Menu

The Security Ledger

The Future of IoT Security Standards

When it comes to measuring the security level of a device, a checklist of security ‘low hanging fruit’ is a good place to start. But more is needed, says Mike Sheward of Particle.io The post The Future of IoT Security Standards appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 240: As Stakes Of Attacks Grow, Can Cyber Policy “Shift Right”?Episode 238: Robots Are The Next Frontier In Healthcare Cyber RiskEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen …

Spotlight: SIEMs suck. Panther is out to change that. 

I interview Jack Naglieri, CEO of Panther about the failures of the current SIEM technology and the need for what Naglieri terms “detection engineers.” The post Spotlight: SIEMs suck. Panther is out to change that.  appeared first on The Security Ledger with Paul F. Roberts. Click the icon below to listen. Related StoriesEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko HyppönenEpisode 240: As Stakes Of Attacks Grow, Can Cyber Policy “Shift Right”? …

Episode 246: SOARing out of Lockdown with Revelstoke Security

Getting a start-up off the ground isn’t easy in the best of times. Now imagine doing it just as a global pandemic is shutting down society…and the economy. Our guest this week, Josh McCarthy of Revelstoke Security, did it and lived to tell the tale. The post Episode 246: SOARing out of Lockdown with Revelstoke Security appeared first on The…Read the whole entry… »Click the icon below to listen. Related StoriesEpisode 244: ZuoRAT brings APT Tactics to Home NetworksEpisode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPassEpisode 242: Hacking the Farm (and John Deere) with Sick Codes …

Report: Digital Supply Chain Breaches Impact 98% of Organizations

Results from a survey of 2,000 enterprises found an increasing supply chain risk, with 98% of respondents reported having been “negatively impacted” by a breach in their supply chain The post Report: Digital Supply Chain Breaches Impact 98% of Organizations appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 237: Jacked on the Beanstalk – DeFi’s Security Debt Runs Wide, DeepEpisode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPassHybrid Work Is Here: Is Your Security Strategy Ready for It? …

Episode 245: How AI is remaking knowledge-based authentication

Six decades in, password use has tipped into the absurd, while two-factor authentication is showing its limits. We talk with Matt Salisbury of Honeybadger HQ, which is using AI and machine learning to re-imagine knowledge-based authentication. The post Episode 245: How AI is remaking knowledge-based authentication appeared first on The Security…Read the whole entry… »Click the icon below to listen. Related StoriesEpisode 244: ZuoRAT brings APT Tactics to Home NetworksEpisode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPassEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen …

Episode 244: ZuoRAT brings APT Tactics to Home Networks

In this episode of the Security Ledger podcast, brought to you by ReversingLabs, we interview Danny Adamitis (@dadamitis) of Black Lotus Labs about the discovery of ZuoRAT, malware that targets SOHO routers – and is outfitted with APT-style tools for attacking the devices connected to home networks. As always,  you can check our full…Read the whole entry… »Click the icon below to listen. Related StoriesEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko HyppönenEpisode 240: As Stakes Of Attacks Grow, Can Cyber Policy “Shift Right”? …

Supply Chain Hackers LofyGang Behind Hundreds of Malicious Packages

Researchers at Checkmarx say that a cybercriminal group, LofyGang, has targeted the open-source supply chain with hundreds of malicious packages to steal credit card information, stream accounts, and promote hacking tools. The post Supply Chain Hackers LofyGang Behind Hundreds of Malicious Packages appeared first on The Security Ledger with Paul…Read the whole entry… »Related StoriesDEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, CompetitionState of Modern Application Security: 6 Key Takeaways For 2022Spotlight: How Secrets Sprawl Undermines Software Supply Chain Security …

Episode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPass

Paul talks with Chris Hoff the Chief Secure Technology Officer at LastPass about the CSTO role and the security implications of “software eating the world.” The post Episode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPass appeared first on The Security Ledger with Paul F. Roberts. Click the icon below to listen. Related StoriesEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko HyppönenEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko HyppönenEpisode 237: Jacked on the Beanstalk – DeFi’s Security Debt Runs Wide, Deep …

