At the Intersection of Technology and Real Life

Category: The Security Ledger

Podcast Episode 142: On Supply Chains Diamond-based Identities are forever

Podcast Episode 142: On Supply Chains Diamond-based Identities are forever

Michael York Reading, PA

In this week’s episode, #142: we continue our series on Life after Passwords: the Future of Online Identity as we are joined by Ophir Gaathon, the CEO of the firm Dust Identity. The post Podcast Episode 142: On Supply Chains Diamond-based Identities are forever appeared first on The Security Ledger. Related StoriesPodcast Episode 134: The Deep Fake Threat to Authentication and analyzing the PEAR CompromiseMore Questions as Expert Recreates Chinese Super Micro Hardware HackPodcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why. …

Report: Bad Bots sent One in Five Web Requests in 2018

Michael York Reading, PA

Distil Network’s annual assessment of bad bots, “Bad Bot Report 2019: The Bot Arms Race Continues,” found that bad bots accounted for one in five website requests in 2018, or 20.4 percent of web traffic. The post Report: Bad Bots sent One in Five Web Requests in 2018 appeared first on The Security Ledger. Related StoriesReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!Mysterious Trisis Malware Strikes AgainNorsk Hydro Hit with ‘Severe’ LockerGoga Ransomware Attack …

Interview: securing the University using NIST’s Cyber Framework

Michael York Reading, PA

College and university campuses are notoriously difficult to tame. In this one-on-one interview, I speak with Plamen Martinov, the Chief Information Security Officer for the Biological Sciences Division at the University of Chicago about how his organization has used NIST’s Cybersecurity Framework to create a security lingua franca at UChicago and…Read the whole entry… »Related StoriesRSA Recap: CTO Zulfikar Ramzan talks about Trust, Zero Trust and the Debate over Going DarkRSAs CTO is Bullish on Security. Blockchain? Not so much.The Dutch were spying on Cozy Bear Hackers as they targeted Democrats …

Mysterious Trisis Malware Strikes Again

Michael York Reading, PA

Researchers at the firm FireEye warn that TRITON, a type of malware that targets industrial control safety systems, has resurfaced at a facility in the Middle East. The post Mysterious Trisis Malware Strikes Again appeared first on The Security Ledger. Related StoriesNorsk Hydro Hit with ‘Severe’ LockerGoga Ransomware AttackAsus ShadowHammer suggests Supply Chain Hacks are the New NormalReport: Obvious Security Flaws Make ICS Networks Easy Targets …

Spotlight Podcast: Fixing Supply Chain Hacks with Strong Device Identities

Spotlight Podcast: Fixing Supply Chain Hacks with Strong Device Identities

Michael York Reading, PA

Supply chain hacks like ME Docs and ASUS aren’t inevitable. In this Spotlight Podcast, sponsored by Trusted Computing Group, I speak with Dennis Mattoon, a Principal Researcher at Microsoft Research and the Chairman of the Trusted Computing Group’s DICE Architectures Working Group* about how strong device identities for IoT endpoints can stop…Read the whole entry… » Related StoriesMysterious Trisis Malware Strikes AgainWarning: Trump Terrorist Designation May Prompt Iranian Cyber AttacksPodcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why. …

Warning: Trump Terrorist Designation May Prompt Iranian Cyber Attacks

Michael York Reading, PA

The Trump Administration’s designation of Iran’s Islamic Revolutionary Guard Corps as a foreign terrorist organization could prompt retaliatory cyber attacks from state-sponsored actors from the Islamic Republic, security researchers from Recorded Future warn. The post Warning: Trump Terrorist Designation May Prompt Iranian Cyber Attacks appeared…Read the whole entry… »Related StoriesGovernment, Private Sector Unprepared for 21st Century Cyber WarfareReport: Iranian APT Actors Regroup After Main Security Forum Shuts DownReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE! …

Podcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why.

Podcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why.

Michael York Reading, PA

Countless Congressional hearings, 48 state data privacy laws and GDPR and mega breaches like the discovery of data on 500 million Facebook users just keep happening. Why? In this episode of the podcast, Paul is joined by experts from the firm BitSight and BigID to discuss why we can’t seem to stop the breaches. The post Podcast Episode 141:…Read the whole entry… » Related StoriesWaiting for Federal Data Privacy Reform? Don’t Hold Your Breath.Podcast Episode 139: the State of Right to Repair and API Insecurity on GitHubSpotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why. …

Podcast Episode 140: passwords are dying. What will replace them?

Podcast Episode 140: passwords are dying. What will replace them?

