The Last Watchdog

APRIL 28, 2023

Here are three evolving themes reverberating from RSAC 2023 that struck me: Getting a grip on identities Password enabled access will endure for the foreseeable future. For a drill down on how the CNAPP space is rapidly evolving, stay tuned for my upcoming RSA Fireside Chat podcasts with a couple of vendors on the leading edge.

Mobile 211

Mobile Cloud Migration Penetration Testing Authentication 211

Schneier on Security

JULY 1, 2020

Together with Nate Kim (former student) and Trey Herr (Atlantic Council Cyber Statecraft Initiative), I have written a paper on IoT supply chain security. The basic problem we try to solve is: how to you enforce IoT security regulations when most of the stuff is made in other countries? Selling to U.S. cybersecurity agencies.

IoT 307

IoT Manufacturing Cybersecurity 307

Anton on Security

DECEMBER 15, 2022

In recent weeks, I did two fun webinars related to Security Operations, and there was a lot of fun Q&A. For extra fun, I had ChatGPT answer some of them, to see if it can replace me :-) So, first, ISACA webinar “Modernize Your SOC for the Future” focused on our Autonomic Security Operations vision.

Engineering 312

Engineering Risk Technology Information Security 312

Troy Hunt

FEBRUARY 13, 2020

I've spent most of the last couple of days doing the "hallway track" (basically just wandering around and saying "hi" to people) and doing a bunch of meetings with folks here on cyber things. Not too busy, mind you, and I did manage to get a couple of blog posts out this week. Watch Episode 1: How Far can Wi-Fi Travel?

208

208

Identity IQ

JANUARY 18, 2024

How Utility Payment Reporting Can Help You Meet Your New Year Financial Goals IdentityIQ As the New Year continues to roll out, many of us have financial New Year’s resolutions that aim to seek the next level of financial strength. Utility Payment Reporting FAQs How can I report my utility bill payments?

Accountability 104

Accountability Education 104

Troy Hunt

OCTOBER 2, 2020

Another demonstration of how valuable Grindr data is came last year when the US gov deemed that Chinese ownership of the service constituted a national security risk. I sent them all the technical details but no way. I asked for technical detail so I could validated the authenticity of his claim and the info duly arrived.

Accountability 363

Accountability Hacking Passwords InfoSec 363

Anton on Security

MARCH 16, 2022

(all quotes are from the SRE book here) So? Well, SLA is an agreement about the above: “an explicit or implicit contract with your users that includes consequences of meeting (or missing) the SLOs they contain.” How is it bad? There is a fun SOC lesson here: some security metrics have optimum value.

Phishing 189

Phishing Big data 189

Troy Hunt

JULY 26, 2019

I've been in San Fran meeting with a whole bunch of potential purchasers for HIBP and it's been. I try and give a bit of insight into that in this week's video, keeping in mind of course that I'm a bit limited by how much detail I can go into right now.

Password Management 172

Password Management Passwords Authentication 172

Troy Hunt

AUGUST 6, 2020

I love security. I love privacy. Consequently, it will come as no surprise that I love tools that help people achieve those objectives. Equally, I have no patience for false promises, and I've been very vocal about my feelings there: But one of them is literally called “Secure VPN”, how is this possible?!

VPN 303

VPN Marketing Encryption 303

Jane Frankland

APRIL 18, 2023

Most people have heard and most likely shared, the following quote… Men apply for a job when they meet only 60% of the required qualifications, but women apply only if they meet 100% of them. However, here’s the thing… No one has ever seen the report and there’s no hard evidence regarding this metric!

Penetration Testing 100

Penetration Testing Cybersecurity Education Accountability 100

CSO Magazine

APRIL 5, 2022

I don’t know how many times I’ve heard cybersecurity professionals say something like, “Not having multi-factor authentication is a huge risk for our organization.” To read this article in full, please click here

Risk 143

Risk Cybersecurity Authentication Ransomware 143

Troy Hunt

MARCH 10, 2021

Two of my favourite things these days are Have I Been Pwned and Home Assistant. So, it was with great pleasure that I saw the two integrated recently: always something. How long until it hits the big "1B"? ?? And soon, they'll be able to do precisely that: I'm sorry about this and that you come into this situation.

Passwords 350

Passwords IoT Password Management Data breaches 350

Security Boulevard

MARCH 11, 2024

Ready to meet Pepper? See how easy it is to get started! Watch Pepper in action Here are some examples of what you can ask Pepper "How do I reset my password?" “How How do I discover APIs?” “How How can I configure posture governance rules?” Where do I find API threats?”