Episode 242: Hacking the Farm (and John Deere) with Sick Codes

In our latest podcast, Paul caught up with Sick Codes (@sickcodes) to talk about his now-legendary presentation at the DEF CON Conference in Las Vegas, in which he demonstrated a hack that ran the Doom first person shooter on a John Deere 4240 touch-screen monitor. The post Episode 242: Hacking the Farm (and John Deere) with Sick Codes appeared…Read the whole entry… »Click the icon below to listen. Related StoriesDEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, CompetitionFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskEpisode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen …

Episode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen

We speak with Mikko Hyppönen on the sidelines of the DEF CON Conference in Las Vegas to talk about his new book, “If its Smart it Vulnerable.” The post Episode 241: If Its Smart, Its Vulnerable a Conversation with Mikko Hyppönen appeared first on The Security Ledger with Paul F. Roberts. Click the icon below to listen. Related StoriesEpisode 241: If Its Smart, Its Vulnerable a Conversation wit Mikko HyppönenFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskDEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, Competition …

UPDATE DEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, Competition

A researcher presented the results of a year-long effort to reverse engineer John Deere hardware to run a version of the DOOM first person shooter. He also discovered a number of security flaws along the way. The post UPDATE DEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, Competition appeared first on The Security Ledger with…Read the whole entry… »Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskDEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber RiskCyber Attack Halts Production at Ag Equipment Maker AGCO Fendt …

Episode 240: As Stakes Of Attacks Grow, Can Cyber Policy “Shift Right”?

In this episode of the podcast (#240) Lauren Zabierek, the Executive Director for the Cyber Project at the Belfer Center at Harvard’s Kennedy School joins us to talk about the need for a re-think of national cybersecurity preparedness, as major hacks like the attack on Colonial Pipeline put the focus on resilience and public safety. The post …Read the whole entry… »Click the icon below to listen. Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskEpisode 239: Power shifts from Russia to China in the Cyber UndergroundEpisode 238: Robots Are The Next Frontier In Healthcare Cyber Risk …

Hybrid Work Is Here: Is Your Security Strategy Ready for It?

An “everywhere,” hybrid workforce is no longer concept, but reality. But securing hybrid workplaces requires big changes to how IT security gets done, argues Jason Lee, the CISO of Zoom in this Expert Insight. The post Hybrid Work Is Here: Is Your Security Strategy Ready for It? appeared first on The Security Ledger with Paul F. Roberts. Related StoriesTapping into the Power of the Security CommunityThe Future of Attack Surface Management: How to PrepareThe Concerning Statistics About Mental Health in Cybersecurity …

The Future of Attack Surface Management: How to Prepare

Upwards of 70% of organizations have been compromised because of an unknown, unmanaged, or mismanaged visible asset. Improving your Attack Surface Management capabilities is critical, says David Monnier, a Fellow at Team Cymru. The post The Future of Attack Surface Management: How to Prepare appeared first on The Security Ledger with Paul F….Read the whole entry… »Related StoriesHow Vulnerability Management Has Evolved And Where It’s Headed NextIdentity Fraud: The New Corporate BattlegroundState of Modern Application Security: 6 Key Takeaways For 2022 …

How Vulnerability Management Has Evolved And Where It’s Headed Next

The blocking and tackling work of scan management is becoming a commodity, writes Lisa Xu, the CEO of NopSec in this Expert Insight. What organizations need now is complete visibility of their IT infrastructure and business applications. The post How Vulnerability Management Has Evolved And Where It’s Headed Next appeared first on The Security…Read the whole entry… »Related StoriesIdentity Fraud: The New Corporate BattlegroundState of Modern Application Security: 6 Key Takeaways For 2022Understanding the Economic Impact of Credential Stuffing Attacks …

The Concerning Statistics About Mental Health in Cybersecurity

Are cyber professionals as good at protecting their mental health as their IT environments? Thomas Kinsella, COO of Tines, talks about the worrying mental health statistics in cyber and how to protect your team. The post The Concerning Statistics About Mental Health in Cybersecurity appeared first on The Security Ledger with Paul F. Roberts. Related StoriesIdentity Fraud: The New Corporate BattlegroundUnderstanding the Economic Impact of Credential Stuffing AttacksHow to Bring the Power of No-Code Security Automation to Your Team in 2022 …

1 2 3 4 ›»