Notice Bored

APRIL 12, 2022

This morning, I’ve been browsing and thinking about ISO/IEC 27403 , a draft ISO27k standard on the infosec and privacy aspects of “domotics” i.e. IoT things at home. IoT things are generally just black-boxes. smart heating controls, door locks and cat feeders). Security monitoring and management (e.g.

IoT 63

IoT InfoSec Risk Security Awareness 63

CyberSecurity Insiders

MAY 22, 2021

a world leader in memory products and technology solutions, is proud to announce it has won the following Global InfoSec Awards for its encrypted USB solutions family from Cyber Defense Magazine (CDM), the industry’s leading electronic information magazine: Data Loss Prevention Market Leader. About CDM InfoSec Awards.

InfoSec 40

InfoSec Technology Encryption B2C 40

SC Magazine

APRIL 26, 2021

We’re able to roll that out not only for our desktop computers and for laptops and for VPN clients, but even for mobile devices,” said Sanders. “So Now we’re starting to see a convergence of these two into IoT, [although] traditionally the two groups never really worked a whole lot with each other,” said Sanders.

CISO 82

CISO IoT VPN InfoSec 82

ForAllSecure

MARCH 8, 2023

Booth babes and rampant sexism were more of a problem in infosec in the past. I wrote two books, one on IoT Security and another with Kevin Mitnick, then jumped around a couple of different jobs. To this day, the US Department of Defense uses chenxification to protect mobile applications. That is, until Chenxi Wang spoke up.

InfoSec 40

InfoSec Engineering CSO Technology 40

SC Magazine

MAY 1, 2021

Bell has more than 20 years’ experience in information technology and security strategy, most recently serving as chief security and trust officer for Verdigris Holdings, a mobile banking platform. He was previously senior manager at Deloitte, focused on IoT and industrial cybersecurity.

Computers and Electronics 126

Computers and Electronics Technology Information Security Education 126

Notice Bored

JANUARY 9, 2021

Flip forward 20 years and we see similar horrors unfolding today in the form of myriad IoT things and 'the cloud', so indistinct and unclear that people long since gave up trying to draw meaningful network diagrams - only now the year encoding aspect is the least of our security problems. IT and infosec pro's aren't. They are heroes.

Internet 52

Internet Internet Risk InfoSec 52

Security Boulevard

JUNE 2, 2025

If youre entering the cybersecurity job market, I highly recommend the Infosec Job Hunting w/ BanjoCrashland YouTube playlist. Before deciding whats next, update your resume to include your OSCP certification and prepare for the job hunt.

Penetration Testing 52

Penetration Testing Engineering Wireless Cybersecurity 52

Notice Bored

NOVEMBER 26, 2021

As well as infosec policies, what are your business policies for managing the information risk security function? And are you looking to exploit information security knowledge and expertise in all corners of the world, or are you still chasing the evaporating pool of local talent? Virtual working is just one of several strategic issues.

Risk 66

Risk Technology InfoSec Artificial Intelligence 66

Threatpost

JULY 2, 2021

Nate Warfield, CTO of Prevailion and former Microsoft security researcher, discusses the many security challenges and failings plaguing this industry.

Healthcare 128

Healthcare Ransomware IoT InfoSec 128

Threatpost

DECEMBER 30, 2021

Expect many more zero-day exploits in 2022, and cyberattacks using them being launched at a significantly higher rate, warns Aamir Lakhani, researcher at FortiGuard Labs.

IoT 113

IoT InfoSec Mobile Malware 113

Threatpost

JANUARY 15, 2020

There are five different pillars to implement when moving to a modern, zero-trust security model.

InfoSec 107

InfoSec IoT Mobile 107

Threatpost

JULY 16, 2021

Curtis Simpson, CISO at Armis, discusses the top qualities that all CISOs need to possess to excel.

CISO 106

CISO IoT InfoSec Mobile 106

Threatpost

JANUARY 21, 2022

What attracts the attackers? David "moose" Wolpoff, CTO at Randori, discusses how to evaluate your infrastructure for juicy targets.

