Troy Hunt

NOVEMBER 9, 2017

Here's something I hear quite a bit when talking about security things: Our site isn't a target, it doesn't have anything valuable on it. This is usually the retort that comes back in defence of some pretty shady practices and in the mind of the defendant, it's a perfectly reasonable position. They don't collect any credentials, they don't have any payment info and in many cases, the site is simply a static representation of content that rarely changes.

Phishing 203

Phishing VPN Encryption Authentication 203

Schneier on Security

NOVEMBER 9, 2017

Embedded in this story about infidelity and a mid-flight altercation, there's an interesting security tidbit: The woman had unlocked her husband's phone using his thumb impression when he was sleeping.

Hacking 196

Hacking 196

Elie

NOVEMBER 9, 2017

In this paper, we present the first longitudinal measurement study of the underground ecosystem fueling credential theft and assess the risk it poses to millions of users. Over the course of March, 2016–March, 2017, we identify 788,000 potential victims of off-theshelf keyloggers; 12.4 million potential victims of phishing kits; and 1.9 billion usernames and passwords exposed via data breaches and traded on blackmarket forums.

Data breaches 112

Data breaches Phishing Risk Malware 112

WIRED Threat Level

NOVEMBER 10, 2017

The Department of Defense's bug bounty program was a smashing success. And other government agencies have taken notice.

Hacking 112

Hacking Government 112

Speaker: Erroll Amacker

Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.

Risk

Troy Hunt

NOVEMBER 9, 2017

Loads of bits and pieces this week ranging from travel (including something truly awesome that I can't go into detail on just yet) to Report URI to HIBP. There's also the competition for the Lenovo ThinkPad where I talk about the 4 finalists and if you're reading this within about 18 hours of me posting it, you can still vote for them here: It's time to vote!

122

122

Schneier on Security

NOVEMBER 7, 2017

There's a new criminal tactic involving hacking an e-mail account of a company that handles high-value transactions and diverting payments. Here it is in real estate : The scam generally works like this: Hackers find an opening into a title company's or realty agent's email account, track upcoming home purchases scheduled for settlements -- the pricier the better -- then assume the identity of the title agency person handling the transaction.

Scams 188

Scams Accountability Banking Hacking 188

WIRED Threat Level

NOVEMBER 10, 2017

The internet is awash in theories about Facebook using your smartphone's microphone to eavesdrop on your conversations. It's not. Here's why.

Internet 111

Internet Internet 111

Thales Cloud Protection & Licensing

NOVEMBER 9, 2017

Originally published on CSO. While scientists may rejoice at the idea of large-scale quantum computing, CISOs are right to feel nervous. The advent of large-scale quantum computing promises huge advances in multiple fields, as certain difficult problems become much easier to solve. While progress in developing quantum computers moves in fits and starts (and some well-respected experts doubt we will ever see a large-scale implementation), the prospect of a sudden breakthrough cannot be taken ligh

CISO 67

CISO CSO IoT Encryption 67

Schneier on Security

NOVEMBER 10, 2017

It's a lot more chemistry than I understand: Invisible inks based on "smart" fluorescent materials have been shining brightly (if only you could see them) in the data-encryption/decryption arena lately. But some of the materials are costly or difficult to prepare, and many of these inks remain somewhat visible when illuminated with ambient or ultraviolet light.

Encryption 156

Encryption 156

eSecurity Planet

NOVEMBER 8, 2017

76 percent are rethinking their security strategies as a result.

IoT 74

IoT 74

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats

WIRED Threat Level

NOVEMBER 9, 2017

How a program called Mimikatz became one of the world's most widespread and powerful hacking tools.

Passwords 111

Passwords Hacking 111

Threatpost

NOVEMBER 10, 2017

IBM’s X-Force Research team reports hackers attacking Brazilian banks are using the Windows scripting tool called AutoIt to reduces the likelihood of antivirus software detection.

Antivirus 47

Antivirus Malware Banking Software 47

Spinone

NOVEMBER 6, 2017

Some people believe that Artificial Intelligence (AI) has the ability to amplify our natural human intelligence, as long as it remains in good hands. Let’s take a closer look at AI and how it can benefit – or negatively influence – our lives in the near future. Artificial intelligence is progressing at a rapid pace and we often associate it with science fiction movies where we see robots performing human-like tasks.

Artificial Intelligence 40

Artificial Intelligence Cybersecurity Technology Big data 40

eSecurity Planet

NOVEMBER 9, 2017

The combined company will lend visibility into how the email habits of users align with a business security, legal and compliance requirements.