Passwords 59

Passwords Government 59

The Last Watchdog

JANUARY 28, 2024

I had the chance to visit with , senior scientist at NTT Research’s Cryptography & Information Security (CIS) Lab , to learn more about the progress being made on a promising concept called “privacy preserving aggregate statistics.” For a full drill down, please view the accompanying videocast.

Data privacy 263

Data privacy Financial Services Healthcare Advertising 263

Security Through Education

APRIL 1, 2024

I’ll be honest, I never expected to see myself here… I’ve looked for well over a year at positions within the ever-expanding cybersecurity field – but nothing stood out. I write this to highlight a key breakthrough I’ve encountered so far at Social-Engineer, LLC (SECOM), that until now, I hadn’t truly grasped at a fundamental level.

Social Engineering 52

Social Engineering Engineering Education Risk 52

The Last Watchdog

JULY 26, 2021

However, there is a fascinating back story about how Google’s introduction of VMCs – to meet advertising and marketing imperatives — could ultimately foster a profound advance in email security. Coclin and I worked through how a huge email security breakthrough could serendipitously arrive as a collateral benefit of VMCs.

Marketing 240

Marketing Cybersecurity Phishing Authentication 240

Daniel Miessler

APRIL 2, 2023

There’s more to it, but it’s essentially the question of how to keep AI from destroying us when it wakes up. I just read Stuart Russell’s excellent book on the topic—which I highly recommend—and Lex Fridman’s recent conversation with Eleizer Yudkowsky is an absolute must as well. Everywhere.

Information Security 168

Information Security 168

Cisco Security

OCTOBER 8, 2021

Seek first to understand,” is a lesson I picked up early in my career that has generally proved effective in many situations as a leader, colleague and employee. I have found the most rewarding moments are when you listen not just as a leader but also as a learner. Here are four examples where I recently learned from the people I lead.

Cybersecurity 121

Cybersecurity Education Authentication 121

Jane Frankland

OCTOBER 5, 2022

I’m not talking about being committed or fixated on something. It means simply noticing things – the minutia – and giving thanks for how lucky I am. It means stopping being attached to an outcome, goal and target – chasing things that take me away from being here in the now. Be invested in them.

Marketing 147

Marketing Accountability Risk Cybersecurity 147

Security Affairs

NOVEMBER 21, 2020

The tech journalist caught the login credential in the image and used it to join the meeting, the photo contained the login address and part of the PIN code. I’m sorry. I’m a journalist from the Netherlands. I’m sorry for interrupting your conference,” Mr Verlaan replied, to laughter from officials.

Malware 97

Malware Hacking Government Information Security 97

Malwarebytes

MARCH 13, 2023

Becky Holmes knows how to throw a romance scammer off script—simply bring up cannibalism. I was hoping that you'd let me eat a small part of you when we meet," Holmes said. "No And I honestly have to say, I don't think I'm ever going to top that. Download and read the report here at www.malwarebytes.com/som.

Scams 96

Scams Malware Accountability Cybersecurity 96

Krebs on Security

AUGUST 27, 2020

Here’s a look at what happened after he got busted. Part I of this series ended with Ngo in handcuffs after disembarking a flight from his native Vietnam to Guam, where he believed he was going to meet another cybercriminal who’d promised to hook him up with the mother of all consumer data caches.

Identity Theft 323

Identity Theft Retail Government Banking 323

Adam Shostack

AUGUST 13, 2019

Blackhat, Defcon, I didn’t make any of the other conferences going on in Vegas. A little bit of organization is helping me manage better this year, and so I thought I’d share what’s in my post-conference toolbox. I’ve added a new first step relative to last year , which is to write a trip report, for myself.

113

113

Krebs on Security

AUGUST 26, 2020

O’Neill said he opened the investigation into Ngo’s identity theft business after reading about it in a 2011 KrebsOnSecurity story, “ How Much is Your Identity Worth? “I did contact the IT technician there to fix it, but nobody cared so I hacked the whole system,” Ngo recalled. ” MICROBILT.

Identity Theft 338

Identity Theft Computers and Electronics Hacking Accountability 338

Troy Hunt

OCTOBER 13, 2017

A couple of years ago, I was heavily involved in analysing and reporting on the massive VTech hack , the one where millions of records were exposed including kids' names, genders, ages, photos and the relationship to parents' records which included their home address. then totally screwing up the security.