IoT 91

IoT InfoSec Mobile 91

Threatpost

MARCH 8, 2022

While IT automation is growing, big challenges remain. Chris Hass, director of information security and research at Automox, discusses how the future looks.

Information Security 88

Information Security IoT InfoSec Mobile 88

Threatpost

SEPTEMBER 2, 2019

Implementing game mechanics and competition into the mix can incentivize employees to improve their cybersecurity posture.

Cybersecurity 81

Cybersecurity InfoSec Passwords IoT 81

Threatpost

MAY 29, 2019

What does 5G mean from a security vendor perspective? A Palo Alto Networks expert sounds off at GSMA's Mobile360 this week.

IoT 75

IoT InfoSec Mobile Hacking 75

eSecurity Planet

MAY 5, 2021

DXC Technology has over 40 years of infosec experience, most of which as HPE’s Enterprise Services. Services include tools for managing incident response, breaches, threats, and vulnerabilities, threat intelligence feeds, OT and IoT security, and cyber maturity reviews. See our in-depth analysis of Cymulate’s BAS platform.

Penetration Testing 67

Penetration Testing Risk Technology Marketing 67

Threatpost

DECEMBER 20, 2019

Artificial intelligence can provide manpower, context and risk assessment.

Artificial Intelligence 41

Artificial Intelligence Risk InfoSec IoT 41

SecureList

AUGUST 15, 2022

Non-mobile statistics. Mobile statistics. The Conti infrastructure was shut down in late June, but some in the infosec community believe that Conti members are either just rebranding or have split up and joined other ransomware teams, including Hive, AvosLocker and BlackCat. IoT attacks. IoT threat statistics.

Mobile 93

Mobile Adware Ransomware Malware 93

Notice Bored

JULY 9, 2022

Infosec is quite involved and - as you'll surely appreciate from this very blog - I tend to focus and elaborate on the complexities, writing profusely on topics that I enjoy. a succinct style - laying out the organisation's rules for acceptable and unacceptable behaviours in topic areas such as malware, cloud and IoT. Fair comment!

InfoSec 113

InfoSec Mobile Media Risk 113

SecureList

AUGUST 3, 2022

A further DDoS target was the Gosuslugi e-government website and mobile application. NashStore, Russia’s mobile app marketplace modeled after App Store and Google Play, experienced outages on its official launch day. Attacks on IoT honeypots. The SPIEF press pass issuance system and press room experienced issues too.

DDOS 142

DDOS Government Marketing IoT 142

The Falcon's View

FEBRUARY 27, 2017

Now that I've had a week to recover from the annual infosec circus event to end all circus events, I figured it's a good time to attempt being reflective and proffer my thoughts on the event, themes, what I saw, etc, etc, etc. The wifi and mobile signals in the Marquis dungeon were nonexistent, which was painful. good grief.

InfoSec 40

InfoSec Education Accountability Big data 40

ForAllSecure

SEPTEMBER 21, 2021

They discuss how software and IoT companies can avoid becoming the next Black Mirror episode and share resources that can help survivors (and those who want to help them) deal with the technology issues that can be associated with technologically facilitated abuse. And what if that unease was coming from your mobile device.

Technology 52

Technology Software Surveillance Media 52

SecureList

MAY 26, 2021

One more constellation of vulnerabilities that appeared in the infosec sky was a threesome of critical bugs in the popular SolarWinds Orion Platform – CVE-2021-25274 , CVE-2021-25275 , CVE-2021-25276. IoT attacks. IoT threat statistics. These vulnerabilities were found in-the-wild and had been used by APT and ransomware groups.

Phishing 144

Phishing Malware Ransomware Adware 144

ForAllSecure

JULY 6, 2022

There’s an online war in Ukraine, one that you haven’t heard much about because that country is holding its own with an army of infosec volunteers worldwide. RSAC also attracts some of the top researchers in infosec. Those early mobile viruses weren't monetized; they were still proof of concepts.

Cybercrime 40

Cybercrime Government Ransomware Hacking 40