CyberSecurity Insiders

FEBRUARY 1, 2022

BOSTON–( BUSINESS WIRE )– CyberSaint , the developer of the leading platform delivering cyber risk automation, today announced that the company is seeking speaker submissions for its virtual STRONGER conference, set to occur September 13th-15th 2022. Conference Tracks: Frameworks, Security, & Risk. InfoSec 360.

Digital transformation 74

Digital transformation InfoSec CISO Education 74

SiteLock

AUGUST 27, 2021

One year ago in February, the major eBay hack was in progress, eventually resulting in over 233 million passwords being stolen. 2015 Cyber Security Risks. TechRadar recently posted an article covering the top seven cyber security risks that businesses should be aware of for 2015. Anthem Cyber Attack. Worst Passwords of 2014.

Passwords 95

Passwords Cybersecurity Internet Internet 95

Security Boulevard

JULY 18, 2023

Permalink The post BSides Sofia 2023 – Radoslav Gerganov – Hyundai Head Unit Hacking appeared first on Security Boulevard. Our thanks to BSides Sofia for publishing their presenter’s tremendous BSides Sofia 2023 content on the organizations’ YouTube channel.

Hacking 97

Hacking Architecture CISO Education 97

Security Boulevard

JULY 16, 2023

Permalink The post BSides Sofia 2023 – Vasil Velichkov – Hacking Attacks Against Government Institutions appeared first on Security Boulevard. Our thanks to BSides Sofia for publishing their presenter’s tremendous BSides Sofia 2023 content on the organizations’ YouTube channel.

Government 97

Government Hacking Architecture CISO 97

Security Affairs

MARCH 11, 2023

Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in VMware’s Cloud Foundation, tracked as CVE-2021-39144 (CVSS score: 9.8), to its Known Exploited Vulnerabilities Catalog. CISAgov added #CVE -2020-5741 & CVE-2021-39144 to the Known Exploited Vulnerabilities Catalog.

InfoSec 90

InfoSec Hacking Cybersecurity Risk 90

Security Boulevard

FEBRUARY 3, 2022

An infosec researcher was hacked by North Korea. law enforcement did nothing, so he took matters into his own hands. The post US Hacker ‘P4x’ Gets Back at Pyongyang (but We Smell a Rat) appeared first on Security Boulevard.

InfoSec 98

InfoSec Hacking Social Engineering Engineering 98

Herjavec Group

APRIL 26, 2021

Third-party risk is a hot topic in the world of cybersecurity. The recent SolarWinds breach was a tough reminder that technological advancement will always carry inherent risks. former CEO of RSA Security) for a virtual fireside chat last week to chat about third-party risk. So where does that leave us?

Risk 52

Risk Government InfoSec Cybersecurity 52

ForAllSecure

AUGUST 18, 2021

The new Director of the Cybersecurity and Infrastructure Security Agency (CISA), Jen Easterly, opened Day 2 of Black Hat USA 2021 with a remote presentation on Hacking the Cybersecurity Puzzle. The real puzzle was how to get public and private institutions to work together to solve the problems infosec faces today.

Hacking 52

Hacking InfoSec Cybersecurity Education 52

The Last Watchdog

MARCH 15, 2021

Since we are quickly putting out large technologies, security risks always come with this. Penetration tests are one way of mitigating the security risks that arise and make sure that we are not endangering users, their data, and the trust they inherently place in technology. Related: Integrating ‘pen tests’ into firewalls.

Penetration Testing 124

Penetration Testing Social Engineering Cybersecurity Engineering 124

Security Affairs

MARCH 13, 2023

Cybersecurity and Infrastructure Security Agency (CISA) has added a remote code execution (RCE) vulnerability in the Plex Media Server, tracked as CVE-2020-5741 (CVSS score: 7.2), to its Known Exploited Vulnerabilities Catalog. CISAgov added #CVE -2020-5741 & CVE-2021-39144 to the Known Exploited Vulnerabilities Catalog.

Media 82

Media InfoSec Password Management Engineering 82

The Security Ledger

APRIL 30, 2019

In this week's podcast, Joe Grand of Grand Idea Studio and Kyle Wiens of iFixit join me to talk about the launch of securepairs.org and fighting cybersecurity FUD in the right to repair. The post Episode 144: Infosec Supporting Right to Repair with Joe Grand and Kyle Wiens appeared first on The Security Ledger.

InfoSec 40

InfoSec Computers and Electronics Telecommunications Software 40

Security Affairs

JULY 18, 2021

The company states that organizations that fail to address known vulnerabilities in the firmware of SRA and SMA 100 series products are at imminent risk of a targeted ransomware attack. Read more at [link] #Cybersecurity #InfoSec #Ransomware — US-CERT (@USCERT_gov) July 15, 2021. ” reported BleepingComputer.

