Schneier on Security

MAY 10, 2021

This is a major story : a probably Russian cybercrime group called DarkSide shut down the Colonial Pipeline in a ransomware attack. This is bad; our supply chains are so tightly coupled that this kind of thing can have disproportionate effects. The pipeline supplies much of the East Coast.

Ransomware 337

Ransomware Cybercrime 337

Graham Cluley

MARCH 20, 2024

enthusiastically encourages Chrome users to stop using Google, and silence hits the British Library as it shares its story of a ransomware attack. Plus: Don't miss our featured interview with Kolide founder Jason Meller about his firm's acquisition by 1Password.

Ransomware 95

Ransomware Cybersecurity Data breaches Malware 95

SiteLock

AUGUST 27, 2021

Learn from our SiteLock Web Security Research Analysts, Jessica Ortega, Ramuel Gall, and Topher Tebow, as they highlight three of our most popular cybersecurity topics from the past year. Sign up now and be part of the discussion as our experts review these hot cybercrime topics and the lessons we learned from them.

Cryptocurrency 52

Cryptocurrency Data breaches Cybercrime Cybersecurity 52

Veracode Security

DECEMBER 21, 2023

As 2023 comes to a close, we aim to inspire excellence by highlighting our customers’ dedication to a more secure world. Let’s explore some of the stories that make this recognition possible. We constantly strive to understand both the problems and North Star our customers face so we can be the partner you truly need.

95

95

Troy Hunt

OCTOBER 20, 2021

The full tale of what I first did (and how disastrous it ultimately became), is up front early in the book so I won't relay it here, but it's quite the story. I'm even in the story of how it became the internet's favourite taunt , again, somehow. The book title - Pwned - also seemed like a natural fit.

Data breaches 318

Data breaches Internet Internet 318

Krebs on Security

APRIL 3, 2024

In January 2024, The Manipulaters pleaded with this author to unpublish previous stories about their work, claiming the group had turned over a new leaf and gone legitimate. Since that story ran, KrebsOnSecurity has heard from this Saim Raza identity on two occasions. Why you destroy our lifes? “Why you post us? .

Phishing 209

Phishing Cybercrime Malware Advertising 209

The Last Watchdog

SEPTEMBER 14, 2023

Leveraging WebAssembly’s sandboxing capabilities allows us to isolate potential risks, while Rust provides the memory safety essential for our modern internet applications. Our major platforms, tools integral to modern life, are now used as vehicles for misinformation and chaos. The trust deficit we experience today is palpable.

Internet 267

Internet Internet Technology Risk 267

Troy Hunt

APRIL 1, 2022

This is such a tricky one; if their products sucked we could all just forget about them and go on with our day. Everyone just came for the Ubiquiti discussion, right?

Passwords 272

Passwords Government 272

Security Boulevard

MARCH 16, 2022

Our experience makes up our story, the record of our value. Our story captures the characters, conflicts, and resolutions on our journey. With each new chapter in our story, we grow by solving problems and resolving conflicts. As we increase […].

103

103

Schneier on Security

FEBRUARY 13, 2021

Bloomberg News has a major story about the Chinese hacking computer motherboards made by Supermicro, Levono, and others. This is a follow on, with a lot more detail, to a story Bloomberg reported on in fall 2018. I didn’t believe the story back then, writing: I don’t think it’s real. Yes, it’s plausible.

Surveillance 357

Surveillance Government Internet Internet 357

Security Boulevard

OCTOBER 24, 2023

We discussed our real world experience with pitfalls and success stories with Kubernetes based on our experience in this space, answering questions from attendees. The post AMA with K8s Experts: Learn from Real-Life Pitfalls & Success Stories appeared first on Security Boulevard.

67

67

Security Boulevard

FEBRUARY 11, 2024

When we persevere through difficulties our results are often better than initially expected. Here’s a story of how pandemic disappointments and travel problems led to new professional opportunities. The post Cyber Mayday and My Journey to Oz appeared first on Security Boulevard.

67

67

Schneier on Security

APRIL 5, 2023

Genesis Market is shut down : Active since 2018, Genesis Market’s slogan was, “Our store sells bots with logs, cookies, and their real fingerprints.” Slashdot story.

