Physical Security Has a Lot of Catching Up to Do
Dark Reading
OCTOBER 28, 2020
The transformation we need: merging the network operations center with the physical security operations center.
physical-security physical-security-has-a-lot-of-catching-up-to-do 
Is Your Chip Card Secure? Much Depends on Where You Bank
Krebs on Security
JULY 30, 2020
based merchants suggest thieves are exploiting weaknesses in how certain financial institutions have implemented the technology to sidestep key chip card security features and effectively create usable, counterfeit cards. But a recent series of malware attacks on U.S.-based A chip-based credit card. Image: Wikipedia.
Banking 
360
360 Join 29,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Android banking trojans: How they steal passwords and drain bank accounts
Malwarebytes
FEBRUARY 27, 2024
While the 2024 ThreatDown State of Malware report focuses heavily on the corporate security landscape today, make no mistake: Android banking trojans pose a serious threat to everyday users. What are Android banking trojans? Take the SharkBot banking trojan, which Malwarebytes detects and stops.
Banking 143
143 
"Free" Evil Dead Rise movie scam lurks in Amazon listings
Malwarebytes
JUNE 29, 2023
Evil Dead Rise, the breakout horror film of 2023, started with big cinema numbers and has moved on to a victory lap in streaming land for good measure. In fact, it’s doing so well that the original film from 1981 has crept into the charts too: 2 Evil Dead flix top 10 in the world on HBO. Thanks, Deadites.
Scams 98
98 
Best Disaster Recovery Solutions for 2022
eSecurity Planet
JULY 8, 2022
But more recently, a lot more has been put on the DR plate. Ransomware has now emerged as one of the key reasons to have a DR plan and DR technology in place. However it is done, the concept remains the same—to bring systems back up in as speedy a manner as possible with as little data loss as possible.
Backups 128
128 
GUEST ESSAY: How and why ‘pen testing’ will continue to play a key role in cybersecurity
The Last Watchdog
MARCH 15, 2021
Since we are quickly putting out large technologies, security risks always come with this. Microsoft has had several security vulnerabilities including Zero Logon. Microsoft has had several security vulnerabilities including Zero Logon. In fact, there is evidence that technology grows exponentially fast.
Google warns some users that FancyBear’s been prowling around
Malwarebytes
OCTOBER 11, 2021
Did Google catch all the malicious missives? He goes into more details in this thread: TAG sent a above average batch of government-backed security warnings yesterday. Google has more information on this type of warning over on its security blog. Physical security keys are a big feature of this program.
Government 102
102 
Supply Chain Security 101: An Expert’s View
Krebs on Security
OCTOBER 12, 2018
alongside Tony Sager , senior vice president and chief evangelist at the Center for Internet Security and a former bug hunter at the U.S. National Security Agency. Tony Sager, senior vice president and chief evangelist at the Center for Internet Security. TS: Like a lot of things in security, the economics always win.
The Hacker Mind Podcast: Incident Response in the Cloud
ForAllSecure
APRIL 4, 2023
How is it different, and why do we need to pay more attention to it today, before something major happens tomorrow. James Campbell, CEO of Cado Security , shares his experience with traditional incident response, and how the cloud, with its elastic structure, able to spin up and spin down instances, is changing incident response.
Government 40
40 
The Challenges in Building Digital Trust
SecureWorld News
DECEMBER 11, 2023
How do you trust an algorithm that's making thousands of decisions a second when you don't even know how it works? And how do you trust a company that is silently tracking your movements every day, collecting data on you, and not telling you what they do with that data? Have you been thinking about digital trust?
Technology 97
97 
The Hacker Mind Podcast: So You Want To Be A Pentester
ForAllSecure
FEBRUARY 23, 2021
They focus on the physical aspects-- some might say glamorous side -- of the job. I mean who wouldn't want to do that for a living? Much less exciting, perhaps, but that’s only because Hollywood choses to focus only on the physical and not really get into the digital side. And yeah, there’s some of that.
