Security Boulevard

OCTOBER 19, 2021

Previously, we reviewed The Ghidra Book: The Definitive Guide because several of us were working with Ghidra, and it was a topic that made sense. Similarly, we spend a lot of time thinking and talking about Internet of Things (IoT) Security.

IoT 62

IoT Internet Internet Hacking 62

Malwarebytes

JULY 4, 2022

After a good start, the Internet-enabled, technological revolution we are living through has hit some bumps in the road. To celebrate Independence Day we want to draw your attention to five technologies that could improve life, liberty and the pursuit of happiness on the Internet. And yet almost every Internet account requires one.

Internet 116

Internet Internet Technology DNS 116

CyberSecurity Insiders

DECEMBER 26, 2022

Security analysts of the internet services provider stated that the attack could have taken place via credential stuffing and, as of now, Xfinity, the business subsidiary of Comcast has confirmed that the credentials were compromised. The post Data Breach leads to Comcast Customer Data Leak appeared first on Cybersecurity Insiders.

Data breaches 133

Data breaches Accountability Internet Internet 133

CSO Magazine

MAY 30, 2023

He has also recently published a book, If It’s Smart, It’s Vulnerable , where he explains how the growth of internet connectivity has fueled cyber threats. To read this article in full, please click here

Malware 127

Malware Cyber threats Cybercrime Internet 127

SecureWorld News

NOVEMBER 9, 2022

We have so much change happening and we can drive it to happen in a more positive way to reduce the resource needs for organizations and actually scale security for businesses of all sizes.".

InfoSec 70

InfoSec Internet Internet Encryption 70

The Last Watchdog

DECEMBER 17, 2023

The Internet of Things ( IoT ) is on the threshold of ascending to become the Internet of Everything ( IoE.) This, of course, is the plot of endless dystopian books and movies that end with rogue machines in charge. This, of course, is the plot of endless dystopian books and movies that end with rogue machines in charge.

IoT 264

IoT Internet Internet Technology 264

Krebs on Security

MARCH 11, 2022

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.

DNS 263

DNS Internet Internet Phishing 263

Malwarebytes

SEPTEMBER 21, 2021

Today’s generation of kids and teens consider their devices and the Internet as extensions of their lives. So without further ado, let’s dive into what we should be teaching our kids about Internet safety and what we can do to enforce these teachings. 7 Internet safety tips. Internet safety should start from the home.

Internet 114

Internet Internet Passwords Password Management 114

Schneier on Security

OCTOBER 22, 2018

Surveillance is still the business model of the Internet, and this data is used against the customers' interests: either by the device manufacturer or by some third-party the manufacturer sells the data to. None of this is new, and much of it was discussed in my book Data and Goliath. IoT companies don't publish those reports.

IoT 238

IoT Surveillance Manufacturing Internet 238

Pen Test Partners

OCTOBER 31, 2023

and Xerox Corporation provide a facility to export the contents of their Address Book encrypted, but the encryption strength is insufficient. I navigated away from the Address Book section of the device and clicked it again. We identified 1917 of these devices exposed on the internet. Medium) CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Encryption 115

Encryption Passwords Firmware Engineering 115

Security Boulevard

NOVEMBER 9, 2021

The domain name system (DNS) is known as the phone book of the internet, quickly connecting users from their devices to their desired content. But what appears to most users as seamless and instantaneous actually offers multiple opportunities for bad actors to slip through the cracks.

DNS 141

DNS Internet Internet IoT 141

The Last Watchdog

JANUARY 13, 2021

For children, concepts like cyber criminals, hackers, private information, and the vast idea of Internet dangers are abstract concepts. You can explain that hackers break in through the Internet to steal information. I’ve also been brought in to host virtual reading events with the book for corporate and nonprofit efforts.

Scams 203

Scams Education Password Management Passwords 203

Schneier on Security

OCTOBER 21, 2022

” This is what I wrote in my upcoming book (to be published in February): One example of an extension of this technology is the “persona bot,” an AI posing as an individual on social media and other online groups. They would participate in small forums around the Internet: hobbyist groups, book groups, whatever.

Media 234

Media Internet Internet Healthcare 234

Security Affairs

JUNE 25, 2021

Threat actors are wiping many Western Digital (WD) My Book Live and My Book Live Duo NAS devices likely exploiting an old vulnerability. Owners of Western Digital (WD) claim that their My Book Live and My Book Live Duo network-attached storage (NAS) devices have been wiped. Pierluigi Paganini.

Firmware 89

Firmware Internet Internet Hacking 89

Zero Day

JUNE 28, 2021

Active attacks are indiscriminately wiping user devices.

Internet 75

Internet Internet 75