China sends 'unbreakable code' from quantum satellite to Earth
Tech Republic Security
AUGUST 11, 2017
A new satellite has been able to transmit 'unbreakable' code in an effort to build 'hack-proof' communications, according to Chinese state media.
August, 2017
167 
How to trace ransomware payments end-to-end
Elie
AUGUST 31, 2017
Over the last two years, ransomware has been all over the news. Hardly a week goes by without a report of a large ransomware outbreak or the emergence of a new ransomware family. Despite all this attention, very little is known about how profitable ransomware is and who the criminals are that benefit from it. To answer these questions and expose the inner workings of the ransomware economy, our research team at Google, in partnership with.
Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Confessions of an InfoSec Burnout
The Falcon's View
AUGUST 29, 2017
Soul-crushing failure. If asked, that is how I would describe the last 10 years of my career, since leaving AOL. I made one mistake, one bad decision, and it's completely and thoroughly derailed my entire career. Worse, it's unclear if there's any path to recovery as failure piles on failure piles on failure. The Ground I've Trod. To understand my current state of career decrepitude, as well as how I've seemingly become an industry pariah.
The Weekly Independent: August 28, 2017
eSecurity Planet
AUGUST 27, 2017
News and notes for independent professionals and their clients. This is the August 28, 2017 edition.
Why Giant Content Libraries Do Nothing for Your Employees’ Cyber Resilience
Advertisement
Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.
NYDFS Cybersecurity Regulations: Key Deadlines
NopSec
AUGUST 21, 2017
The first traditional deadline is coming to a close this month for compliance with the NYDFS Cybersecurity Regulations. Please note that situations vary from one organization to another and I urge you to consult an NY DFS expert to help you get the right information for your team and determine which requirements apply exactly to you. For example, the initial 30 day period for filing Notices of Exemption under 23 NYCRR 500.19(e) ends on August 28, 2017.
Detect and Prevent Data Exfiltration Webinar with Infoblox
Andrew Hay
AUGUST 16, 2017
Please join SANS Institute Instructor and LEO Cyber Security Co-Founder & CTO Andrew Hay and Infoblox Security Product Marketing’s Sam Kumarsamy on Thursday, August 17th, 2017 at 1:00 PM EDT (17:00:00 UTC) as they present a SANS Institute webinar entitled Detect & Prevent Data Exfiltration: A Unique Approach. Overview. Data is the new currency in the modern digital enterprise and protecting data is a strategic imperative for every organization.
Sign up to get articles personalized to your interests!
Cyber Security Informer brings together the best content for cyber security professionals from the widest variety of industry thought leaders.
|
More Trending
Understanding the Mirai Botnet
Elie
AUGUST 18, 2017
The Mirai botnet, composed primarily of embedded and IoT devices, took the Internet by storm in late 2016 when it overwhelmed several high-profile targets with massive distributed denial-of-service (DDoS) attacks. In this paper, we provide a seven-month retrospective analysis of Mirai’s growth to a peak of 600k infections and a history of its DDoS victims.
Introducing Behavioral Information Security
The Falcon's View
AUGUST 29, 2017
I recently had the privilege of attending BJ Fogg's Behavior Design Boot Camp. For those unfamiliar with Fogg's work, he started out doing research on Persuasive Technology back in the 90s, which has become the basis for most modern uses of technology to influence people (for example, use of Facebook user data to influence the 2016 US Presidential Election).
Data processors under the GDPR
Privacy and Cybersecurity Law
AUGUST 23, 2017
In our monthly GDPR Updates we discuss various key issues of the General Data Protection Regulation, (EU) 2016/679 (the GDPR), […].
DevOps Risk Management: Vulnerability Risk Management as DevOps Practice
NopSec
AUGUST 15, 2017
Silos exist in all levels and all types of organizations. Different teams naturally have different priorities, methodologies, and more, though it can be argued that more collaboration can improve the efficiency and effectiveness of the company as a whole. This can be seen especially within IT Teams as well, particularly the development and operations teams.
Zero Trust Mandate: The Realities, Requirements and Roadmap
Advertisement
The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.
How to build security into your company's IoT plan
Tech Republic Security
AUGUST 4, 2017
As the IoT market booms, it's essential your company develops long-term cybersecurity solutions. These tips will help you prepare.
IoT-device swarm intelligence: Think about security before it's too late
Tech Republic Security
AUGUST 7, 2017
Researchers warn that security is historically an afterthought. With everything from thermostats to drones likely belonging to IoT-device swarms in the near future, that's not wise.
Musk, tech leaders urge UN to ban AI-powered lethal autonomous weapons
Tech Republic Security
AUGUST 21, 2017
A group of 116 tech executives recently penned an open letter urging the UN to double its efforts protecting against autonomous weapons, which some have called 'killer robots.
10 bad habits cybersecurity professionals must break
Tech Republic Security
AUGUST 10, 2017
Cybersecurity workers face many challenges on the job. Here are 10 bad habits they must avoid in order to be most effective.
Prevent Data Breaches With Zero-Trust Enterprise Password Management
Advertisement
Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.
