At the Intersection of Technology and Real Life

The Security Ledger

Episode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence

Episode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence

Michael York Reading, PA

Sarah Zatko of the Cyber Independent Testing Lab joins us to talk about CITL’s big new study of firmware security. In our second segment, we’re joined by Allan Thomson who is the Chief Technology Officer at LookingGlass Cyber Solutions to talk about the growing use of cyber threat intelligence and the need to evolve cybersecurity practices to…Read the whole entry… » Related StoriesSpotlight Podcast: Unpacking Black Hat Hacks with Digicert CTO Dan TimpsonEpisode 156: Looming over Black Hat: doing Security at Massive ScaleHuge Survey of Firmware Finds No Security Gains in 15 Years …

Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk

Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk

Michael York Reading, PA

We talk to Bruce McDonnell of the East West Institute about how insurers are responding. Related StoriesSpotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyThird Party Cyber Risk is growing. Most Companies aren’t prepared.Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware …

Episode 159: Deep Fakes and Election (in)Security with ZeroFOX

Episode 159: Deep Fakes and Election (in)Security with ZeroFOX

Michael York Reading, PA

In this weeks podcast, we delve into the myriad challenges to election security with Sam Small, the Chief Security Officer at the firm ZeroFOX Related StoriesEpisode 160 Right to Repair’s Summer of Love – Sort of.Spotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyEpisode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware …

Episode 160 Right to Repair’s Summer of Love – Sort of.

Episode 160 Right to Repair’s Summer of Love – Sort of.

Michael York Reading, PA

call it Right to Repair’s “Summer of Love.” Summer 2019 saw developments on a number of fronts in the nation-wide battle to win a digital right to repair. In this podcast, we talk with Nathan Proctor of US PIRG’s Right to Repair campaign and Kyle Wiens of iFixit about the developments. Related StoriesDigital Right to Repair Movement seeks Allies at DEF CONEpisode 159: Deep Fakes and Election (in)Security with ZeroFOXSpotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy …

Spotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy

Spotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy

Michael York Reading, PA

Third party cyber risk is growing. Despite that, most companies are unprepared to address it in a systematic way. In this Spotlight Podcast, a companion to our new eBook, Rethinking Third Party Cyber Risk Management, we go deep on the topic of building a mature third party cyber risk program with Dave Stapleton the Director of Assessment…Read the whole entry… » Related StoriesThird Party Cyber Risk is growing. Most Companies aren’t prepared.Episode 158: How NotPetya has Insurers grappling with Systemic Cyber RiskEpisode 159: Deep Fakes and Election (in)Security with ZeroFOX …

Third Party Cyber Risk is growing. Most Companies aren’t prepared.

Michael York Reading, PA

Third party cyber risk is a growing concern for organizations, as breaches and hacks tied to third party providers and applications multiply. How do you know if your third party cyber risk management program is up to the task? Our new e-book, sponsored by CyberGRX, will help you figure it out! Related StoriesPodcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why.Cognitive Bias is the Threat Actor you may never detectHuge Survey of Firmware Finds No Security Gains in 15 Years …

Episode 161: 3 Years after Mirai, IoT DDoS Problem may get Worse

Episode 161: 3 Years after Mirai, IoT DDoS Problem may get Worse

Michael York Reading, PA

Three years after the Mirai botnet launched some of the biggest denial of service attacks ever seen, DDoS is a bigger problem and ever. Even worse: we stand on the made up of webcams and other Internet of things as technologies like 5G bring greater bandwidth to connected endpoints. In this podcast, we speak with Hardik Modi, the senior director…Read the whole entry… » Related StoriesKaspersky: Attacks on Smart Devices Rise Threefold in 2018Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile MalwareSpotlight Podcast: Unpacking Black Hat Hacks with Digicert CTO Dan Timpson …

Critical Flaws in VxWorks affect 200 Million Connected Things

Michael York Reading, PA

Serious and exploitable security flaws in VxWorks, a commonly used operating system for embedded devices, span 13 years and could leave hundreds of millions* of connected devices vulnerable to remote cyber attacks and hacks. The security firm Armis on Monday published a warning about 11 critical, zero day vulnerabilities in the VxWorks operating…Read the whole entry… »Related StoriesOpinion: We need a way to talk about Cyber Physical RiskBreathe Deeply: DHS warns of Flaw in Hospital Anesthesia MachinesBreath Deeply: DHS warns of Flaw in Hospital Anesthesia Machines …

Episode 154: Richard Clarke on Defending the Fifth Domain

Episode 154: Richard Clarke on Defending the Fifth Domain

Michael York Reading, PA

The Pentagon calls cyberspace “the fifth domain” of conflict. But what does that mean? And how do you defend a human-made space that’s everywhere and nowhere? In this episode of the podcast, Richard Clarke joins us to discuss his new book, The Fifth Domain: Defending Our Country, Our Companies, and Ourselves in the Age of Cyber Threats. The post…Read the whole entry… » Related StoriesFirm Uncovers Major Cyber-Espionage Campaign Against TelcosEpisode 153: Hacking Anesthesia Machines and Mayors say No to RansomsAhead of Black Hat: Fear and Pessimism in Las Vegas …