Michael York Reading, PA

Alpha-numeric passwords have been with us almost since the dawn of the computing age. But our guest this week, Phil Dunkelberger the CEO of Nok Nok Labs, says they’ve overstayed their welcome, and that the next few years may see them disappear altogether. We talk about what will replace them and how. The post Podcast Episode 140: passwords are…Read the whole entry… » Related StoriesAsus ShadowHammer suggests Supply Chain Hacks are the New NormalOpinion: my Grandfather’s John Deere would support our Right to RepairReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE! …

Hackers Remotely Steer Tesla Model S Using Autopilot System

Michael York Reading, PA

Security researchers managed to take remote control of the Autopilot feature of Tesla Model S car using a wireless gaming keypad, highlighting the potential security issues with next-generation automobiles’ Advanced Driver Assistance Systems (ADAS) that are meant to enhance driver safety. The post Hackers Remotely Steer Tesla Model S Using…Read the whole entry… »Related StoriesReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!Report: China, Like Russia, Uses Social Media to Sway U.S. Public OpinionNorsk Hydro Hit with ‘Severe’ LockerGoga Ransomware Attack …

Podcast Episode 139: the State(s) of Right to Repair and API Insecurity on GitHub

Podcast Episode 139: the State(s) of Right to Repair and API Insecurity on GitHub

Michael York Reading, PA

In our latest podcast episode we’re joined by Kyle Wiens of iFixit to talk about right to repair legislation pending in 20 states. Also: Dmitry Sotnikov of 42Crunch joins us to talk about API insecurity on GitHub. The post Podcast Episode 139: the State(s) of Right to Repair and API Insecurity on GitHub appeared first on The Security Ledger…Read the whole entry… » Related StoriesSpotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why.In Granite State: Industry Groups Paint Dark Picture of Right to RepairTestimony: There’s No Internet of Things Risk in Repair …

Asus ShadowHammer suggests Supply Chain Hacks are the New Normal

Michael York Reading, PA

The compromise of device maker Asus Live Update Utility is just the latest evidence that sophisticated attackers have software supply chains in the crosshairs. The post Asus ShadowHammer suggests Supply Chain Hacks are the New Normal appeared first on The Security Ledger. Related StoriesReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!Norsk Hydro Hit with ‘Severe’ LockerGoga Ransomware AttackExileRAT Malware Targets Tibetan Exile Government …

Report: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!

Michael York Reading, PA

Microsoft’s products are still a leading source of exploitable security vulnerabilities used by hackers, according to a report by the firm Recorded Future. The post Report: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE! appeared first on The Security Ledger. Related StoriesReport: China, Like Russia, Uses Social Media to Sway U.S. Public OpinionFacebook opens up on System that ‘protects Billions’Devices’ UPnP Service Emerges as Key Threat to Home IoT Networks …

Opinion: my Grandfather’s John Deere would support our Right to Repair

Michael York Reading, PA

Willie Cade’s grandfather, Theo, an engineer at John Deere, helped invent the manure spreader. His grandson thinks John Deere’s efforts to kill right to repair legislation is what stinks. The post Opinion: my Grandfather’s John Deere would support our Right to Repair appeared first on The Security Ledger. Related StoriesReport: with most exploited vuln of 2018, it’s really Really REALLY time to ditch IE!Norsk Hydro Hit with ‘Severe’ LockerGoga Ransomware AttackRSA Recap: CTO Zulfikar Ramzan talks about Trust, Zero Trust and the Debate over Going Dark …

Podcast Episode 138: Hacker President? Joseph Menn of Reuters talks Beto and Cult of the Dead Cow

Podcast Episode 138: Hacker President? Joseph Menn of Reuters talks Beto and Cult of the Dead Cow

Michael York Reading, PA

In this exclusive podcast interview with Security Ledger, Reuters investigative technology journalist Joseph Menn talks about his upcoming book on the iconic hacking group Cult of the Dead Cow and his discovery that U.S. presidential candidate Beto O’Rourke of Texas was an early member. The post Podcast Episode 138: Hacker President? Joseph Menn…Read the whole entry… » Related StoriesRSA Recap: CTO Zulfikar Ramzan talks about Trust, Zero Trust and the Debate over Going DarkSpotlight: CTIA’s IoT Cybersecurity Certification is a Big Deal. Here’s why.Podcast Episode 137 Sponsored by Code42: GirlScouts to the Rescue and Rethinking Enterprise DLP …

Norsk Hydro Hit with ‘Severe’ LockerGoga Ransomware Attack

Michael York Reading, PA

Global aluminum manufacturer Norsk Hydro was hit with an alleged ransomware attack Tuesday. The attack is having a major impact on the company’s global business and production. The post Norsk Hydro Hit with ‘Severe’ LockerGoga Ransomware Attack appeared first on The Security Ledger. Related StoriesSecrecy Reigns as NERC Fines Utilities $10M citing Serious Cyber RisksCriminals, Not State Actors, Target Russian Oil Company in 3-Year Cyber AttackDevices’ UPnP Service Emerges as Key Threat to Home IoT Networks …

RSA Recap: CTO Zulfikar Ramzan talks about Trust, Zero Trust and the Debate over Going Dark

Michael York Reading, PA

I talk with Zulfikar Ramzan, Chief Technology Officer (CTO) at RSA Security* about the major trends at this year’s RSA Conference including the growing focus on digital risk and trust, the debate around encryption, law enforcement and “going dark” and what people mean when they talk about “zero trust” networks. The post RSA Recap: CTO Zulfikar…Read the whole entry… »Related StoriesAutomation, Machine Learning Power Future of SIEMAt RSA: Focus on Cyber in the Public InterestFollowing Security Ledger at RSA Conference: Monday …

1 2 3 4