Ransomware 117

Ransomware Firmware Mobile InfoSec 117

The Security Ledger

JULY 15, 2019

It has to do with our evolving and still immature system of rating (and therefore thinking about) cyber risk. Read the whole entry. »

Risk 40

Risk InfoSec Cyber Risk Hacking 40

Security Boulevard

APRIL 7, 2023

Justice Department’s new Civil-Cyber Fraud Initiative announced its first settlement last month in a novel action that brought false claims allegations over infosec failures against, notably, a sole proprietor. Aerojet Rocketdyne Holdings, Inc. , Aerojet Rocketdyne Holdings, Inc. ,

Small Business 67

Small Business Cybercrime Insurance Government 67

Security Affairs

FEBRUARY 5, 2022

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to address their systems against an actively exploited Windows vulnerability tracked as CVE-2022-21882. link] #Cybersecurity #InfoSec pic.twitter.com/Tu7MoTEETC — US-CERT (@USCERT_gov) February 4, 2022. Pierluigi Paganini.

InfoSec 90

InfoSec Authentication Hacking Cybersecurity 90

Security Boulevard

JULY 30, 2023

Join […] The post Your Digital Immortality is Coming, Apple and Google Are Data Gatekeepers, Satellite Security Risks Revealed appeared first on Shared Security Podcast. The post Your Digital Immortality is Coming, Apple and Google Are Data Gatekeepers, Satellite Security Risks Revealed appeared first on Security Boulevard.

Risk 52

Risk Technology Data privacy InfoSec 52

ForAllSecure

JUNE 2, 2021

With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. For bored and smart teenagers, this was the perfect way to learn how to hack. Much like the BBS of yesterday, these social media sites can be used to teach people how to hack. Or share gaming cheats. Massive numbers.

Media 52

Media Hacking InfoSec Marketing 52

ForAllSecure

JUNE 2, 2021

With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. For bored and smart teenagers, this was the perfect way to learn how to hack. Much like the BBS of yesterday, these social media sites can be used to teach people how to hack. Or share gaming cheats. Massive numbers.

Media 52

Media Hacking InfoSec Marketing 52

ForAllSecure

MARCH 14, 2022

Can you hack an airplane? Vamosi: Maybe you remember this: In 2014, researchers Charlie Miller and Chris Valasek succeeded in hacking a Jeep Cherokee while a reporter was driving it on a freeway during rush hour in St Louis, Missouri. So, given that we can now hack into cars remotely, could we hack into other systems as well?

Hacking 52

Hacking Computers and Electronics Government Media 52

Hot for Security

FEBRUARY 16, 2021

Seismic monitoring equipment is vulnerable to common cybersecurity threats like those faced by IoT devices, a new research paper warns. Samios believes a good first step to address the situation is to bring seismologists up to speed on cybersecurity, informing them how their equipment can be exploited by malicious actors.

IoT 128

IoT InfoSec Data collection Encryption 128

Security Affairs

SEPTEMBER 7, 2020

A new Cybersecurity and Infrastructure Security Agency (CISA) mandate requires U.S. government’s cybersecurity agency CISA has issued a mandate that requires federal agencies to implement vulnerability-disclosure policies (VDPs) by March 2021. SecurityAffairs – hacking, vulnerability-disclosure policies). Learn more: [link].

InfoSec 94

InfoSec Advertising Government Cybersecurity 94

Threatpost

APRIL 5, 2021

Aamir Lakhani, cybersecurity researcher for Fortinet’s FortiGuard Labs, discusses criminals flocking to web server and browser attacks, and what to do about it.

Risk 79

Risk Cybersecurity InfoSec Hacking 79

ForAllSecure

JANUARY 15, 2021

And what parallels might infosec learn from COVID-19? In this episode, Mike Ahmadi draws on his years of experience in infosec, his years hacking medical devices. Listen to EP 12: Hacking Healthcare. Using older software within your own software always carries risk. What if they don’t? Apple Podcasts.

Healthcare 52

Healthcare Hacking InfoSec Software 52

ForAllSecure

JANUARY 15, 2021

And what parallels might infosec learn from COVID-19? In this episode, Mike Ahmadi draws on his years of experience in infosec, his years hacking medical devices. Listen to EP 12: Hacking Healthcare. Using older software within your own software always carries risk. What if they don’t? Apple Podcasts.

Healthcare 52

Healthcare Hacking InfoSec Software 52

ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? We also talk about the pitfalls of using artificial intelligence in cyber security and about the best way to tackle the US's chronic cybersecurity talent shortage. David Brumley: Oh, no.

InfoSec 52

InfoSec Artificial Intelligence Computers and Electronics Software 52

SC Magazine

APRIL 14, 2021

For the first time in its 60-year history, the OECD offered policy guidelines for risk reduction through vulnerability management. For the first time in its history this past February, the Organization for Economic Cooperation and Development (OECD) offered policy guidelines for digital risk reduction through vulnerability management.

Government 107

Government Risk Information Security InfoSec 107

The Security Ledger

OCTOBER 7, 2021

Related Stories Spotlight: Operationalizing MDR with Pondurance CISO Dustin Hutchinson Spotlight: When Ransomware Comes Calling Spotlight: Is There A Cure For InfoSec’s Headcount Headache? Click the icon below to listen. Enterprises today have a full plate of challenges when it comes to cyber security. Proliferating Threats: Enter MDR!

CISO 98

CISO InfoSec Backups Ransomware 98

The Security Ledger

OCTOBER 7, 2021

Related Stories Spotlight: When Ransomware Comes Calling Spotlight: Is There A Cure For InfoSec’s Headcount Headache? In addition to doing the basic blocking and tackling like software updates and user management, organizations hav e cloud and third party risks to worry about. Click the icon below to listen.

CISO 97

CISO InfoSec Backups Ransomware 97

ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? We also talk about the pitfalls of using artificial intelligence in cyber security and about the best way to tackle the US's chronic cybersecurity talent shortage. David Brumley: Oh, no.

InfoSec 40

InfoSec Artificial Intelligence Computers and Electronics Software 40

ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? We also talk about the pitfalls of using artificial intelligence in cyber security and about the best way to tackle the US's chronic cybersecurity talent shortage. David Brumley: Oh, no.

InfoSec 40

InfoSec Artificial Intelligence Computers and Electronics Software 40

The Security Ledger

MARCH 19, 2021

» Related Stories Encore Edition: Veracode CEO Sam King on Infosec’s Leaky Talent Pipeline Episode 205 – Google’s Camille Stewart: InfoSec’s Lack of Diversity is a Cyber Risk Episode 203: Don’t Hack The Water and Black Girls Hack Founder Tennisha Martin. Read the whole entry. »

Cyber Risk 52

Cyber Risk Surveillance InfoSec Mobile 52

The Security Ledger

MARCH 19, 2021

» Related Stories Encore Edition: Veracode CEO Sam King on Infosec’s Leaky Talent Pipeline Episode 205 – Google’s Camille Stewart: InfoSec’s Lack of Diversity is a Cyber Risk Episode 203: Don’t Hack The Water and Black Girls Hack Founder Tennisha Martin. Read the whole entry. »

Cyber Risk 52

Cyber Risk Surveillance InfoSec Mobile 52

Security Affairs

MARCH 7, 2021

At least tens of thousands of Microsoft customers may have been hacked by allegedly China-linked threat actors since January, including business and government agencies. Cyber #Cybersecurity #InfoSec — US-CERT (@USCERT_gov) March 6, 2021. SecurityAffairs – hacking, Microsoft Exchange). ” reported Krebs.

Hacking 108

Hacking Accountability Government Small Business 108

Notice Bored

AUGUST 5, 2022

Other slides in the deck appear to equate ' security posture ' to vulnerability management and software/systems patching - a rather narrow/specific technical concern for metrics suggested to senior management, although arguably it is a major factor in cybersecurity - or to security strategy.

CISO 63

CISO Risk Artificial Intelligence Marketing 63

BH Consulting

JANUARY 12, 2021

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. From a cybersecurity perspective, the year had more than its share of incidents. Unsurprisingly, the SolarWinds supply chain attack stars in the year’s worst hacks and breaches from both Wired and Ars Technica.

Data privacy 52

Data privacy InfoSec DNS CISO 52

DoublePulsar

JULY 25, 2023

It became clear this was being exploited in the wild a few days ago, after the Norwegian government disclosed 12 of their ministries were hacked using this MobileIron zero day , and they had to tell Ivanti about the issue. infosec #mobileiron #ivanti / Twitter" If you are using Ivanti MobileIron, check out the Ivanti support forum now.#infosec

Mobile 89

Mobile InfoSec Government Accountability 89

Security Affairs

DECEMBER 17, 2019

Infosec researchers have uncovered an unsecured Elasticsearch database containing 1.3TB of web server log entries held by Chinese e-commerce website LightInTheBox.com. “Led by cybersecurity analysts Noam Rotem and Ran Locar, vpnMentor’s research team discovered a leak in a database belonging to the online retailer LightInTheBox.”

Retail 59

Retail InfoSec Data breaches Advertising 59