Marketing 197

Marketing Internet Internet Cybercrime 197

Anton on Security

APRIL 11, 2024

Recently our team has written several papers and blogs focused on securing AI. Our Security of AI Papers and Blogs Explained was originally published in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story. No Deep AI Security Secrets In This Post!

Artificial Intelligence 130

Artificial Intelligence Government Risk Technology 130

Schneier on Security

DECEMBER 26, 2022

These encrypted fields remain secured with 256-bit AES encryption and can only be decrypted with a unique encryption key derived from each user’s master password using our Zero Knowledge architecture. That they lost customer data is another story… ). Fair enough, as far as it goes.

Passwords 260

Passwords Encryption Backups Password Management 260

Javvad Malik

NOVEMBER 30, 2021

Our eyes lock briefly, and it takes just that fleeting glance to exchange our stories. Our glance tells the story of our journey, where we came from, and the unknown into which we are heading. Some have exquisite rings, others with grand sparkling crowns, and some have small trinkets.

113

113

Anton on Security

AUGUST 30, 2023

So, if you are too busy to read our amazing (duh!) You can do this, using ̶p̶o̶w̶e̶r̶f̶u̶l̶ ̶A̶I̶ ̶v̶o̶o̶d̶o̶o̶ ̶m̶a̶g̶i̶c̶ many of the approaches and practices ( our blog again has the details ) that you should have started doing years ago, but most never did. Classic Practices Will Probably Save You!

Firewall 130

Firewall Software Threat Detection Cybersecurity 130

Jane Frankland

MARCH 12, 2024

Could these two seemingly synonymous words actually spell out different narratives in the screenplay of our lives? It’s the glossy finish on the surface of our day-to-day exchanges. This moved from a nicety to an act of kindness, taking the time to listen and engage with people whose stories truly intrigued me.

Cyber Attacks 162

Cyber Attacks Authentication 162

Troy Hunt

JULY 20, 2023

I doubt there is a more well known name in our industry but if he’s unfamiliar to you (or you haven’t read this book), go and grab “Ghost in the Wires” which is an exceptional read. Watch the demo today! 🤯 (the.mil conflation with.ml

InfoSec 169

InfoSec 169

Schneier on Security

APRIL 8, 2022

“If they can no longer be considered immune to felt pain, invertebrate experiences will need to become part of our species’ moral landscape,” she says. ” As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.

178

178

Schneier on Security

NOVEMBER 13, 2020

It feels like writing this story was a welcome distraction from writing about the US election: “No one has to worry about the integrity of our bird election,” she told Radio New Zealand, adding that every vote would be counted.

308

308

The Security Ledger

NOVEMBER 14, 2023

Like the actual favelas and shanty towns that have sprung up in developing nations over the last century, our application ecosystem is sprawling, unregulated, ad-hoc and prone to shocking. » Related Stories Sickened by Software? Read the whole entry. »

Software 98

Software Hacking Data breaches 98

Krebs on Security

JANUARY 11, 2021

NYSE: UI ] said it recently became aware of “unauthorized access to certain of our information technology systems hosted by a third party cloud provider,” although it declined to name that provider. This is a developing story that may be updated throughout the day. In an email sent to customers today, Ubiquiti Inc.

Passwords 332

Passwords Authentication Firmware Accountability 332

Schneier on Security

OCTOBER 30, 2020

It’s a form of intelligence that’s completely independent from ours. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Whereas cephalopod brains have evolved from a ring of nerves around the esophagus. Read my blog posting guidelines here.

205

205

Schneier on Security

APRIL 22, 2022

“The metal islands in our composite material are next to one another when the material is relaxed and become separated when the material is stretched, allowing for control of the reflection and transmission of infrared light or heat dissipation,” said Gorodetsky. Research paper. Read my blog posting guidelines here.

Engineering 193

Engineering 193

Schneier on Security

MAY 19, 2023

Of course, our current society is terrible at global solutions—to anything. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. The second is that no nation-state has the proper regulatory footprint to manage the world’s oceans.