IoT 279

IoT Risk Mobile Hacking 279

SiteLock

AUGUST 27, 2021

I met Brandee Segraves at WordCamp Fayetteville the day she gave her talk, “Keeping Content Marketing Authentic.” As a WordPress user, an agency owner, and a first-time speaker, I could not resist the opportunity to interview her. >> Brandy Segraves: Well really it was to get out and meet a lot more people who are in this.

Small Business 98

Small Business Marketing Education Media 98

Security Boulevard

MARCH 28, 2024

Tackling Code Obfuscation When facing a new technical challenge, I’m someone who often feels "in over my head," I tackle these feelings through research and preparation. I'll also demonstrate how a solo intelligence analyst can navigate such a challenge using generative AI. Here's a step-by-step explanation: 1.

Malware 69

Malware Cyber Attacks 69

CSO Magazine

MARCH 25, 2021

I felt inadequate. I was feeling like I was not cut out for this type of work, that my peers were more qualified,” Gonzalez remembers. Had she left, Gonzalez’s departure would have been one more blow to a field that already suffers from too few professionals to meet demand as well as an underrepresentation of women.

CSO 98

CSO Cybersecurity 98

Adam Shostack

FEBRUARY 27, 2020

.” This is an important step in the journey to systematic, structured, and comprehensive security analysis of machine learning systems, and we can contrast it with the work at Microsoft I blogged about last month. I’ll focus on the PDF version (Version 1.0 1.13.20)), which is formally divided into two parts.

Risk 182

Risk Engineering Architecture Software 182

Duo's Security Blog

AUGUST 9, 2023

In a world where remote and hybrid work is here to stay, cybersecurity internships are no exception. Meeting new people over lunch is really easy. The ‘be kinder than necessary’ value, everyone has that and that’s what makes you feel very welcome here at Cisco and Duo,” Shroff elaborated. Interns are always talking in there.

Cybersecurity 52

Cybersecurity Engineering Software 52

Jane Frankland

JUNE 22, 2022

Having worked in cyber for over two decades, I’ve heard many things. Here’s a short selection, “ She’s the fat one” “She’s the fit one” “She’s the black one” “She’s the blonde one” “She’s the one with big t**s.”. Some about me. So what next?

Education 130

Education Media Cybersecurity 130

SecureWorld News

OCTOBER 15, 2020

“To be clear, Zoom’s E2EE uses the same powerful GCM encryption you get now in a Zoom meeting. In typical meetings, Zoom’s cloud generates encryption keys and distributes them to meeting participants using Zoom apps as they join. Many Zoom users will want to use E2EE, so it is important to know how to actually do so.

Encryption 103

Encryption Mobile Accountability CISO 103

Identity IQ

FEBRUARY 13, 2023

How Does a Pig Butchering Scam Work? They may tell the victim more about their interest in cryptocurrency and how they are profiting. How To Avoid Pig Butchering Scams Pig butchering scams are highly complex. Remember that you never know who you are talking to when you are not meeting them face-to-face.

Scams 104

Scams Cryptocurrency Identity Theft Accountability 104

Jane Frankland

AUGUST 18, 2023

Every now and again I’m asked about conferences and whether they’re worth attending. Over the years I’ve attended hundreds of cybersecurity conferences all over the world, and participated as an attendee, speaker, chair, and advisor. Do your research before the conference starts and create a plan that meets your needs.

Cybersecurity 130

Cybersecurity Risk Media Government 130

NetSpi Executives

MARCH 26, 2024

Government entities can store and retrieve sensitive data with extremely high reliability and almost nonexistent downtime, and other sectors like healthcare, insurance, and utilities can meet the speed of demand by processing multiple terabytes of data with incredible ease, and consistency. Here’s what I thought of my time at the event.

Penetration Testing 59

Penetration Testing Encryption Insurance Healthcare 59

Security Boulevard

DECEMBER 22, 2022

and since we are on a break now, I wanted to reflect a bit, while Tim is relaxing on a beach somewhere warm and “ hammy” ?. We seem to have removed the curse of AI  — namely that our first 2 episodes on securing AI ( “EP52 Securing AI with DeepMind CISO” and “EP68 How We Attack AI? More “CISO meets cloud” episodes are planned as well!

Cloud Migration 136

Cloud Migration CISO Artificial Intelligence Architecture 136

SecureWorld News

NOVEMBER 2, 2022

A : I backed into it! When I was on active duty in the Air Force, I was doing IT work for highly classified projects. Once I learned how to do system and data protection, I was hooked. I did a podcast episode on my cyber path: [link]. A : I own a small business called Cyber Risk Opportunities LLC.

Cybersecurity 90

Cybersecurity Cyber Insurance Insurance Cyber Risk 90