SIEM is valued most as a “security control” but creates administration challenges
Security validation program seeks to establish printer security standards
Pass the Cookie made it into the latest 2600 magazine! Very excited about this!
I was just walking around Capitol Hill and stopped by Ada’s Technical Books on 15th Avenue - a great coffee shop with lots of technical books. Right after walking in to grab a cup of tea, I saw the latest Hacker Quarterl...
DRBControl shares malware with state-backed groups
Viasat study finds scores of devices were unencrypted
Final Year Project - Web Application Security Principles About 18 years ago I worked on the final year project for my Bachelor’s degree in Computer Science. I had just gotten interested in security and was learning about security principles.
The title of the project was “Web Application Security Pri...
Swiss and Italian firms targeted by ongoing campaigns
The websites of small businesses are a key target in this year’s seasonal tax scams
This post highlights a simple mitigation to improve the security posture of your organization. The idea is to, by practical means, limit attack surface and prevent spreading of automated malware, as well as limiting lateral movement by adversaries.
Network security over the last 15 years Malware can...
US Air Force introduces program that lets students re-attempt cybersecurity certification
Sharp rise in number of women sent unsolicited sexually explicit images while riding British trains
Les marqueurs techniques suivants sont associés en source ouverte au groupe d'attaquants TA2101 utilisant le rançongiciel Maze (voir la publication CERTFR-2020-CTI-001). Ils sont fournis au format d'export MISP et peuvent être utilisés à des fins de détection et de blocage de cette menace. Cette...
CyberMDX report highlights poor device patching and management
Natural gas facility was unprepared for cyber-threats
Les marqueurs techniques suivants sont associés en source ouverte au groupe d'attaquants TA2101 utilisant le rançongiciel Maze (voir la publication CERTFR-2020-CTI-001). Ils sont fournis au format d'export MISP et peuvent être utilisés à des fins de détection et de blocage de cette menace. Cette...
Cyber-criminals demand Bitcoin or else they’ll flood websites with bad traffic
75% of IT leaders believe that employees have put data at risk intentionally
US teen arrested over alleged 6-year campaign of cyberstalking, swatting, and computer fraud
India arrests first alleged dark web drug dealer over sale of psychotropics disguised as erection aids
STG Partners could buy Dell’s RSA cybersecurity firm for more than $2bn