The Hacker Mind Podcast: So You Want To Be A Pentester
ForAllSecure
FEBRUARY 23, 2021
They focus on the physical aspects-- some might say glamorous side -- of the job. I mean who wouldn't want to do that for a living? Much less exciting, perhaps, but that’s only because Hollywood choses to focus only on the physical and not really get into the digital side. And yeah, there’s some of that.
RSA Conference 2021: The Best Place to Strengthen Your Resilience
McAfee
MAY 7, 2021
Instead of booking flights and hotel rooms in the busy city of San Francisco, we’ll be powering up computers in our home office with family in the next room. Whether that disruption originated from digital factors, or indeed physical but to keep the wheels turning. This year’s RSA Conference will look a little different.
The Hacker Mind Podcast: The Internet As A Pen Test
ForAllSecure
MAY 17, 2023
VAMOSI: Something has changed in the last five years, and demonstrably so. A lot of SMBs do not have security operations centers or SOCs. They have IT contractors who can provision laptops and maintain a certain level of compliance and security. They can provide that additional security, remotely.
Internet 40
40 
The Fuzzing Files: The Anatomy of a Heartbleed
ForAllSecure
JULY 28, 2020
In late March 2014, two teams of security researchers independently started fuzz testing OpenSSL, an open source utility that encrypts traffic from a web browser to a server and forms the basis of trusted transactions online. ” To test their fuzzing engines, security vendors will randomly choose from open source tools in use today.
Encryption 52
52 
CISSPs from Around the Globe: An Interview with Jason Lau
CyberSecurity Insiders
MAY 6, 2021
The Certified Information Systems Security Professional (CISSP) certification is considered to be the gold standard in information security. Those doors lead to many different types of positions and opportunities, thus making the information security community dynamic and multifaceted. What job do you do today?
About them Zoom vulns.
Errata Security
APRIL 1, 2020
Hackers can possibly exploit these to do evil things to you, such as steal your password. I thought I'd write up a blogpost answering their questions. I thought I'd write up a blogpost answering their questions. Unless you do bad things, like using the same password everywhere, it's unlikely to affect you.
Passwords 47
47 
The Hacker Mind Podcast: Hacking Teslas
ForAllSecure
JUNE 8, 2022
So for a young, streetwise petty thief who wanted to make a big score, he needed to up his game. With digital convenience there’s often a price. And if that means a bad actor can create a wireless key for your new Tesla, that price is pretty steep. But in the early 2000s, that was starting to give away to key fobs. And he did it again.
Hacking 52
52 
Prilex: the pricey prickle credit card complex
SecureList
SEPTEMBER 28, 2022
Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. Active since 2014, in 2016, the group decided to give up ATM malware and focus all of their attacks on PoS systems, targeting the core of the payment industry. It all started with ATMs during a carnival celebration.
Malware 96
96 
The Hacker Mind Podcast: Fuzzing Crypto
ForAllSecure
FEBRUARY 2, 2022
That’s what you do, you put cryptocurrency in either a digital or a hardware wallet, the latter of which is basically a dongle. Fortunately, this is digital hardware device--the password is on a chip somewhere -- so Dan and his friend turned to a world-renowned embedded security expert, Joe Grand, who looked at the Trezor wallet.
Firmware Fuzzing 101
ForAllSecure
DECEMBER 16, 2020
Very few of these devices have security in mind when they were built. Catch the FASTR series to see a technical proof of concept on our latest zero-day findings. This requires an increased level of expertise and know-how to deal with efficiently: Dependency on specific hardware features present on the physical device.
Firmware 52
52 
AI Will Save Security – And Eliminate Jobs
eSecurity Planet
JUNE 7, 2023
AI has been the subject of a lot of hype in recent months, but one place where the hype is justified is cybersecurity. AI will completely remake the cybersecurity landscape — and create a lot of disruption in the process. Security is the biggest challenge facing IT, and expect that to get worse in the near term.
