The Security Ledger

Cognitive Bias is the Threat Actor you may never detect

Cognitive bias among workers can undermine security work and lead to critical misinterpretations of data, warns Forcepoint X-Labs research scientist, Dr. Margaret Cunningham. The post Cognitive Bias is the Threat Actor you may never detect appeared first on The Security Ledger. Related StoriesDark Web Looms Large as Enterprise ThreatEpisode 148: Joseph Menn on Cult of the Dead Cow also Veracode CEO Sam King on InfoSec’s Leaky Talent PipelineHackers Remotely Steer Tesla Model S Using Autopilot System …

Episode 149: How Real is the Huawei Risk?

Michael York Reading, PA

In this episode of the podcast we’re joined by Priscilla Moriuchi of the firm Recorded Future, which released a report this week analyzing the security risks posed by Huawei, the Chinese telecommunications and technology giant. The post Episode 149: How Real is the Huawei Risk? appeared first on The Security Ledger. Related StoriesDHS Warns That Drones Made in China Could Steal U.S. DataIsraeli Group Exploited WhatsApp to Spy on UsersForty Year Old GPS Satellites tell us lots about securing the Internet of Things …

Dark Web Looms Large as Enterprise Threat

Michael York Reading, PA

New research from the firm Bromium finds dark web listings are booming as operators offer tailored access to enterprise networks. The post Dark Web Looms Large as Enterprise Threat appeared first on The Security Ledger. Related StoriesDo Cities deserve Federal Disaster Aid after Cyber Attacks?Mysterious Trisis Malware Strikes AgainIsraeli Group Exploited WhatsApp to Spy on Users …

Episode 148: Joseph Menn on Cult of the Dead Cow also Veracode CEO Sam King on InfoSec’s Leaky Talent Pipeline

Michael York Reading, PA

In this week’s episode of the podcast: Joseph Menn’s new book Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World hit store shelves this week. We reprise our March interview with Joe and talk about the origins of CDC. Also: is the talent pipeline for information security empty, or has it sprung a leak? We’re joined…Read the whole entry… » Related StoriesForty Year Old GPS Satellites tell us lots about securing the Internet of ThingsPodcast Episode 138: Hacker President? Joseph Menn of Reuters talks Beto and Cult of the Dead CowSpotlight Podcast: Managing the Digital in your Digital Transformation …

Do Cities deserve Federal Disaster Aid after Cyber Attacks?

Michael York Reading, PA

As cyber attacks on municipalities mount, is it time to start treating them like the manmade disasters they are? The post Do Cities deserve Federal Disaster Aid after Cyber Attacks? appeared first on The Security Ledger. Related StoriesChinese APT Group, Used Stolen NSA Hacking Tools Before Shadow BrokersDHS Warns That Drones Made in China Could Steal U.S. DataFBI: Cybercrime Accounted for $2.7B in Losses in 2018 …

Episode 147: Forty Year Old GPS Satellites offer a Warning about securing the Internet of Things

Michael York Reading, PA

A programming glitch in GPS satellite software grounded planes in China and other countries. But what does it tell us about the security of the Internet of Things? Bill Malik of Trend Micro joins us to discuss. The post Episode 147: Forty Year Old GPS Satellites offer a Warning about securing the Internet of Things appeared first on The Security…Read the whole entry… » Related StoriesPodcast Episode 142: On Supply Chains Diamond-based Identities are foreverPodcast Episode 138: Hacker President? Joseph Menn of Reuters talks Beto and Cult of the Dead CowSpotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why. …

Microsoft ‘Bluekeep’ Flaw threatens Medical Devices, IoT

Michael York Reading, PA

Microsoft’s worm-friendly Bluekeep flaw affects medical devices and other Internet of Things endpoints, security experts are warning. The post Microsoft ‘Bluekeep’ Flaw threatens Medical Devices, IoT appeared first on The Security Ledger. Related StoriesResearchers Hack Aircraft Landing System with $600 RadiosReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!Hackers Remotely Steer Tesla Model S Using Autopilot System …

Episode 146: Elections Loom, Political Parties struggle with Cyber Security and Securing Cloud with Aporeto CEO Amir Sharif

Michael York Reading, PA

his week’s episode, #146: we speak with the researchers behind a new analysis of more than 40 political parties in the US and Europe showing that many suffer from poor cyber security. Also: DEV-OPS methodologies are transforming the way organizations are creating and consuming software. But security technology is stuck in the past. In our second…Read the whole entry… » Related StoriesResearchers Hack Aircraft Landing System with $600 RadiosSpotlight Podcast: Managing the Digital in your Digital TransformationIsraeli Group Exploited WhatsApp to Spy on Users …

