Top Cyber Security Informer Hacking Engineering Content for June, 2014

June, 2014

Lessons Learned from Data Breaches at Universities

NopSec

JUNE 16, 2014

No industry is immune to IT security breaches. Recent breaches at Indiana University, Iowa State, the University of Maryland, and the University of North Dakota cumulatively impacted over 750,000 students, alumni, faculty and staff. In the case of higher educational institutions there is data exposure risk from personally identifiable information, such as social security numbers.

Data breaches

Data breaches Malware Passwords Education

Execute without read

Scary Beasts Security

JUNE 5, 2014

A couple of years ago, during an idle moment, I wondered what we could do if we had the hardware CPU primitive of pages with permissions execute-only (i.e. no read and write): [link] It turns out that aarch64 has exactly such support. Here's support heading in to the Linux kernel: [link] The original idea was to defeat ROP by having all of the instructions randomized a bit on a per-install basis.

Engineering

Engineering Hacking

Join 28,000+

Insiders

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

Choose the right sharing icon to boost user engagement

Elie

JUNE 24, 2014

What’s the best icon to entice people to share something through their social networks? It turns out to be the one used on Android. While this may contradict guidelines proposed by some designers, this conclusion is based on the results of a survey of 7,500 users.

UK Government launches “Cyber Essentials” badge

Privacy and Cybersecurity Law

JUNE 13, 2014

The UK Government has launched a new cyber security certification framework called “Cyber Essentials“ This is part of a continuing effort […].

Government

Why Giant Content Libraries Do Nothing for Your Employees’ Cyber Resilience

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats