Menu

The Security Ledger

Episode 249: Intel Federal CTO Steve Orrin on the CHIPS Act and Supply Chain Security

Paul speaks with Steve Orrin, the Federal CTO at Intel Corp about representing Intel and its technologies to Uncle Sam and the impact of the CHIPS Act a massive new federal investment in semiconductors. The post Episode 249: Intel Federal CTO Steve Orrin on the CHIPS Act and Supply Chain Security appeared first on The Security Ledger with Paul F….Read the whole entry… »Click the icon below to listen. Related StoriesForget the IoT. Meet the IoZ: our Internet of Zombie thingsEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain ThreatsCES Overlooks New Report That Finds Auto Cyber Is A Dumpster Fire …

Malicious Automation is driving API Security Breaches

Removing the ability to automate against a vulnerable API is a huge step forward, as automation is a key enabler for both the exploitation and the extraction of large amounts of sensitive data. The post Malicious Automation is driving API Security Breaches appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain ThreatsForget the IoT. Meet the IoZ: our Internet of Zombie things2023 Technologies to Secure Your Hybrid Workspace …

Spotlight: Making the Most of Cyber Threat Intelligence with Itsik Kesler of KELA

In this Spotlight episode of the Security Ledger podcast, I interview Itsik Kesler, the CTO of the threat intelligence firm Kela about the evolution of threat intelligence and findings from the company’s latest State of Cybercrime Threat Intelligence report. The post Spotlight: Making the Most of Cyber Threat Intelligence with Itsik Kesler of…Read the whole entry… »Click the icon below to listen. Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?Cyberattacks on Industrial Control Systems Jumped in 2022Forget the IoT. Meet the IoZ: our Internet of Zombie things …

Cyberattacks on Industrial Control Systems Jumped in 2022

Cyberattacks on industrial control systems (ICS) jumped in 2022, with an 87% jump in ransomware attacks and a 35% increase in the number of ransomware groups targeting industrial control and operational technology (OT) systems, according to a report by Dragos Security. The post Cyberattacks on Industrial Control Systems Jumped in 2022 appeared…Read the whole entry… »Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?Forget the IoT. Meet the IoZ: our Internet of Zombie thingsBeware: Images, Video Shared on Signal Hang Around …

Forget the IoT. Meet the IoZ: our Internet of Zombie things

A school that never sleeps? Cameras that go dark? A dead company hacked back to life? Welcome to the growing Internet of Zombie devices that threatens the security of the Internet. The post Forget the IoT. Meet the IoZ: our Internet of Zombie things appeared first on The Security Ledger with Paul F. Roberts. Related StoriesCES Overlooks New Report That Finds Auto Cyber Is A Dumpster FireThe Future of IoT Security StandardsIoCs vs. EoCs: What’s the difference and why should you care? …

Beware: Images, Video Shared on Signal Hang Around

A researcher is warning that photos and video files shared in Signal chats may be hanging around on devices, even when they deleted the messages in which the images were shared. The post Beware: Images, Video Shared on Signal Hang Around appeared first on The Security Ledger with Paul F. Roberts. Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?CES Overlooks New Report That Finds Auto Cyber Is A Dumpster FireEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain Threats …

T-Mobile: Leaky API Exposes Data on 37 Million

U.S. Telecommunications giant T-Mobile disclosed on Thursday that hackers obtained data on 37 million customers through a vulnerable API (application program interface). The disclosure was included in an 8-K filing with the U.S. Securities and Exchange Commission. The post T-Mobile: Leaky API Exposes Data on 37 Million appeared first on The…Read the whole entry… »Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?2023 Technologies to Secure Your Hybrid WorkspaceCES Overlooks New Report That Finds Auto Cyber Is A Dumpster Fire …

