Schneier on Security

MAY 21, 2024

Apple and Google said they will continue collaborating with the Internet Engineering Task Force to further develop this technology and address the issue of unwanted tracking. Several Bluetooth tag companies have committed to making their future products compatible with the new standard.

Engineering 283

Engineering Internet Internet Technology 283

Malwarebytes

JULY 4, 2022

After a good start, the Internet-enabled, technological revolution we are living through has hit some bumps in the road. To celebrate Independence Day we want to draw your attention to five technologies that could improve life, liberty and the pursuit of happiness on the Internet. Onion networking.

Internet 125

Internet Internet Technology DNS 125

Security Through Education

FEBRUARY 20, 2024

In the ever-evolving landscape of cybersecurity, social engineering has undergone significant transformations over the years, propelled by advancements in technology. This article delves into the historical shifts in social engineering tactics and explores how adversaries embrace new technologies to achieve their objectives.

Social Engineering 109

Social Engineering Artificial Intelligence Engineering Phishing 109

Schneier on Security

APRIL 25, 2024

In just a few decades, much of human knowledge has been collectively written up and made available to anyone with an internet connection. The internet initially promised to change this process. Large language models, or LLMs, are trained on massive troves of material—nearly the entire internet in some cases.

Engineering 348

Engineering Internet Internet Artificial Intelligence 348

Malwarebytes

JULY 16, 2021

A Virtual Private Network (VPN) can stop others from snooping on or tampering with your Internet traffic. And because your traffic appears to join the the Internet from your VPN provider’s computer and not your own, a VPN can also conceal your IP address, which disrupts tracking and helps you circumvent geo-blocks. Yes, it does.

VPN 142

VPN Internet Internet Encryption 142

The Last Watchdog

DECEMBER 11, 2022

The Internet of Everything ( IoE ) is on the near horizon. For instance, very visibly over the past decade, Internet of Things ( IoT ) computing devices and sensors have become embedded everywhere. For instance, very visibly over the past decade, Internet of Things ( IoT ) computing devices and sensors have become embedded everywhere.

Internet 189

Internet Internet Energy and Utilities IoT 189

Krebs on Security

OCTOBER 8, 2024

One of the zero-day flaws — CVE-2024-43573 — stems from a security weakness in MSHTML , the proprietary engine of Microsoft’s Internet Explorer web browser. Cemerikic noted that while Internet Explorer is being retired on many platforms, its underlying MSHTML technology remains active and vulnerable.

Engineering 236

Engineering Internet Internet System Administration 236

The Last Watchdog

APRIL 2, 2024

It’s a digital swindle as old as the internet itself, and yet, as the data tells us, the vast majority of security incidents are still rooted in the low-tech art of social engineering. Some 74 percent of cyber breaches are caused by human factors, including errors, stolen credentials, misuse of access privileges, or social engineering.

Social Engineering 211

Social Engineering Technology Engineering Accountability 211

Schneier on Security

JUNE 3, 2024

Technology was once simply a tool—and a small one at that—used to amplify human intent and capacity. That was the story of the industrial revolution: we could control nature and build large, complex human societies, and the more we employed and mastered technology, the better things got.

Technology 298

Technology Government Engineering Internet 298

Malwarebytes

NOVEMBER 4, 2024

We identified a new wave of phishing for banking credentials that targets consumers via Microsoft’s search engine. While Microsoft’s Bing only has about 4% of the search engine market share , crooks are drawn to it as an alternative to Google. We have reported the fraudulent sites to Microsoft already.

Engineering 110

Engineering Phishing Banking Authentication 110

Krebs on Security

SEPTEMBER 8, 2021

According to a security advisory from Redmond, the security hole CVE-2021-40444 affects the “MSHTML” component of Internet Explorer (IE) on Windows 10 and many Windows Server versions. There is currently no official patch for the flaw, but Microsoft has released recommendations for mitigating the threat.

Software 355

Software Engineering Internet Internet 355

The Last Watchdog

MARCH 20, 2023

Related: How Google, Facebook enable snooping In fact, a majority of scams occur through social engineering. As technology has rapidly exceeded all historical imaginings, opportunities for fraudsters to exploit their victims abound.

Media 214

Media Identity Theft Internet Internet 214

The Last Watchdog

JULY 10, 2023

Related: Using ‘Big Data’ to improve health and well-being But there’s yet another towering technology mountain to climb: we must also overcome the limitations of Moore’s Law. Optical technology can enable us to control energy consumption so we can support increasing capacity and increasing bandwidth,” Gomi summarizes.

