The Security Ledger

IT Asset Disposition (ITAD) is the Slow Motion Data Breach Nobody notices

Efforts to wall off sensitive corporate and government data from foreign adversaries have a gaping hole: IT asset disposition (ITAD), where vendors – many owned by Chinese firms – process discarded hardware and data with little oversight. The post IT Asset Disposition (ITAD) is the Slow Motion Data Breach Nobody notices appeared first on The…Read the whole entry… »Related StoriesResolve to fix your Online Security Mess in 2020. Here’s how.Spotlight Podcast: Building Resilience into the IoT with Rob SpigerPasswordless? Imagining the Future of Authentication …

Episode 173: Iran’s Cyber Payback for Soleimani Killing may have a Long Fuse

Michael York Reading, PA

As it weighs further response to the assassination of General Qasem Soleimani, Iran is almost certain to consider the use of cyber attacks. We talk with Levi Gundert at the firm Recorded Future about what cyber “payback” from Tehran might look like. The post Episode 173: Iran’s Cyber Payback for Soleimani Killing may have a Long Fuse…Read the whole entry… » Related StoriesChinese APT Group, Used Stolen NSA Hacking Tools Before Shadow BrokersWarning: Trump Terrorist Designation May Prompt Iranian Cyber AttacksFirm Uncovers Major Cyber-Espionage Campaign Against Telcos …

Eliminate the Password, Eliminate the Password Problem.

Michael York Reading, PA

Weak, stolen or reused passwords are the root of 8 in 10 data breaches. Fixing the data breach problem means abandoning passwords for something more secure. But what does passwordless authentication even look like? Yaser Masoudnia, the Senior Director Product Management, Identity Access Management, at LogMeIn* takes us there. The post Eliminate…Read the whole entry… »Related StoriesExplained: Two-Factor vs. Multi-Factor AuthenticationResolve to fix your Online Security Mess in 2020. Here’s how.Episode 163: Cyber Risk has a Dunning-Kruger Problem Also: Bad Password Habits start at Home …

Episode 172: Securing the Election Supply Chain

Michael York Reading, PA

In this episode of the podcast (#172), Jennifer Bisceglie, the founder and CEO of Interos to talk about the links between America’s voting infrastructure and countries with a history of trying to subvert democracy. The post Episode 172: Securing the Election Supply Chain appeared first on The Security Ledger. Related StoriesStudy finds Chinese Hardware Powers U.S. Voting MachineSpotlight Podcast: Building Resilience into the IoT with Rob SpigerSpotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT Insecurity …

Resolve to fix your Online Security Mess in 2020. Here’s how.

Michael York Reading, PA

If you do nothing else in 2020, resolve to clean up the mess that is your online security. We give you some simple steps to level up your password and account security. The post Resolve to fix your Online Security Mess in 2020. Here’s how. appeared first on The Security Ledger. Related StoriesEpisode 163: Cyber Risk has a Dunning-Kruger Problem Also: Bad Password Habits start at HomeRSA warns Digital Transformation is supercharging Digital RiskPasswordless? Imagining the Future of Authentication …

Spotlight Podcast: Building Resilience into the IoT with Rob Spiger

Michael York Reading, PA

In this Spotlight edition of the Security Ledger Podcast, sponsored by Trusted Computing Group*: we’re joined by Rob Spiger, a principal security strategist at Microsoft and co-chair of the cyber resilient technologies working group at Trusted Computing Group. Rob talks to us about efforts to make more resilient connected devices and how the…Read the whole entry… » Related StoriesSpotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT InsecuritySpotlight Podcast: RSA CTO Zulfikar Ramzan on confronting Digital Transformation’s Dark SideSpotlight Podcast: Beyond HIPAA – a Conversation with Nemours CPO Kevin Haynes …

Spotlight Podcast: Beyond HIPAA – a Conversation with Nemours CPO Kevin Haynes

Michael York Reading, PA

In this Spotlight edition of The Security Ledger podcast, sponsored by RSA Security, the Chief Privacy Officer at Nemours Healthcare, Kevin Haynes, joins us to talk about the fast evolving privacy demands on healthcare firms and how the Chief Privacy Officer role is evolving to address new privacy and security threats. The post Spotlight Podcast:…Read the whole entry… » Related StoriesEpisode 170: Cyber Monday is for HackersSpotlight Podcast: RSA President Rohit Ghai warns Digital Transformation is magnifying Enterprise RiskSpotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT Insecurity …

Study finds Chinese Hardware Powers U.S. Voting Machine

Michael York Reading, PA

A new study by the firm Interos found that many hardware components in a popular touchscreen voting machine used in the U.S. originate in China or Russia. The post Study finds Chinese Hardware Powers U.S. Voting Machine appeared first on The Security Ledger. Related StoriesFirm Uncovers Major Cyber-Espionage Campaign Against TelcosAhead of Black Hat: Fear and Pessimism in Las VegasEpisode 149: How Real is the Huawei Risk? …

Episode 171: Stopping the 21st Century’s Plumbers – Defending Digital Campaigns from Hackers