Stop treating users as the enemy when it comes to cybersecurity
Tech Republic Security
AUGUST 7, 2017
Users get a bad rap for cybersecurity. Find out why making them part of your organization's cybersecurity solution is critical to staying secure.
Hacker claims to have decrypted Apple's Secure Enclave, destroying key piece of iOS mobile security
Tech Republic Security
AUGUST 17, 2017
iOS users beware: A hacker has just published a decryption key for the Apple Secure Enclave, which is responsible for processing Touch ID transactions.
How to use Secure Copy for file transfer
Tech Republic Security
AUGUST 16, 2017
FTP was the popular protocol for file transfer but short of using FTPS, it doesn't provide the security required these days. Here's how to use Secure Copy (SCP) for file transfer.
What do macOS and Android have in common? Both are booming malware markets
Tech Republic Security
AUGUST 24, 2017
A new report from Malwarebytes reveals Android ransomware rose 137.8% from Q1 to Q2 2017, and macOS malware is at its highest levels ever. Here are the threats the two platforms face.
Optimizing The Modern Developer Experience with Coder
Advertisement
Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.
How to prevent phishing attacks in Microsoft Outlook and Office 365: 3 methods
Tech Republic Security
AUGUST 16, 2017
Phishing attacks are a major source of worry for businesses. Here are a few tips on keeping malicious messages out of your users' inboxes and minimizing the risk when they make it there.
Report: The US government has a massive footprint on the darknet
Tech Republic Security
AUGUST 8, 2017
Like commercial entities, government agencies have a tendency to find their secrets leaked to the dark web. Unfortunately, US government secrets are leaked at a much higher rate.
Researchers can now hack a PC with malware stored on synthetic DNA
Tech Republic Security
AUGUST 10, 2017
University of Washington researchers successfully stored malware in synthetic DNA strands, and used it to gain control of the computer analyzing it.
AI vs AI: New algorithm automatically bypasses your best cybersecurity defenses
Tech Republic Security
AUGUST 2, 2017
Researchers have created an AI that tweaks malware code, and it easily bypassed an anti-malware AI undetected. Is machine learning ready to face down cybersecurity threats?
The Importance of User Roles and Permissions in Cybersecurity Software
Advertisement
How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.
If you're really concerned about browser security, Incognito isn't enough
Tech Republic Security
AUGUST 18, 2017
If you assume your browsing is private and secure, think again. Jack Wallen offers up what he believes is your best bet to safeguard your browsing sessions and data.
Hundreds of IoT smart locks bricked by bad update, leaving customers stranded
Tech Republic Security
AUGUST 15, 2017
A botched wireless update for certain LockState locks has left them unable to be locked or unlocked without the physical backup key and highlighting the dangers associated with IoT.
iOS users beware: You're the biggest target for mobile phishing attacks
Tech Republic Security
AUGUST 4, 2017
Phishing continues to be a problem, and attacks are moving away from the email inbox. A new report found that iOS is the biggest target, with most attacks coming from game apps.
How to scan and clean malware from a Linux server
Tech Republic Security
AUGUST 23, 2017
Just because your shares are served up via Linux, doesn't mean you shouldn't be scanning for malicious files. Here's how to do that with Maldet.
IDC Analyst Report: The Open Source Blind Spot Putting Businesses at Risk
Advertiser: Revenera
In a recent study, IDC found that 64% of organizations said they were already using open source in software development with a further 25% planning to in the next year. Most organizations are unaware of just how much open-source code is used and underestimate their dependency on it. As enterprises grow the use of open-source software, they face a new challenge: understanding the scope of open-source software that's being used throughout the organization and the corresponding exposure.
Raspberry Pi owners: Update now to block this Wi-Fi hack
Tech Republic Security
AUGUST 17, 2017
The update from the old Debian Jessie-based version of Raspbian includes various security fixes, including a patch for the Broadpwn Wi-Fi vulnerability.
Top 5: Things to know about password managers
Tech Republic Security
AUGUST 15, 2017
You've probably heard that password managers are the way to keep track of those long, complex passwords you should be using. Here's a quick explanation of how they work, and how to use them.
Warning, Windows 10 users! Tech support scammers have a new method for phishing attacks
Tech Republic Security
AUGUST 8, 2017
Microsoft's Malware Protection Center has spotted new phishing techniques that direct Windows 10 users to fraudulent tech-support sites. Here's how you could be affected.
3 things you need to know about cybersecurity in an IoT and mobile world
Tech Republic Security
AUGUST 10, 2017
Cybersecurity complexities continue to rise as we transition into a world dominated by mobile devices and the Internet of the Things. At a high level, make sure you understand these three factors.
Beware of Pixels & Trackers on U.S. Healthcare Websites
Advertisement
The healthcare industry has massively adopted web tracking tools, including pixels and trackers. Tracking tools on user-authenticated and unauthenticated web pages can access personal health information (PHI) such as IP addresses, medical record numbers, home and email addresses, appointment dates, or other info provided by users on pages and thus can violate HIPAA Rules that govern the Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates.
Let's personalize your content