DHS Warns That Drones Made in China Could Steal U.S. Data

Michael York Reading, PA

The Department of Homeland Security is warning U.S. firms that drones made in China may be spying on them and sending sensitive data to the Chinese government. The post DHS Warns That Drones Made in China Could Steal U.S. Data appeared first on The Security Ledger. Related StoriesChinese APT Group, Used Stolen NSA Hacking Tools Before Shadow BrokersReport: Companies Still Grappling with IoT SecurityIsraeli Group Exploited WhatsApp to Spy on Users …

Spotlight Podcast: Managing the Digital Risk in your Digital Transformation

Michael York Reading, PA

Companies are pursuing digital transformation at all costs. But do they really understand the risks lurking in their digital transformation strategies? In this Spotlight Podcast, sponsored by RSA,* we’re joined by RSA Portfolio Strategist Steve Schlarman for a discussion of managing the risks in digital transformation. The post Spotlight Podcast:…Read the whole entry… » Related StoriesReport: Companies Still Grappling with IoT SecurityPodcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why.Israeli Group Exploited WhatsApp to Spy on Users …

Researchers Hack Aircraft Landing System with $600 Radios

Michael York Reading, PA

Airplane radio navigation systems are vulnerable to manipulation using software defined radio, researchers have shown. The post Researchers Hack Aircraft Landing System with $600 Radios appeared first on The Security Ledger. Related StoriesReport: Bad Bots sent One in Five Web Requests in 2018Hackers Remotely Steer Tesla Model S Using Autopilot SystemReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE! …

Israeli Group Exploited WhatsApp to Spy on Users

Michael York Reading, PA

An Israeli firm has exploited a flaw in the popular messaging mobile app WhatsApp to plant spyware on iPhones and Android. One phone call is all it takes for software developed by the Israeli firm NSO Group to install itself on a vulnerable iPhone or Android device, according to a published report in the FT Times. The publication broke the news,…Read the whole entry… »Related StoriesReport: Bad Bots sent One in Five Web Requests in 2018Drive-By Malware Uses Google Sites for Drive by Download AttacksMysterious Trisis Malware Strikes Again …

Episode 145: Veracode CTO Chris Wysopal and Life After Passwords with Plurilock

Michael York Reading, PA

In this week’s episode, #145 Veracode CTO Chris Wysopal joins us to talk about the early days of the information security industry with L0pht and securing software supply chains. Also: we continue our series on life after the password by speaking to Ian Paterson, the CEO of behavioral authentication vendor Plurilock. The post Episode 145:…Read the whole entry… » Related StoriesEpisode 144: Infosec Supporting Right to Repair with Joe Grand and Kyle WiensPodcast Episode 143: Tufin’s IPO with CEO Ruvi Kitov and Capsule8 on securing Linux at ScalePodcast Episode 142: On Supply Chains Diamond-based Identities are forever …

Chinese APT Group, Used Stolen NSA Hacking Tools Before Shadow Brokers

Michael York Reading, PA

A group with links to the government of China was using hacking tools developed by the NSA even before they are believed to have been stolen, a new report contends. The post Chinese APT Group, Used Stolen NSA Hacking Tools Before Shadow Brokers appeared first on The Security Ledger. Related StoriesWarning: Trump Terrorist Designation May Prompt Iranian Cyber AttacksMysterious Trisis Malware Strikes AgainAsus ShadowHammer suggests Supply Chain Hacks are the New Normal …

Report: Companies Still Grappling with IoT Security

Michael York Reading, PA

Data breaches relating to unsecured Internet of Things devices have jumped by more than 10 percent since 2017, suggesting security efforts aren’t keeping pace with the growth of the Internet of Things, a new study finds. The post Report: Companies Still Grappling with IoT Security appeared first on The Security Ledger. Related StoriesUnsecured Database Exposes Data of 80M U.S. HouseholdsNorsk Hydro Hit with ‘Severe’ LockerGoga Ransomware AttackRussian Cyber Criminal Named as Source of Massive Collection 1 Data Dump …

Introducing Securepairs.org: Fighting Infosec FUD for the Right to Repair

Michael York Reading, PA

Cybersecurity luminaries including Bruce Schneier, Gary McGraw, Joe Grand, Chris Wysopal and Katie Moussouris are backing securepairs.org, countering industry efforts to paint proposed right to repair laws in 20 states as a cyber security risk. The post Introducing Securepairs.org: Fighting Infosec FUD for the Right to Repair appeared first on …Read the whole entry… »Related StoriesTestimony: There’s No Internet of Things Risk in RepairPodcast 127: Donnie, Talk to China and Other Lessons from 2018How Digital Transformation is forcing GRC to evolve …

1 2 3 4 5