Energy and Utilities 246

Energy and Utilities Technology Internet Internet 246

CyberSecurity Insiders

JUNE 2, 2023

By Jayakumar (Jay) Kurup, Global Sales Engineering Director at Morphisec Securing operational technology (OT) creates unique challenges. Sometimes this is due to cultural reasons (management’s fear of even the slightest chance of disruption); other times, it is technological.

Cyber threats 136

Cyber threats Technology Firewall Ransomware 136

Schneier on Security

MAY 3, 2019

It's an impassioned debate, acrimonious at times, but there are real technologies that can be brought to bear on the problem: key-escrow technologies, code obfuscation technologies, and backdoors with different properties. Tim Berners-Lee has called them "philosophical engineers." Public-interest technology isn't new.

Cybersecurity 247

Cybersecurity Technology Government Internet 247

The Last Watchdog

DECEMBER 7, 2021

Without much fanfare, digital twins have established themselves as key cogs of modern technology. Digital twins enable simulations to be run without risking harm to the physical entity; they help inform efficiency gains made in factories and assure the reliability of jet engines, for instance. The task at hand is not a small one.

Engineering 244

Engineering Data collection Artificial Intelligence Technology 244

Schneier on Security

NOVEMBER 13, 2018

Due to ever-evolving technological advances, manufacturers are connecting consumer goods­ -- from toys to lightbulbs to major appliances­ -- to the internet at breakneck speeds. This is the Internet of Things, and it's a security nightmare. But like nearly all innovation, there are risks involved. But software is different.

IoT 231

IoT Manufacturing Internet Internet 231

Krebs on Security

NOVEMBER 21, 2020

NiceHash founder Matjaz Skorjanc said the unauthorized changes were made from an Internet address at GoDaddy, and that the attackers tried to use their access to its incoming NiceHash emails to perform password resets on various third-party services, including Slack and Github. GoDaddy said the outage between 7:00 p.m. and 11:00 p.m.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Schneier on Security

MARCH 5, 2019

It's an impassioned debate, acrimonious at times, but there are real technologies that can be brought to bear on the problem: key-escrow technologies, code obfuscation technologies, and backdoors with different properties. Tim Berners-Lee has called them "philosophical engineers." Public-interest technology isn't new.

Cybersecurity 232

Cybersecurity Technology Government Internet 232

Schneier on Security

OCTOBER 12, 2018

As a result, we are stuck with hackable internet protocols, computers that are riddled with vulnerabilities and networks that are easily penetrated. A refrigerator is now a computer that keeps things cold; a car is now a computer with four wheels and an engine. But that computer with four wheels and an engine?

Government 232

Government Internet Internet Marketing 232

Schneier on Security

OCTOBER 15, 2024

In a feat of engineering, the bomb component was so carefully hidden as to be virtually undetectable, even if the device was taken apart, the officials said. Technology alone has no ethics: the difference between a patch and an exploit is the method in which a technology is disclosed.

Marketing 275

Marketing Technology IoT Engineering 275

The Last Watchdog

AUGUST 29, 2023

In 2019, a cybersecurity firm demonstrated security risks that could allow an attacker to disrupt engine readings and altitude on an aircraft. Government Accountability Office in 2020 about increasing risk due to connected aircraft technology developments. There was another warning from the U.S.

Software 264

Software Risk Artificial Intelligence Engineering 264

The Last Watchdog

MARCH 31, 2022

The vulnerabilities of internet security, once mostly a nuisance, have become dangerous and costly. Second, the design of security solutions struggled to scale up properly or adapt to the technological changes in the industry, especially in disaggregated compute networks. About the essayist.

Artificial Intelligence 229

Artificial Intelligence Threat Detection Engineering Software 229

Krebs on Security

MARCH 31, 2020

Ueland said after hearing about the escrow.com hack Monday evening he pulled the domain name system (DNS) records for escrow.com and saw they were pointing to an Internet address in Malaysia — 111.90.149[.]49 The employee involved in this incident fell victim to a spear-fishing or social engineering attack.

Phishing 296

Phishing DNS Social Engineering Accountability 296

Krebs on Security

NOVEMBER 9, 2024

based technology companies. “This is social engineering at the highest level and there will be failed attempts at times. Donahue said 60 technology companies are now routing all law enforcement data requests through Kodex, including an increasing number of financial institutions and cryptocurrency platforms.

Hacking 258

Hacking Accountability Government Social Engineering 258

The Last Watchdog

MAY 19, 2022

Today, there are two major types of common CMS platforms: •The older “traditional” or “monolithic” CMS platforms include a content repository (usually a multimedia database), the administrative console (where content is added and categorized), the presentation system (which makes nice-looking pages), and the search engine. Gierlinger.

Data breaches 262

Data breaches Encryption Mobile Technology 262

Schneier on Security

MAY 13, 2024

In some cases, we can use access-control mechanisms and other Internet security systems to limit who can access the LLM and what the LLM can do. Engineers will be tempted to grab for LLMs because they are general-purpose hammers; they’re easy to use, scale well, and are good at lots of different tasks.

Internet 298

Internet Internet Risk Technology 298

The Last Watchdog

MAY 5, 2022

As an enterprise security team, you could restrict internet access at your egress points, but this doesn’t do much when the workforce is remote. In short, anything accessible from the internet should be given extra attention. This disables peer-to-peer access, enabling internet-only access. Food for thought, eh!

Ransomware 247

Ransomware Risk Internet Internet 247

The Last Watchdog

SEPTEMBER 5, 2023

New government rules coupled with industry standards meant to give formal shape to the Internet of Things (IoT) are rapidly quickening around the globe. I had an eye-opening conversation about all of this with Steve Hanna , distinguished engineer at Infineon Technologies , a global semiconductor manufacturer based in Neubiberg, Germany.

IoT 220

IoT Government Internet Internet 220

Schneier on Security

APRIL 10, 2023

Numerous other open-source LLMs are under development, with a community of thousands of engineers and scientists. And new mechanisms, from ChatGPT plugins to LangChain , will enable composition of AI with thousands of API-based cloud services and open source tools, allowing LLMs to interact with the internet as humans do.

Phishing 326

Phishing Scams Surveillance Internet 326

Malwarebytes

OCTOBER 3, 2024

Like something out of Black Mirror, two students have demonstrated a way to use smart glasses and facial recognition technology to immediately reveal people’s names, phone numbers, and addresses. PimEyes is an online face search engine that searches the internet to find pictures of particular faces.

Artificial Intelligence 143

Artificial Intelligence Engineering Surveillance Technology 143

Schneier on Security

SEPTEMBER 30, 2019

The United States government's continuing disagreement with the Chinese company Huawei underscores a much larger problem with computer technologies in general: We have no choice but to trust them completely, and it's impossible to verify that they're trustworthy. The engineers who design and program them come from over a hundred countries.

Government 233

Government Internet Internet Artificial Intelligence 233

Krebs on Security

APRIL 9, 2024

Most of the flaws that Microsoft deems “more likely to be exploited” this month are marked as “important,” which usually involve bugs that require a bit more user interaction (social engineering) but which nevertheless can result in system security bypass, compromise, and the theft of critical assets.

DNS 281

DNS Social Engineering Malware Media 281

Krebs on Security

OCTOBER 10, 2023

Natalie Silva , lead security engineer at Immersive Labs , said this flaw’s impact to enterprise customers could be significant, and lead to prolonged downtime. For a more detailed breakdown on the updates released today, see the SANS Internet Storm Center roundup.

Engineering 261

Engineering DDOS Software Authentication 261

The Last Watchdog

DECEMBER 13, 2023

I had the opportunity to sit down with DigiCert’s Jason Sabin , Chief Technology Officer and Avesta Hojjati , Vice President of Engineering to chew this over. And PKI is the best technology we’ve got to get us there. We met at DigiCert Trust Summit 2023. A we turn the corner into 2024, Digital Trust is in sight.

Encryption 311

Encryption Technology CISO IoT 311

Joseph Steinberg

JULY 13, 2022

To begin with, it is important to understand that, like most vendors, Apple has touted its security features in the past , and, yet, at least some of the dangers against which the new features are intended to protect exist precisely because sophisticated attackers have proven capable of defeating Apple’s security technologies.

Cybersecurity 258

Cybersecurity Artificial Intelligence Government Social Engineering 258

Schneier on Security

MAY 11, 2023

This means, at a minimum, the technology needs to be transparent. The problem isn’t the technology—that’s advancing faster than even the experts had guessed —it’s who owns it. Today’s AIs are primarily created and run by large technology companies, for their benefit and profit.

Artificial Intelligence 337

Artificial Intelligence Computers and Electronics Risk Technology 337