ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? For example, they may think, "Hey, the user's going to give me an input and it's only going to be as long as maybe a DNS record." but they never actually checked that. David Brumley: Oh, no.

InfoSec 52

InfoSec Artificial Intelligence Computers and Electronics Software 52

ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? For example, they may think, "Hey, the user's going to give me an input and it's only going to be as long as maybe a DNS record." but they never actually checked that. David Brumley: Oh, no.

InfoSec 40

InfoSec Artificial Intelligence Computers and Electronics Software 40

ForAllSecure

OCTOBER 9, 2019

How exactly will artificial intelligence help bridge the infosec skills gap and what kinds of security work are still best left to humans? For example, they may think, "Hey, the user's going to give me an input and it's only going to be as long as maybe a DNS record." but they never actually checked that. David Brumley: Oh, no.

InfoSec 40

InfoSec Artificial Intelligence Computers and Electronics Software 40

BH Consulting

JANUARY 12, 2021

In a neat segue from our previous story, the newly published Cisco Security Outcomes Study aims to guide security leaders in their investments and help them to manage risk. Six Open Source tools for your security team MORE Finding SUNBURST victims using passive DNS. Looking ahead: how to get better security outcomes. Links we liked.

Data privacy 52

Data privacy InfoSec DNS CISO 52

ForAllSecure

MARCH 24, 2021

Perhaps even more significant was in 2008 when researcher Dan Kaminsky found a fundamental flaw in the Domain Name System (DNS) protocol, one that could lead to cache poisoning. My job as an IT manager is to minimize the risk and put out fires.” Shellshock, as a name, stuck and became the name going forward.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Perhaps even more significant was in 2008 when researcher Dan Kaminsky found a fundamental flaw in the Domain Name System (DNS) protocol, one that could lead to cache poisoning. My job as an IT manager is to minimize the risk and put out fires.” Shellshock, as a name, stuck and became the name going forward.

Software 52

Software Passwords Internet Internet 52

eSecurity Planet

DECEMBER 3, 2021

How to screen for natural infosec talent: Ask for a worst case scenario for any common situation. Haddix continues to provide his insights while serving as the Head of Security and Risk Management for Ubisoft. Street is an industry-respected speaker and analyst and currently is the VP of InfoSec for SphereNY.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

eSecurity Planet

FEBRUARY 25, 2022

Inventory B2B VPNs and block all high-risk protocols (see slide below). Have contingency plans in place for disconnecting all B2B VPNs, especially high-risk ones. “If my boutique infosec consultancy has these resources…what does a state sponsored one have?” Plan for rapid containment.

B2B 125

B2B Cyber Attacks Firewall Cyber threats 125

ForAllSecure

JANUARY 11, 2023

If there's anything that particularly strikes me as potentially secure as security risk, you know, we're talking about fields that seem okay, yeah, they could potentially be SQL injectable or, you know, they're, they're using numeric IDs. I joined a Discord server called InfoSec prep. I could cause the server to do DNS requests.

DNS 40

DNS Hacking Penetration Testing InfoSec 40

SecureList

MAY 26, 2021

To evaluate and compare the risk of being infected by banking Trojans and ATM/POS malware, for each EU country we calculated the share of users of Kaspersky products who faced this threat during the reporting period as a percentage of all attacked users in that country. Countries where users faced the greatest risk of online infection.

Phishing 144

Phishing Malware Ransomware Adware 144

Troy Hunt

DECEMBER 10, 2019

Whilst the storage and delivery of the password in plain text certainly smells bad, when it's a (pseudo) random string, the risk is very different to when the user chooses their own secret: After reading the original linked post and follow-ups, if they get compromised, the only usable information stolen is the email and nickname.

Passwords 209

Passwords Password Management Accountability Authentication 209