85% of orgs have at least some kind of resource focusing on CTI
Unencrypted customer and employee details part of the trove
Pass the Cookie made it into the latest 2600 magazine! Very excited about this!
I was just walking around Capitol Hill and stopped by Ada’s Technical Books on 15th Avenue - a great coffee shop with lots of technical books. Right after walking in to grab a cup of tea, I saw the latest Hacker Quarterl...
Emails, phone numbers, purchase histories and addresses stolen
At BSides San Francisco, Bryan Zimmer, head of security at Humu, delivered a talk on how to create a security program and develop a security-centric culture as the organization’s first security hire
Final Year Project - Web Application Security Principles About 18 years ago I worked on the final year project for my Bachelor’s degree in Computer Science. I had just gotten interested in security and was learning about security principles.
The title of the project was “Web Application Security Pri...
At BSides San Francisco, Larkin Ryder, the interim CISO at Slack, delivered a keynote based on a decade of retrospection, reflection, and prediction
Decisions made by technology companies have angered people
This post highlights a simple mitigation to improve the security posture of your organization. The idea is to, by practical means, limit attack surface and prevent spreading of automated malware, as well as limiting lateral movement by adversaries.
Network security over the last 15 years Malware can...
Security is both a business and a technical issue, especially as businesses become more digital
Charges have been dismissed against Coalfire employees accused of burgling their courthouse client
FBI arrests man accused of mounting cyber-attacks against a US congresswoman’s political rival
Class-action lawsuit filed against University of Washington School of Medicine over data breach
Tech sector has the furthest to go to improve its security, according to HackerOne research
Titles featured disruptive "out of context" advertising
DISA handles secure comms for White House and others
Market analysis firm Tetrad left S3 bucket misconfigured
The US is considering a bill that would hit serial cyber-flashers with hefty fines
SEC awards Booz Allen a $113m contract to modernize cyber-defense operations
Class-action lawsuit proposed against Hackensack Meridian over ransomware attack