Spotlight Podcast: To Fix Remote Access, CyberArk Alero Ditches Passwords and VPNs

Spotlight Podcast: To Fix Remote Access, CyberArk Alero Ditches Passwords and VPNs

Michael York Reading, PA

In this Spotlight edition of The Security Ledger Podcast, sponsored by CyberArk*, we interview serial entrepreneur Gil Rapaport about his latest creation: Alero, a new remote authentication tool that promises to fix remote vendor access by doing away with passwords…and agents…and VPNs. If that sounds like a tall order, check out our podcast to…Read the whole entry… » Related StoriesResearcher warns DevOps Security is Back to the FutureSpotlight: as Attacks Mount, how to secure the Industrial InternetRobot Account Apocalypse: RPA Risk Exploding with Adoption …

Researcher warns DevOps Security is Back to the Future

Michael York Reading, PA

The deployment of DevOps tools and platforms at many organizations recalls the bad old days of the 1990s, with lax control of authentication, loose configuration and scant attention to security, experts warn. The post Researcher warns DevOps Security is Back to the Future appeared first on The Security Ledger. Related StoriesOpinion: We need a way to talk about Cyber Physical RiskBreathe Deeply: DHS warns of Flaw in Hospital Anesthesia MachinesBreath Deeply: DHS warns of Flaw in Hospital Anesthesia Machines …

Robot Account Apocalypse: RPA Risk Exploding with Adoption

Michael York Reading, PA

Robotic Process Automation is taking over mundane tasks in the workplace. But those bots may pose a serious security risk, according to researchers from the firm CyberArk. Robotic Process Automation (RPA) may be the Holy Grail for enterprises these days, but all those bots pose a serious risk to enterprise security, according to research by the…Read the whole entry… »Related StoriesTaking the Long View of Breach FalloutPodcast Episode 135: The Future of Passwords with Google Account Security Chief Guemmy KimEU calls for End to Default Passwords on Internet of Things …

Opinion: We need a way to talk about Cyber Physical Risk

Michael York Reading, PA

How does a flaw potentially affecting the integrity of printer management application get a “critical” severity rating and one affecting the integrity and operation of anesthesia machines get a “moderate” severity rating? It has to do with our evolving and still immature system of rating (and therefore thinking about) cyber risk. The post…Read the whole entry… »Related StoriesIntroducing Securepairs.org: Fighting Infosec FUD for the Right to RepairEpisode 153: Hacking Anesthesia Machines and Mayors say No to RansomsBreathe Deeply: DHS warns of Flaw in Hospital Anesthesia Machines …

Episode 153: Hacking Anesthesia Machines and Mayors say No to Ransoms

Episode 153: Hacking Anesthesia Machines and Mayors say No to Ransoms

Michael York Reading, PA

In this week’s podcast episode (#153): The researcher who discovered serious remote access security flaws in anesthesia machines by GE says such security holes are common. Also: the US Conference of Mayors voted unanimously to swear off paying ransoms for cyber attacks. But is that a smart idea? We’re joined by Andrew Dolan of the Multi State…Read the whole entry… » Related StoriesDo Cities deserve Federal Disaster Aid after Cyber Attacks?Dark Web Looms Large as Enterprise ThreatPodcast Episode 151: Ransoming the City with Cesar Cerrudo of IOActive …

Breathe Deeply: DHS warns of Flaw in Hospital Anesthesia Machines

Michael York Reading, PA

GE learned of a serious vulnerability affecting two brands of anesthesia machines in October. The company on Tuesday advised customers to take steps to protect them from being remotely tampered with. The post Breathe Deeply: DHS warns of Flaw in Hospital Anesthesia Machines appeared first on The Security Ledger. Related StoriesBreath Deeply: DHS warns of Flaw in Hospital Anesthesia MachinesExpert: Patch Bluekeep Now or Face WannaCry ScenarioForty Year Old GPS Satellites tell us lots about securing the Internet of Things …

Ahead of Black Hat: Fear and Pessimism in Las Vegas

Michael York Reading, PA

A survey of security professionals who have attended Black Hat reveals fears for From the 2020 Election, U.S. infrastructure The post Ahead of Black Hat: Fear and Pessimism in Las Vegas appeared first on The Security Ledger. Related StoriesPodcast Episode 125: Long After The Election Kremlin’s Computational Propaganda Campaign Rolls OnFirm Uncovers Major Cyber-Espionage Campaign Against TelcosRussian Cyber Criminal Named as Source of Massive Collection 1 Data Dump …

< 1 2 3 4 5 >»