The Security Ledger

Researchers Test UN’s Cybersecurity, Find Data on 100k

Independent security researchers testing the security of the United Nations were able to compromise public-facing servers and a cloud-based development account for the U.N. and lift data on more than 100,000 staff and employees, according to a report released Monday. The post Researchers Test UN’s Cybersecurity, Find Data on 100k appeared first…Read the whole entry… »Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntEpisode 199 COVID’s Other Legacy: Data Theft and Enterprise InsecurityEpisode 197: The Russia Hack Is A 5 Alarm Fire | Also: Shoppers Beware! …

Episode 199 COVID’s Other Legacy: Data Theft and Enterprise Insecurity

In this episode of the podcast (#199), sponsored by LastPass, we talk with Sareth Ben of Securonix about how massive layoffs that have resulted from the COVID pandemic put organizations at far greater risk of data theft. In our second segment, we’re joined by Barry McMahon, a Senior Global Product Marketing Manager at LogMeIn, to talk about data…Read the whole entry… » Related StoriesEpisode 197: The Russia Hack Is A 5 Alarm Fire | Also: Shoppers Beware!Episode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security LessonsEpisode 198: Must Hear Interviews from 2020 …

Episode 198: Must Hear Interviews from 2020

Trying times have a way of peeling back the curtains and seeing our world with new eyes. We The post Episode 198: Must Hear Interviews from 2020 appeared first on The Security Ledger. Related StoriesEpisode 195: Cyber Monday Super Deals Carry Cyber RiskDHS Looking Into Cyber Risk from TCL Smart TVsPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan Hunt …

Neopets Is Still A Thing And Its Exposing Sensitive Data

Neopets, the virtual pets website has exposed a wide range of sensitive data online including information that might be used to identify site users, security researchers report. The post Neopets Is Still A Thing And Its Exposing Sensitive Data appeared first on The Security Ledger. Related StoriesAmid Security Concerns: to Zoom or not to Zoom?Episode 168: Application Security Debt is growing and Securing Web Apps in the Age of IoTEpisode 197: The Russia Hack Is A 5 Alarm Fire | Also: Shoppers Beware! …

DHS Looking Into Cyber Risk from TCL Smart TVs

The acting head of the U.S. Department of Homeland Security said the agency was assessing the cyber risk of smart TVs sold by the Chinese electronics giant TCL, following reports that the devices may give the company “back door” access to deployed sets. The post DHS Looking Into Cyber Risk from TCL Smart TVs appeared first on The Security Ledger. Related StoriesEpisode 195: Cyber Monday Super Deals Carry Cyber RiskTV Maker TCL Denies Back Door, Promises Better ProcessSecurity Holes Opened Back Door To TCL Android Smart TVs …

Episode 197: The Russia Hack Is A 5 Alarm Fire | Also: Shoppers Beware!

In this podcast, sponsored by LastPass, former U.S. CISO Greg Touhill joins us to talk about news of a vast hack of U.S. government networks, which he calls a “five alarm fire” reportedly set by Russia. The post Episode 197: The Russia Hack Is A 5 Alarm Fire | Also: Shoppers Beware! appeared first on The Security Ledger. Related StoriesEpisode 194: What Happened To All The Election Hacks?Episode 196: Building the Case Against Sandworm with Cisco TalosSpotlight Podcast: Taking a Risk-Based Approach to Election Security …

Episode 196: Building the Case Against Sandworm with Cisco Talos

isco’s Matt Olney, the Director of Talos Threat Intelligence and Interdiction and Craig Williams, the Talos Director of Outreach about the case against The post Episode 196: Building the Case Against Sandworm with Cisco Talos appeared first on The Security Ledger. Related StoriesEpisode 194: What Happened To All The Election Hacks?Spotlight Podcast: Taking a Risk-Based Approach to Election SecurityEpisode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security Lessons …

Episode 195: Cyber Monday Super Deals Carry Cyber Risk

While many organizations think the notion of keyboards, monitors and other hardware “spying” on them as the stuff of “James Bond” movies, Yossi Appleboum of Sepio Systems says that the threat is real – and much more common that either companies or consumers are aware. The post Episode 195: Cyber Monday Super Deals Carry Cyber Risk appeared first…Read the whole entry… » Related StoriesTV Maker TCL Denies Back Door, Promises Better ProcessSecurity Holes Opened Back Door To TCL Android Smart TVsEpisode 188: Crowdsourcing Surveillance with Flock Safety …