Education 100
100 
MY TAKE: SMBs can do much more to repel ransomware, dilute disinformation campaigns
The Last Watchdog
SEPTEMBER 20, 2019
However, at this moment in history, two particularly worrisome types of cyber attacks are cycling up and hitting local government entities hard: ransomware sieges and election tampering. Current attack trends add urgency, and catching up on doing basic security best practices isn’t enough. That’s long been true.
Ransomware 153
153 
13 Steps to Take if You’ve Been Laid Off in Cybersecurity (which everyone should read)
Jane Frankland
FEBRUARY 1, 2023
The past couple of years has seen remote work leveling the playing field in terms of women in cybersecurity. Simply being able to work from home has made it easier for many companies to draw in a more diversified workforce, and boost their presence of women and minorities. Just look at the tech layoff counter this week !
Cybersecurity 130
130 
Sunburst backdoor – code overlaps with Kazuar
SecureList
JANUARY 11, 2021
Similarly, many other security companies published their own analysis of the Sunburst backdoor, various operational details and how to defend against this attack. Palo Alto tentatively linked Kazuar to the Turla APT group , although no solid attribution link has been made public. We describe these similarities in detail below.
Malware 61
61 
APT Attacks & Prevention
eSecurity Planet
MARCH 23, 2022
The average “dwell time” – the period between infiltration and detection – has been dropping in recent years and may be down to an average of a few weeks , but advanced hackers can do a lot of damage in that time. However, some additional security techniques can improve the odds against APTs even more.
Firewall 98
98 
Q&A on the Future of Work
Cisco Security
FEBRUARY 14, 2022
Recently Richard Archdeacon, advisory CISO and Josh Green, Technical Strategist at Duo Security, gave a virtual keynote presentation at the Cybersecurity Leadership Summit 2021 in Berlin where they discussed the Future of Work. Q: It’s pretty irrefutable that the world of work has been disrupted significantly over the last few years.
Passwords 104
104 
The Hacker Mind Podcast: Car Hacking 0x05
ForAllSecure
AUGUST 10, 2021
That’s perhaps because of a dedicated group of hackers who are working to improve automotive security. Vamosi: That familiar beep beep as you walk away through a parking lot or garage is enough assurance from most that our car is both locked and safe in my first book, when gadgets betray us. And in a moment you'll hear from one.
Hacking 52
52 
What is Network Security? Definition, Threats & Protections
eSecurity Planet
MARCH 14, 2023
Network security creates shielded, monitored, and secure communications between users and assets. Securing the expanding, sprawling, and sometimes conflicting collection of technologies that make up network security provides constant challenges for security professionals.
How to spot a scam
Malwarebytes
OCTOBER 18, 2022
The virtual ties that bind us are international now: Our public telephone numbers, social media accounts, email addresses, messaging apps, dating profiles, and even our physical mailboxes, can all be reached by any criminal and con artist from anywhere in the world. There is a lot to remember. Being specific, the advice is narrow.
Scams 96
96 
10 Network Security Threats Everyone Should Know
eSecurity Planet
MARCH 16, 2023
Network security threats weaken the defenses of an enterprise network, endangering proprietary data, critical applications, and the entire IT infrastructure. This guide to major network security threats covers detection methods as well as mitigation strategies for your organization to follow. Also read: What is Network Security?
Network Security 103
103 
The Hacker Mind Podcast: Hacking High-Tech Cars
ForAllSecure
NOVEMBER 9, 2022
For example, a simple system that has only an on off switch. Yet by integrating granular controls such as volume, we've just made the mobile phone a lot more complex. Vamosi: For most of us that familiar beep beep as we walk away from a parking garage is enough to assure that our car has been both locked and as safe.
Hacking 40
40 
What Is VLAN Tagging? Definition & Best Practices
eSecurity Planet
OCTOBER 17, 2023
A virtual local area network (VLAN) is a virtualized segment that’s created on a physical network to separate and group devices into more logical environments. This separation helps to control traffic, optimize network performance, and even improve security by isolating sensitive workloads and data.
