The Security Ledger

China Attacks Surge as Cyber Criminals Capitalize on COVID-19

COVID-19 has created a perfect storm for cybercriminals and nation-state hackers from China and elsewhere, according to research released Tuesday from VMWare and Carbon Black. The post China Attacks Surge as Cyber Criminals Capitalize on COVID-19 appeared first on The Security Ledger. Related StoriesNew LastPass report finds consumer behavior affects the workplaceAs Cybercrooks Specialize, More Snooping, Less Smash and GrabHow NIST Is Securing The Quantum Era …

What’s Good IAM? The Answer may depend on your Industry

Mature identity and access management (IAM) is a pillar of enterprise security. But what makes IAM “good” for your business may depend on the kind of business you are in, and the demands of your industry, writes Rachael Stockton of LogMeIn and LastPass. The post What’s Good IAM? The Answer may depend on your Industry appeared first on The…Read the whole entry… »Related StoriesNew LastPass report finds consumer behavior affects the workplaceAs Cyber Attacks Mount, Small Businesses seek Authentication FixWith Remote Work: MFA Makes Everyone Happy …

Episode 186: Certifying Your Smart Home Security with GE Appliances and UL

In this episode of the podcast (#186) we do a deep dive on the new IoT cyber security rating system from Underwriters’ Lab. We talk with experts from GE about the process they used to obtain UL certification for a range of smart home appliances, managing device security over the decades and how a cyber security rating system may influence…Read the whole entry… » Related StoriesSpotlight Podcast: Two Decades On TCG Tackles Trustworthiness For The Internet of ThingsHow NIST Is Securing The Quantum EraBook argues for New Laws to break Social Media Monopolies …

How NIST Is Securing The Quantum Era

Quantum computers powerful enough to break the strongest classical encryption are at least a decade away, but the time to develop quantum safe encryption is now. In this opinion piece, Thomas Pöppelmann, a Senior Staff Engineer, Security Architecture and Cryptography Research at Infineon Technologies talks about the steps NIST and companies like…Read the whole entry… »Related StoriesWhat’s Good IAM? The Answer may depend on your IndustryNew LastPass report finds consumer behavior affects the workplaceWith Remote Work: MFA Makes Everyone Happy …

“Boothole” Bootloader Flaw Breaks Security on Most Linux, Windows Devices

A newly discovered vulnerability dubbed ‘Boothole’ compromises the foundation of device security for “virtually all Linux distributions” and some Microsoft’s Windows devices that employ “Secure Boot” feature, according to a new report. The post “Boothole” Bootloader Flaw Breaks Security on Most Linux, Windows Devices appeared…Read the whole entry… »Related StoriesFirms are embracing Open Source. Securing it? Not so much.Episode 183: Researcher Patrick Wardle talks Zoom 0days and Mac (in)SecurityEpisode 174: GE’s Very Bad Day – Unpacking the MDHex Vulnerabilities …

Spotlight Podcast: Two Decades On TCG Tackles Trustworthiness For The Internet of Things

In this Spotlight Podcast Intel Fellow Claire Vishik joins us to talk about the evolving concept of online “trust.” Vishik is a TCG Director and spent 14 years as the Director of Trusted Technologies at Intel. The post Spotlight Podcast: Two Decades On TCG Tackles Trustworthiness For The Internet of Things appeared first on The Security Ledger. Related StoriesEpisode 186: Certifying Your Smart Home Security with GE Appliances and ULSpotlight Podcast: Securing the Enterprise’s New NormalEpisode 185: Attacking COVID, Protecting Privacy …

Book argues for New Laws to break Social Media Monopolies

The US economy hasn’t simply allowed tech giants to ignore the social harms of their platforms; it has incentivized it. In his new book, Terms of Disservice, Dipayan Ghosh says regulation may be the only solution. The post Book argues for New Laws to break Social Media Monopolies appeared first on The Security Ledger. Related StoriesEpisode 185: Attacking COVID, Protecting PrivacyAmid Security Concerns: to Zoom or not to Zoom?Spotlight Podcast: Beyond HIPAA – a Conversation with Nemours CPO Kevin Haynes …

As Cybercrooks Specialize, More Snooping, Less Smash and Grab

Cybercriminals are becoming more specialized as they try to extract the maximum value out of email account compromises, a new report by researchers at UC Berkeley and the security firm Barracuda Networks has found. The post As Cybercrooks Specialize, More Snooping, Less Smash and Grab appeared first on The Security Ledger. Related StoriesNew LastPass report finds consumer behavior affects the workplaceEpisode 181: How Scammers weaponize COVID AnxietyWhat’s Good IAM? The Answer may depend on your Industry …