2023 Technologies to Secure Your Hybrid Workspace

For businesses looking to invest in the creation of a safer and more productive modern office environment, here’s a rundown of the top 2023 technologies to secure your hybrid workspace.  The post 2023 Technologies to Secure Your Hybrid Workspace appeared first on The Security Ledger with Paul F. Roberts. Related StoriesWhat’s the Future of Detection Teams? Five Predictions for What Lies Ahead Why digital certificates are critical to 5G securityCES Overlooks New Report That Finds Auto Cyber Is A Dumpster Fire …

New Report Finds Auto Cyber Is A Dumpster Fire

Automakers swear that the security of their connected vehicles is their top priority. So how come researchers just found dozens of software flaws that could give hackers access to millions of cars? The post New Report Finds Auto Cyber Is A Dumpster Fire appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko HyppönenDEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, Competition …

IoCs vs. EoCs: What’s the difference and why should you care?

Security analysts and threat hunters know the importance of IOCs – indicators of compromise. But EOCs – enablers of compromise – are just as important. The post IoCs vs. EoCs: What’s the difference and why should you care? appeared first on The Security Ledger with Paul F. Roberts. Related StoriesWhat’s the Future of Detection Teams? Five Predictions for What Lies Ahead The Future of Attack Surface Management: How to PrepareEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain Threats …

Episode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain Threats

In this episode of the Security Ledger Podcast, Paul speaks with Jill Moné-Corallo, the Director of Product Security Engineering Response at GitHub. Jill talks about her journey from a college stint working at Apple’s Genius bar, to the information security space – first at product security at Apple and now at GitHub, a massive development…Read the whole entry… »Click the icon below to listen. Related StoriesEpisode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPassEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko Hyppönen …

What’s the Future of Detection Teams? Five Predictions for What Lies Ahead 

Cyber threats are rampant, but security teams lack the tools, resources, and support to do their jobs effectively today — much less prepare them for tomorrow. In this Expert Insight, Jack Naglieri, the CEO of Panther, writes about where the state of security is currently, and where I see it headed. The post What’s the Future of Detection…Read the whole entry… »Related StoriesSpotlight: SIEMs suck. Panther is out to change that. Episode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko Hyppönen …

Episode 247: Into the AppSec Trenches with Robinhood CSO Caleb Sima

Paul speaks with Caleb Sima, the CSO of the online trading platform Robinhood, about his journey from teenage cybersecurity phenom and web security pioneer, to successful entrepreneur to an executive in the trenches of protecting high value financial services firms from cyberattacks. The post Episode 247: Into the AppSec Trenches with Robinhood…Read the whole entry… »Click the icon below to listen. Related StoriesEpisode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPassEpisode 245: How AI is remaking knowledge-based authenticationEpisode 244: ZuoRAT brings APT Tactics to Home Networks …

Why digital certificates are critical to 5G security

As 5G gains traction, service providers need to be able to trust their networks’ security to truly take advantage of 5G’s capabilities. Digital certificates are critical to that, writes Alexa Tahan of Nokia. The post Why digital certificates are critical to 5G security appeared first on The Security Ledger with Paul F. Roberts. Related StoriesThe Future of IoT Security StandardsWhat CISOs Can Do to Win the Ransomware GameEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen …

Cloudflare Targets Security Poverty Line With Free Tools For At-Risk Groups

Humanitarian groups, local governments and non-profits will be able to use Cloudflare’s Zero Trust One suite of security tools at no cost, the company announced. The post Cloudflare Targets Security Poverty Line With Free Tools For At-Risk Groups appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 244: ZuoRAT brings APT Tactics to Home NetworksEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko Hyppönen …

What CISOs Can Do to Win the Ransomware Game

In this Expert Insight, Jeffrey Wheatman, the Cyber Risk Evangelist at Black Kite, says that CISOs need to shift their approach: becoming more proactive in working to preventing ransomware attacks. And he provides some steps CISOs can take to ensure their companies stay safe. The post What CISOs Can Do to Win the Ransomware Game appeared first on …Read the whole entry… »Related StoriesThe Future of IoT Security StandardsHybrid Work Is Here: Is Your Security Strategy Ready for It?The Future of Attack Surface Management: How to Prepare …

1 2 3 4›»