Michael York Reading, PA

In this week’s episode of the podcast (#171): as voters go to the polls in the UK and primaries loom here in the U.S., we sit down with Michael Kaiser, the CEO of a new group: Defending Digital Campaigns and Joel Wallenstrom, the CEO of secure collaboration platform Wickr to discuss efforts to extend an information security lifeline to…Read the whole entry… » Related StoriesEpisode 170: Cyber Monday is for HackersSpotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT InsecurityEpisode 168: Application Security Debt is growing and Securing Web Apps in the Age of IoT …

Passwordless? Imagining the Future of Authentication

Michael York Reading, PA

The average employee in the workplace has 191 passwords. Will we ever rid ourselves of them and, if so, how? Gerald Beuchelt, the Chief Information Security Officer at LogMeIn talks about how changes in authentication may deliver a passwordless future. The post Passwordless? Imagining the Future of Authentication appeared first on The Security…Read the whole entry… »Related StoriesEpisode 163: Cyber Risk has a Dunning-Kruger Problem Also: Bad Password Habits start at HomeExplained: Two-Factor vs. Multi-Factor AuthenticationEpisode 164: Who owns the Data Smart Cars collect? Also: making Passwords work. …

Episode 170: Cyber Monday is for Hackers

Michael York Reading, PA

This Cyber Monday may have been the biggest yet – and not just for shoppers and online retailers. Hackers use the year’s biggest online shopping day to cover their tracks. Brendon Macareg of Signal Sciences joins us to talk about Cyber Monday and the rising tide of e-commerce hacks. The post Episode 170: Cyber Monday is for Hackers appeared first…Read the whole entry… » Related StoriesEpisode 168: Application Security Debt is growing and Securing Web Apps in the Age of IoTEpisode 164: Who owns the Data Smart Cars collect? Also: making Passwords work.Spotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT Insecurity …

Episode 169: Ransomware comes to the Enterprise with PureLocker

Michael York Reading, PA

In this episode of the podcast, sponsored by PureVPN, Michael Kajiloti of the firm Intezer Labs joins us to talk about the origins and makeup of PureLocker, a new family of ransomware designed to target production servers in the enterprise. The post Episode 169: Ransomware comes to the Enterprise with PureLocker appeared first on The Security…Read the whole entry… » Related StoriesDark Web Looms Large as Enterprise ThreatExpert: Patch Bluekeep Now or Face WannaCry ScenarioEpisode 164: Who owns the Data Smart Cars collect? Also: making Passwords work. …

Spotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT Insecurity

Michael York Reading, PA

In this spotlight edition of the podcast, sponsored by Trusted Computing Group* Steve Hanna joins us to talk about TCG’s 20th anniversary and how the group is tooling up to confront the challenge of securing billions of Internet of Things devices. The post Spotlight Podcast: Two Decades On, Trusted Computing Group tackles IoT Insecurity appeared…Read the whole entry… » Related StoriesEpisode 164: Who owns the Data Smart Cars collect? Also: making Passwords work.Episode 168: Application Security Debt is growing and Securing Web Apps in the Age of IoTSpotlight Podcast: RSA CTO Zulfikar Ramzan on confronting Digital Transformation’s Dark Side …

Episode 168: Application Security Debt is growing. Also: Web App Security in the Age of IoT

Michael York Reading, PA

In this week’s episode of the podcast (#168), sponsored by Signal Sciences, Chris Eng of Veracode joins us to talk about the 10th annual State of Software Security Report and the problem of application security debt. Also, Brendan Macaraeg of Signal Sciences talks about the expanding landscape of web application attacks and defenses. The post…Read the whole entry… » Related StoriesHuge Survey of Firmware Finds No Security Gains in 15 YearsEpisode 166: But Why, AI? ZestAI’s Quest to make Artificial Intelligence ExplainableEpisode 164: Who owns the Data Smart Cars collect? Also: making Passwords work. …

Suit against Estée Lauder spotlights 401k Distribution Fraud

Michael York Reading, PA

A former Estée Lauder employee is suing the company after $99,000 in retirement savings disappeared from her account. Experts say the case raises troubling questions about the security of $5.7 trillion stored in 401k retirement plans. The post Suit against Estée Lauder spotlights 401k Distribution Fraud appeared first on The Security Ledger…Read the whole entry… »Related StoriesEpisode 166: But Why, AI? ZestAI’s Quest to make Artificial Intelligence ExplainableEpisode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile MalwareFrom China with Love: New York Firm sold millions in PRC Surveillance Gear to US Government, Military …

Spotlight Podcast: RSA CTO Zulfikar Ramzan on confronting Digital Transformation’s Dark Side

Michael York Reading, PA

In this Spotlight Edition of the podcast we’re speaking with RSA Chief Technology Officer Zulfikar Ramzan about how his company is adapting to help its customers confront the dark side of digital transformation initiatives: increased digital risk, including from cloud, artificial intelligence and the Internet of Things. The post Spotlight…Read the whole entry… » Related StoriesSpotlight Podcast: RSA President Rohit Ghai warns Digital Transformation is magnifying Enterprise RiskRSA warns Digital Transformation is supercharging Digital RiskSpotlight Podcast: Security Automation is (and isn’t) the Future of Infosec …

1 2 3 4 5 >»