Spotlight Podcast: As Attacks Mount, ERP Security Still Lags

In this Spotlight podcast* we’re joined by Jason Fruge, the VP of Business Application Cybersecurity at Onapsis to talk about the growing attacks against critical systems like ERP and General Ledger applications by SAP and Oracle. We also talk about why these critical systems often lag on key security measures. The post Spotlight Podcast: As…Read the whole entry… » Related StoriesSpotlight Podcast: Securing the Enterprise’s New NormalEpisode 186: Certifying Your Smart Home Security with GE Appliances and ULEpisode 183: Researcher Patrick Wardle talks Zoom 0days and Mac (in)Security …

401(k) Cyber Fraud Is Growing. Everyone Could Be Liable

Hacking attacks on 401(k) plans and retirement savings accounts are growing and court rulings could have a far-reaching impact on who is liable. The post 401(k) Cyber Fraud Is Growing. Everyone Could Be Liable appeared first on The Security Ledger. Related StoriesSuit against Estée Lauder spotlights 401k Distribution FraudWhat’s Good IAM? The Answer may depend on your IndustryEpisode 181: How Scammers weaponize COVID Anxiety …

Spotlight Podcast: QOMPLX CISO Andy Jaquith on COVID, Ransomware and Resilience

In this Spotlight podcast* we’re joined by Andrew Jaquith, the CISO at QOMPLX to talk about how the COVID pandemic is highlighting longstanding problems with cyber risk management and cyber resilience. We also talk about how better instrumenting of information security can help companies get a grip on fast-evolving cyber risks like…Read the whole entry… » Related StoriesSpotlight Podcast: Public Sector levels up to tackle Cyber ThreatsRisk Recordings Podcast with RSA: Exploring Digital Risk in Digital TransformationThird Party Cyber Risk is growing. Most Companies aren’t prepared. …

Episode 185: Attacking COVID, Protecting Privacy

In this episode of the podcast (#185), DigiCert Chief Technology Officer Jason Sabin joins us to talk about how the COVID epidemic is shining a spotlight on the need for strong digital identities – for everything from virus contact tracing to remote work. The post Episode 185: Attacking COVID, Protecting Privacy appeared first on The Security…Read the whole entry… » Related StoriesEpisode 181: How Scammers weaponize COVID AnxietyAmid Security Concerns: to Zoom or not to Zoom?Spotlight Podcast: Public Sector levels up to tackle Cyber Threats …

Spotlight Podcast: Securing the Enterprise’s New Normal

In this spotlight edition of the podcast, sponsored by Trusted Computing Group* Steve Hanna joins us to talk about COVID 19 and the security risks that go along with the “new normal” that has emerged out of the pandemic. While organizations face challenges securing remote workers, Steve also sees more than a glimmer of a silver lining to the…Read the whole entry… » Related StoriesEpisode 184: Project BioMed – The Fight to Repair Medical DevicesSpotlight Podcast: Public Sector levels up to tackle Cyber ThreatsEpisode 179: CISO Eye on the Virus Guy – Assessing COVID’s Cyber Risks …

Password Psychology: users know reuse is bad, do it anyway

More than 90% of employees know re-using passwords between accounts is a dangerous business, but two thirds of them do it anyway. Rachael Stockton of LastPass digs into the “why” of password insecurity in the latest LastPass Psychology of Passwords report. The post Password Psychology: users know reuse is bad, do it anyway appeared first on The…Read the whole entry… »Related StoriesWith Remote Work: MFA Makes Everyone HappyAs Cyber Attacks Mount, Small Businesses seek Authentication Fix10 Ways to make Your Remote Work Easy and Secure …

Firms are embracing Open Source. Securing it? Not so much.

The good news: open source software is nearly universal. The bad news: half of source code repositories contains open source code containing high-risk vulnerabilities, according to a new report released by the firm Synopsys. The post Firms are embracing Open Source. Securing it? Not so much. appeared first on The Security Ledger. Related StoriesEpisode 183: Researcher Patrick Wardle talks Zoom 0days and Mac (in)SecurityEpisode 176: Security Alarms in Census II Open Source Audit. Also: The New Face of Insider Threats with Code42Episode 174: GE’s Very Bad Day – Unpacking the MDHex Vulnerabilities …

Episode 184: Project BioMed – The Fight to Repair Medical Devices

In this episode of the podcast (#184) Kyle Wiens of iFixit joins us to talk about Project BioMed: an international, crowd-sourced effort to expedite repair of medical devices by making service and repair manuals available online. In our second segment, we speak with Jonathan Krones, one of an army of volunteer engineers, archivists and librarians…Read the whole entry… » Related StoriesProject Airbreak: Hacking Medical Devices to Save Lives in a Pandemic Episode 182: Hackers take Medical Devices ‘off label’ to Save LivesSpotlight Podcast: Public Sector levels up to tackle Cyber ThreatsEpisode 179: CISO Eye on the Virus Guy – Assessing COVID’s Cyber Risks …

‹ 1 2 3 4 5 ›»