Close
Menu

The Security Ledger

Spotting Hackers at the Pace of XDR – From Alerts to Incidents

Extended Detection and Response (XDR) technology is gaining traction within enterprises. But how can organizations handle the increased volume of alerts XDR systems produce? Samuel Jones, of cyber AI firm Stellar Cyber, discusses how embracing incident-based systems can reduce the analyst burden of XDR technology, enabling companies to spot and…Read the whole entry… »Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainThe SOC Hop Needs to be a Relic of the PastEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security …

Episode 221: Biden Unmasked APT 40. But Does It Matter?

Andrew Sellers, the Chief Technology Officer at QOMPLX joins us to unpack the revelations this week about APT 40, the Chinese group that the US has accused of a string of attacks aimed at stealing sensitive trade secrets. Also: is Salesforce the next SolarWinds The post Episode 221: Biden Unmasked APT 40. But Does It Matter? appeared first on The…Read the whole entry… » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 217: What Fighting Pirates Teaches Us About Ransomware …

Encore Podcast: Is Autonomous Driving Heading for a Crash?

Elon Musk is a big fan of his company’s Fully Self Driving software. But is it safe? In this encore edition of the podcast from 2018, we speak with Beau Woods of The Atlantic Council about the risks of embracing autonomous driving technology too quickly. The post Encore Podcast: Is Autonomous Driving Heading for a Crash? appeared first on The…Read the whole entry… » Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityEpisode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream MonopolyEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware …

At Pride Summit: A Warning On Cyber Literacy

Poor cyber literacy is at the root of many of the cybersecurity problems plaguing the U.S. economy, according to Dr. Alissa Abdullah, Deputy CSO at MasterCard. The post At Pride Summit: A Warning On Cyber Literacy appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, Equipment …

Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoT

In this episode of the podcast, sponsored by Trusted Computing Group we dig deep on this week’s ransomware attack on the Kaseya IT management software with Adam Meyers of CrowdStrike and Frank Breedijk of the Dutch Institute of Vulnerability Disclosure. Also: Tom Laffey, a product security strategist at Aruba, a Hewlett Packard Enterprise firm,…Read the whole entry… » Related StoriesEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 215-2: Leave the Gun, Take the McFlurryEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware …

Episode 219: LGBTQ+Cyber – A Pride Month Conversation On Being Queer In Infosec

In this week’s episode of the podcast (#219) we speak with four cybersecurity professionals about what it means to be Queer in the industry: their various paths to the information security community, finding support among their peers and the work still left to do to make information security inclusive. All in honor of Pride Month, 2021. The post …Read the whole entry… » Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityEpisode 215-2: Leave the Gun, Take the McFlurryEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware …

Episode 218: Denial of Sustenance Attacks -The Cyber Risk To Agriculture

Forget about Colonial Pipeline and JBS. A coordinated cyber attack on U.S. agriculture could, in short order, lead to foot shortages and hunger in the U.S. and abroad. And history has shown us that when food gets scarce, things get ugly – fast. How likely is such an attack? More likely than you might think, says Rob Wood of NCC Group, our guest on…Read the whole entry… » Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentEpisode 217: What Fighting Pirates Teaches Us About Ransomware …

Episode 217: What Fighting Pirates Teaches Us About Ransomware

Criminal gangs swoop in on unsuspecting merchants to seize their goods. Behind the scenes, rival nations turn a blind eye or offer them safe harbor, in exchange for cooperation. Sound familiar? It should. The post Episode 217: What Fighting Pirates Teaches Us About Ransomware appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityEpisode 212: China’s Stolen Data Economy (And Why We Should Care) …

Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security

In this episode of the podcast (#216) we talk with Brian Trzupek, Digicert’s Vice President of Product, about the growing urgency of securing software supply chains, and how digital code signing can help prevent compromises like the recent hack of the firm SolarWinds. The post Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain…Read the whole entry… » Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainEpisode 210: Moving The Goal Posts On Vendor Transparency: A Conversation With Intel’s Suzy GreenbergEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware …

What SolarWinds Tells Us About Securing the Software Development Supply Chain

The recent SolarWinds attack highlights an Achilles heel for enterprises: software updates for critical enterprise applications. Digital signing of code is one solution, but organizations need to modernize their code signing processes to prioritize security and integrity and align with DevOps best practices, writes Brian Trzupek the Senior Vice…Read the whole entry… »Related StoriesEpisode 210: Moving The Goal Posts On Vendor Transparency: A Conversation With Intel’s Suzy GreenbergWant To Prevent Another SolarWinds? Start With DevelopersCritical Flaws Found In Widely Used Netmask Open Source Library …

Episode 215-2: Leave the Gun, Take the McFlurry

In part II of our interview with Jeremy O’Sullivan of the IoT startup Kytch. We hear about how what Kytch revealed about Taylor’s soft ice cream hardware put him at odds with the company and its long-time partner: McDonald’s. The post Episode 215-2: Leave the Gun, Take the McFlurry appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream MonopolyEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 208: Getting Serious about Hardware Supply Chains with Goldman Sachs’ Michael Mattioli …

The SOC Hop Needs to be a Relic of the Past

Overworked, understaffed teams constantly jumping from one fire to the next – exhausted and reactive to events and alerts. The “SOC hop” is not sustainable. The post The SOC Hop Needs to be a Relic of the Past appeared first on The Security Ledger with Paul F. Roberts. Related StoriesFutility or Fruition?Rethinking Common Approaches To CybersecurityDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentCan Blockchain Solve Data’s Integrity Problem? …

Episode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream Monopoly

Jeremy O’Sullivan, co-founder of the IoT analytics company, Kytch brings us the cautionary tale of his company’s travails with the commercial ice cream machine manufacturer, Taylor, whose equipment is used by the likes of Burger King and McDonalds. The post Episode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream…Read the whole entry… » Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 207: Sara Tatsis of Blackberry on finding and Keeping Women in CyberEncore Edition: Veracode CEO Sam King on Infosec’s Leaky Talent Pipeline …

Episode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware

Intel 471 CISO Brandon Hoffman joins us to to discuss Darkside, the ransomware group that attacked the Colonial Pipeline, why the crew may have bitten off more than it can chew and what the attack says about the state of America’s Critical Infrastructure. The post Episode 214: Darkside Down: What The Colonial Attack Means For The Future of…Read the whole entry… » Related StoriesDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentDispute Over Data Leak Highlights Legal Risks for UK ResearchersSeeds of Destruction: Cyber Risk Is Growing in Agriculture …

Want To Prevent Another SolarWinds? Start With Developers

An all-star roundtable of security experts tackles the question of how to prevent another SolarWinds. The post Want To Prevent Another SolarWinds? Start With Developers appeared first on The Security Ledger with Paul F. Roberts. Related StoriesResearchers Test UN’s Cybersecurity, Find Data on 100kDispute Over Data Leak Highlights Legal Risks for UK ResearchersCritical Flaws Found In Widely Used Netmask Open Source Library …

Dispute Over Data Leak Highlights Legal Risks for UK Researchers

An expensive, months-long legal tussle between a UK engineer and a healthcare non-profit is spurring calls for reform to the country’s 30 year-old Computer Misuse Act, which Dyke and others contend criminalizes the work of ‘Good Samaritan’ security researchers acting in the public interest. The post Dispute Over Data Leak Highlights Legal…Read the whole entry… »Related StoriesExclusive: Flaws in Zoom’s Keybase App Kept Chat Images From Being DeletedDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentEpisode 210: Moving The Goal Posts On Vendor Transparency: A Conversation With Intel’s Suzy Greenberg …

1 2 3 4 ›»