The Hacker Mind Podcast: The Hunt for Ghost #1
ForAllSecure
OCTOBER 19, 2021
There is of course a lot of security around these digital releases, for example, there's watermarks, digital certificates, and even keys at the code, the encrypted copies of the films in specific theaters for specific periods of time. Yet, somewhere in China. When digital production servers slipped through the cracks.
Marketing 52
52 
Human Hacking Conference – Year BETA
Security Through Education
APRIL 26, 2021
The uncertainty that this caused left a lot in the lurch when it came to planning a conference. Running the SEVillage at various security conferences inspired Chris to create a unique conference that explored human behavior in its various forms. But the road to HHC 2021 was not a smooth one.
Hacking 52
52 
How Does Ransomware Work – All You Need to Know
Spinone
JANUARY 20, 2020
In this article, we will take a detailed look at how ransomware works, how your data can be corrupted and encrypted by it, and what you can do to decrease this probability as much as possible! But of course, there still are a lot of exceptions. But how does ransomware work? Most antiviruses don’t protect against ransomware.
Ransomware 59
59 
Will Pipeline Hack Be Tipping Point in Ransomware Crisis?
SecureWorld News
MAY 16, 2021
Gas prices are going up, and ransomware hackers are (partly) to blame. Meanwhile, the role of cryptocurrency in enabling such crime—ransomware gangs only take payment in crypto—has been barely discussed. But it will take a lot more than meetings and task forces to make a difference in the ransomware scourge. "I
Ransomware 64
64 
The Hacker Mind Podcast: Hacking Ransomware
ForAllSecure
MAY 18, 2021
He also talks about his infosec journey hacking cryptocurrencies, joining the Digital Defense Service and CISA, and helping secure the 2020 presidential election… all before the age of 22. Vamosi: That's Chris Krebs, former director of the Cybersecurity and Infrastructure Security Agency under the US Department of Homeland Security.
Hacking 52
52 
The Hacker Mind Podcast: Hacking Ransomware
ForAllSecure
MAY 18, 2021
He also talks about his infosec journey hacking cryptocurrencies, joining the Digital Defense Service and CISA, and helping secure the 2020 presidential election… all before the age of 22. Vamosi: That's Chris Krebs, former director of the Cybersecurity and Infrastructure Security Agency under the US Department of Homeland Security.
Hacking 52
52 
RedTorch Formed from Ashes of Norse Corp.
Krebs on Security
MARCH 22, 2021
Now, the founders of Norse have launched a new company with a somewhat different vision: RedTorch , which for the past two years has marketed a mix of services to high end celebrity clients, including spying and anti-spying tools and services. By 2014 it was throwing lavish parties at top Internet security conferences.
Surveillance 266
266 
The ambition for a ‘made in Europe’ AI: the Why, the What and the How
IT Security Guru
DECEMBER 18, 2020
The European Commission (EC) has developed an ambitious AI strategy and its implementation will require member states to join forces. While this definition is certainly useful, it doesn’t offer a clear insight on why AI has become a strategic priority for countries around the world. What is at stake? Who will win the AI race?
News & Analysis | No. 281
Daniel Miessler
MAY 17, 2021
SECURITY NEWS. Darkside, the ransomware group that ransomed Colonial, has largely gone dark after its servers and Bitcoin were seized. But it turns out that if your IT systems don’t work you can’t do things like, “operate your business”, so it ends up hurting almost as much as an OT attack anyway.
Insurance 130
130 
Author Q&A: In modern cyberwarfare ‘information security’ is one in the same with ‘national security’
The Last Watchdog
AUGUST 16, 2021
Now comes a book by John Arquilla, titled Bitskrieg: The New Challenge of Cyberwarfare , that lays out who’s doing what, and why, in terms of malicious use of digital resources connected over the Internet. The big question is: What can – and should — we do about the current situation? What exactly constitutes cyberwarfare?
Let's personalize your content