74

74

Advertisement

The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.

Cybersecurity

WIRED Threat Level

NOVEMBER 7, 2017

Heads up, iPhone owners. iOS 11 comes with a batch of security features that merit your attention.

111

111

Threatpost

NOVEMBER 9, 2017

Developers using the Twilio platform to build enterprise mobile communications apps have put call and text data at risk for exposure.

Mobile 45

Mobile Risk 45

Schneier on Security

NOVEMBER 8, 2017

Testimony and Statement for the Record of Bruce Schneier. Fellow and Lecturer, Belfer Center for Science and International Affairs, Harvard Kennedy School. Fellow, Berkman Center for Internet and Society at Harvard Law School. Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Before the. Subcommittee on Digital Commerce and Consumer Protection.

Computers and Electronics 226

Computers and Electronics Identity Theft Internet Internet 226

eSecurity Planet

NOVEMBER 10, 2017

Certificate authorities, key signings and DNS records are some of the ways Blockchain could make data and the web more secure and prevent DDoS attacks

DNS 64

DNS DDOS 64

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

WIRED Threat Level

NOVEMBER 7, 2017

That Netflix phishing scheme has been around for months—and it's clever enough to stick around.

Phishing 111

Phishing 111

Threatpost

NOVEMBER 10, 2017

Threatpost editors Mike Mimoso and Tom Spring discuss the week's information security news.

Information Security 41

Information Security IoT 41

Schneier on Security

NOVEMBER 6, 2017

Daphne Caruana Galizia was a Maltese journalist whose anti-corruption investigations exposed powerful people. She was murdered in October by a car bomb. Galizia used WhatsApp to communicate securely with her sources. Now that she is dead, the Maltese police want to break into her phone or the app, and find out who those sources were. One journalist reports : Part of Daphne's destroyed smart phone was elevated from the scene.

Mobile 193

Mobile Encryption 193

eSecurity Planet

NOVEMBER 7, 2017

In comparison, just 38 percent worry about their car being stolen or broken into, a recent survey found.

Identity Theft 64

Identity Theft 64

Speaker: Sierre Lindgren

Fraud is a battle that every organization must face – it’s no longer a question of “if” but “when.” Every organization is a potential target for fraud, and the finance department is often the bullseye. From cleverly disguised emails to fraudulent payment requests, the tactics of cybercriminals are advancing rapidly. Drawing insights from real-world cases and industry expertise, we’ll explore the vulnerabilities in your processes and how to fortify them effectively.

Scams

WIRED Threat Level

NOVEMBER 6, 2017

A simple misconfiguration spiraled into outages for internet service providers and large internet platforms around the US.

Internet 112

Internet Internet 112

Thales Cloud Protection & Licensing

NOVEMBER 7, 2017

In order to talk about any specialized field of knowledge, you need a common language with agreed upon terms, definitions and some level of accepted industry standards. Cybersecurity is no different. But as the industry has evolved, this critical foundational concept has somehow taken a backseat. As both the public and private sector embrace digital transformation and face an increasingly sophisticated threat scape, presidential executive orders have sought to remedy that problem.

IoT 97

IoT Cybersecurity Manufacturing Digital transformation 97

Schneier on Security

NOVEMBER 9, 2017

This is a pilot project in Australia: Individuals who have shared intimate, nude or sexual images with partners and are worried that the partner (or ex-partner) might distribute them without their consent can use Messenger to send the images to be "hashed." This means that the company converts the image into a unique digital fingerprint that can be used to identify and block any attempts to re-upload that same image.

186

186

eSecurity Planet

NOVEMBER 9, 2017

Eighteen percent use a paper logbook to do so.

Passwords 61

Passwords 61

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

WIRED Threat Level

NOVEMBER 5, 2017

Bitcoin and other cryptocurrencies have exploded in value—making them an ever-more attractive target for scammers and hackers. Here's how to protect investment.

Cryptocurrency 112

Cryptocurrency 112

WIRED Threat Level

NOVEMBER 9, 2017

After ProPublica journalists wrote about hate groups, the trolls retaliated by signing them up for thousands of subscriptions. That was only the beginning.

110

110

WIRED Threat Level

NOVEMBER 8, 2017

With its latest update, Chrome's going to quash the junky redirects that turn the web into a house or horror.

110

110

WIRED Threat Level

NOVEMBER 7, 2017

Kremlin hackers are adapting their phishing tactics with both the latest software vulnerabilities and the latest news, new McAfee findings show.

Phishing 110

Phishing Software 110

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!