Schneier on Security
DECEMBER 4, 2017
I agree with Lorenzo Franceschi-Bicchierai, " Cryptocurrencies aren't 'crypto' ": Lately on the internet, people in the world of Bitcoin and other digital currencies are starting to use the word "crypto" as a catch-all term for the lightly regulated and burgeoning world of digital currencies in general, or for the word "cryptocurrency" -- which probably shouldn't even be called "currency," by the way. [.].
WIRED Threat Level
DECEMBER 7, 2017
Opinion: Rep. Will Hurd of Texas argues that quantum computers will rock current security protocols that protect government and financial systems.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Elie
DECEMBER 2, 2017
This post provides a retrospective analysis of Mirai — the infamous Internet-of-Things botnet that took down major websites via massive distributed denial-of-service using hundreds of thousands of compromised Internet-Of-Things devices. At its peak in September 2016, Mirai temporarily crippled several high-profile services such as. OVH. , Dyn. , and.
Dark Reading
DECEMBER 6, 2017
Updated version includes changes to some existing guidelines - and adds some new ones.
Speaker: Erroll Amacker
Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.
Schneier on Security
DECEMBER 6, 2017
The German Interior Minister is preparing a bill that allows the government to mandate backdoors in encryption. No details about how likely this is to pass. I am skeptical.
WIRED Threat Level
DECEMBER 5, 2017
Opinion: A new report from Citizen Lab shows that governments are using commercial spyware to surveil dissidents and journalists.
Cyber Security Informer brings together the best content for cyber security professionals from the widest variety of industry thought leaders.
|
eSecurity Planet
DECEMBER 5, 2017
Just 2 percent say IoT presents no new security challenges.
Schneier on Security
DECEMBER 5, 2017
Matt Blaze's House testimony on the security of voting machines is an excellent read. (Details on the entire hearing is here.) I have not watched the video.
WIRED Threat Level
DECEMBER 5, 2017
The attack uncovers bugs in how more than a dozen programs implement email's creaky protocol.
Dark Reading
DECEMBER 5, 2017
Some 70% of simulated attacks on real networks were able to move laterally within the network, while more than half infiltrated the perimeter and exfiltrated data.
Advertisement
Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.
eSecurity Planet
DECEMBER 7, 2017
The deadline is less than six months away.
Schneier on Security
DECEMBER 8, 2017
New research found that many banks offer certificate pinning as a security feature, but fail to authenticate the hostname. This leaves the systems open to man-in-the-middle attacks. From the paper : Abstract : Certificate verification is a crucial stage in the establishment of a TLS connection. A common security flaw in TLS implementations is the lack of certificate hostname verification but, in general, this is easy to detect.
WIRED Threat Level
DECEMBER 5, 2017
A green padlock might make it seem like a site is secure, but increasingly phishers are using it to lure victims into giving up sensitive info.
Thales Cloud Protection & Licensing
DECEMBER 6, 2017
In the month of November, I wrote about the options available specifically to secure data as part of a PCI DSS compliance effort. In this blog, I explore ideas for how the technology in question can be leveraged effectively for much broader general data protection requirements that are equally important for a wide variety of organizations. The benefits of thinking beyond PCI DSS.
Advertisement
The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.
eSecurity Planet
DECEMBER 8, 2017
The 4,736 Bitcoin stolen from NiceHash have surged in value over the past few days.
Dark Reading
DECEMBER 6, 2017
The former head of cyber for the US State Department calls for agreements across countries to improve government cybersecurity.
WIRED Threat Level
DECEMBER 2, 2017
A bill to punish hack hiders, Apple bug fix bumbling, and more of the week's top security stories.
Threatpost
DECEMBER 5, 2017
TeamViewer says it has issued a hotfix to address a bug that allows users sharing a desktop session to gain control of the other’s computer without permission.
Advertisement
Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.
eSecurity Planet
DECEMBER 5, 2017
Google end 2017 the same way it began the year, by patching media framework flaws.
Dark Reading
DECEMBER 7, 2017
Fictional Grey Sloan Memorial Hospital is locked out of its electronic medical records, but in the real world, healthcare organizations face even greater risks.
WIRED Threat Level
DECEMBER 7, 2017
With Project Sopris, Microsoft has a new hardware solution for the next wave of IoT security problems.
Threatpost
DECEMBER 8, 2017
An Android vulnerability called Janus allows attackers to inject malicious code into signed Android apps.
Speaker: Sierre Lindgren
Fraud is a battle that every organization must face – it’s no longer a question of “if” but “when.” Every organization is a potential target for fraud, and the finance department is often the bullseye. From cleverly disguised emails to fraudulent payment requests, the tactics of cybercriminals are advancing rapidly. Drawing insights from real-world cases and industry expertise, we’ll explore the vulnerabilities in your processes and how to fortify them effectively.
eSecurity Planet
DECEMBER 4, 2017
VIDEO: Nadir Izrael, co-founder and CTO of Armis Security, discusses the evolving landscape for Internet of Things security.
Dark Reading
DECEMBER 4, 2017
Avalanche, aka Gamarue, aka Wauchos, malware enterprise spanned hundreds of botnets and 88 different malware families.
WIRED Threat Level
DECEMBER 5, 2017
With the release of Ghostery 8, the popular ad-blocker introduces artificial intelligence and Smart Mode, a whole new level of usability for beginners.
Threatpost
DECEMBER 7, 2017
Using a free tool called Spinner, researchers identified certificate pinning vulnerabilities in mobile banking apps that left customers vulnerable to man-in-the-middle attacks.
Advertisement
Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.
eSecurity Planet
DECEMBER 6, 2017
It also dropped throughout 2017, a recent study found.
Dark Reading
DECEMBER 4, 2017
Nghia Hoang Pho faces up to eight years in prison for removing highly classified NSA data from workplace and storing it at home.
WIRED Threat Level
DECEMBER 7, 2017
A new Iran-linked hacking group called APT 34 has been spotted lurking in the networks of financial, energy, telecom, and chemical companies.
Threatpost
DECEMBER 6, 2017
As part of its December Android and Pixel/Nexus security updates, Google has issued patches addressing a bevy of flaws, 11 of which are rated critical.
Advertisement
After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!
Expert insights. Personalized for you.
209 
Let's personalize your content