Hacking 168

Hacking 168

Security Boulevard

MARCH 7, 2024

Rob Burgundy is here to tackle a story hotter than a disco inferno in polyester pants: Artificial Intelligence (AI) and Cybersecurity. In this digital age, hackers are running rampant like greased weasels in a chicken coop, stealing our precious data faster than you can say "glass case of emotion." That's right, folks.

Artificial Intelligence 60

Artificial Intelligence Cybersecurity 60

Anton on Security

JANUARY 10, 2024

So, we ( Tim and Anton , the crew behind the podcast ) wanted to post another reflections blog based on our Cloud Security Podcast by Google being almost 3 (we will be 3 years old on Feb 11, 2024, to be precise), kind of similar to this one. But we realized we don’t have enough new profound reflections…. We do have a few fun new things!

Cloud Migration 130

Cloud Migration Government Network Security Risk 130

Krebs on Security

AUGUST 19, 2021

Reached via LinkedIn, Sociogram founder Oluwaseun Medayedupin asked to have his startup’s name removed from the story, although he did not respond to questions about whether there were an inaccuracies in Hassold’s report. Open our letter at your email. Image: Abnormal Security. “I beg you as a promising young man.”

Ransomware 355

Ransomware Social Engineering Cybercrime Scams 355

CSO Magazine

JANUARY 11, 2022

As we enter the second year of the pandemic, it’s not an exaggeration to say that COVID-19 has impacted every aspect of our personal and professional lives. To read this article in full, please click here (Insider Story) When it comes to trends in enterprise security, the pandemic has been a gamechanger.

Cybersecurity 131

Cybersecurity 131

Adam Shostack

FEBRUARY 15, 2021

I am not a master of the OKR form, but some simple examples might include: Increase assurance that we’re making the right security investments by having current threat model documents for 95% of our apps and operational environments. Ideally, these would be anonymized versions of real OKRs, possibly with history. ”).

239

239

Security Boulevard

JUNE 26, 2023

The DBIR was one inspiration for us to create our own annual Cybersecurity Risk Report analyzing FAIR™ top-risk scenarios populated with data gathered from the DBIR and other trusted industry sources. The post Buried Story of the 2023 Verizon DBIR: Ransomware Stopped Growing appeared first on Security Boulevard.

Ransomware 103

Ransomware Cyber Risk Data breaches Risk 103

Schneier on Security

MARCH 12, 2021

Observations of the CMB have shown that we live in an expanding Universe, determined the age of our Universe, and identified the fraction of it composed of dark matter and dark energy. Measurements of the CMB have transformed our understanding of the Universe we live in. Read my blog posting guidelines here.

191

191

Anton on Security

JANUARY 10, 2022

New Paper: “Future Of The SOC: Process Consistency and Creativity: a Delicate Balance” (Paper 3 of 4) Sorry, it took us a year (long story), but paper #3 in Deloitte/Google collaboration on SOC is finally out. capturing this magic was our focus for the paper!]

Engineering 339

Engineering Technology Cybersecurity 339

Schneier on Security

JUNE 6, 2023

My knowledge and expertise could help figure out which stories needed to be reported. They publish only those portions essential to getting the story out. It will, however, write stories in the public interest, and I would be allowed to review the documents as part of that process. I drafted stories based on what I found.

Surveillance 293

Surveillance Computers and Electronics Encryption Government 293

Adam Shostack

DECEMBER 16, 2020

What are the Russians going to do with plans for our nuclear weapons? Plans for our next generation weapons may, indeed, be useful to them for finding weaknesses in those systems or copying them. Focusing in on assets helps us tell stories about those assets. If we predicate our defenses on these stories, we may be lead astray.

Government 182

Government Hacking 182

Cisco Security

APRIL 26, 2022

For my very first interview for the Security Stories podcast , I met a wonderful person called Mick Jenkins, MBE. Mick is sadly no longer with us, but his story will stay with me forever. When I’m going through a tough time, I think about how I can change the story. Improvise, adapt, overcome” are the words he used.

CISO 111

CISO Data privacy Cybersecurity Technology 111