Containers Complicate Compliance (And What To Do About It)

If you work within the security industry, compliance is seen almost as a dirty word. You have likely run into situations like that which @Nemesis09 describes below. Here, we see it’s all too common for organizations to treat testing compliance as a checkbox exercise and to thereby view compliance in a way that goes against its entire purpose….Read the whole entry… »Related StoriesEpisode 191: Shifting Compliance Left with Galen Emery of ChefReport: Critical Infrastructure Cyber Attacks A Global CrisisPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan Hunt …

Exploitable Flaw in NPM Private IP App Lurks Everywhere, Anywhere

A serious security flaw in a commonly used npm security module, private-ip, may affect hundreds of thousands of private and public applications. The post Exploitable Flaw in NPM Private IP App Lurks Everywhere, Anywhere appeared first on The Security Ledger. Related StoriesTV Maker TCL Denies Back Door, Promises Better ProcessSecurity Holes Opened Back Door To TCL Android Smart TVsPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan Hunt …

TV Maker TCL Denies Back Door, Promises Better Process

Chinese electronics giant TCL has acknowledged security holes in some models of its smart television sets, but denies that it maintains a secret “back door” that gives it control over deployed TVs. The post TV Maker TCL Denies Back Door, Promises Better Process appeared first on The Security Ledger. Related StoriesSecurity Holes Opened Back Door To TCL Android Smart TVsPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntEpisode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security Lessons …

Episode 194: What Happened To All The Election Hacks?

Cyber attacks meant to disrupt the 2020 presidential election in the US were a foregone conclusion. But two weeks and more than 140 million votes later, predictions of cyber attacks on the U.S. presidential election have fallen flat. What happened? The post Episode 194: What Happened To All The Election Hacks? appeared first on The Security Ledger….Read the whole entry… » Related StoriesSpotlight Podcast: Taking a Risk-Based Approach to Election SecurityEpisode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?Public Sector Mega-Vendor Tyler Technologies Says It Was Hacked …

Security Holes Opened Back Door To TCL Android Smart TVs

A report by independent researchers warns that TCL brand Android smart TVs contained serious and exploitable security holes. It also raises questions about the China-based electronics firm’s ability to remotely access and control deployed devices. The post Security Holes Opened Back Door To TCL Android Smart TVs appeared first on The Security…Read the whole entry… »Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntPublic Sector Mega-Vendor Tyler Technologies Says It Was Hacked“Boothole” Bootloader Flaw Breaks Security on Most Linux, Windows Devices …

Episode 193: Repair, Cyber and Your Car with Assaf Harel of Karamba Security

Assaf Harel of the firm Karamba Security joins us in the Security Ledger studio to discuss connected car security and the right to repair. The post Episode 193: Repair, Cyber and Your Car with Assaf Harel of Karamba Security appeared first on The Security Ledger. Related StoriesEpisode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?Episode 191: Shifting Compliance Left with Galen Emery of ChefSpotlight Podcast: CTO Zulfikar Ramzan on RSA’s Next Act: Security Start-Up …

Episode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?

Election day is almost here. After years of warnings, are state and local governments ready for what Russia, Iran or any number of ransomware gangs have in store for them? The post Episode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks? appeared first on The Security Ledger. Related StoriesSpotlight Podcast: Taking a Risk-Based Approach to Election SecurityPublic Sector Mega-Vendor Tyler Technologies Says It Was HackedSpotlight Podcast: CTO Zulfikar Ramzan on RSA’s Next Act: Security Start-Up …

Episode 191: Shifting Compliance Left with Galen Emery of Chef

Galen Emery of Chef comes into the Security Ledger studios to talk about how security and compliance are “shifting left” with DEVSECOPS. The post Episode 191: Shifting Compliance Left with Galen Emery of Chef appeared first on The Security Ledger. Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntSpotlight Podcast: CTO Zulfikar Ramzan on RSA’s Next Act: Security Start-UpSpotlight Podcast: Taking a Risk-Based Approach to Election Security …

1 2 3 4 5 ›»