Schneier on Security

DECEMBER 22, 2023

Ben Rothke chose A Hacker’s Mind as “the best information security book of 2023.”

Information Security 218

Information Security 218

Schneier on Security

SEPTEMBER 2, 2022

Government officials in the country of just over 600,000 people said certain government services remained temporarily disabled for security reasons and that the data of citizens and businesses were not endangered.

Retail 292

Retail Government Ransomware Information Security 292

Joseph Steinberg

JUNE 10, 2022

While “ zero trust ” has been a buzzword for some time, the principle of zero trust, and expenditures toward getting organizational policies, procedures, and infrastructure closer to delivering it, is gaining acceptance as constituting a fundamental component of information security programs.

Cybersecurity 363

Cybersecurity Artificial Intelligence CISO Wireless 363

Tech Republic Security

JUNE 21, 2024

Immersing yourself in best practices for ethical hacking, pen-testing and information security can set you up for a career or better-protected business.

Hacking 172

Hacking Information Security 172

Joseph Steinberg

DECEMBER 11, 2023

Veteran cybersecurity expert witness executive will help strengthen law enforcement capabilities to prevent, investigate, and prosecute information-age crimes. His opinions are frequently cited in books, law journals, security publications, and general interest periodicals; his cybersecurity-related inventions appear in over 500 U.S.

Cybersecurity 276

Cybersecurity Artificial Intelligence CISO Technology 276

Krebs on Security

APRIL 27, 2023

This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. “My team is frustrated by the permissive nature of the platform,” Carbee said. Akiri said he notified the Washington D.C.

Banking 330

Banking Government Information Security Authentication 330

Joseph Steinberg

APRIL 21, 2022

Yet, it is important to understand that, if deployed without proper planning or otherwise utilized improperly, encryption can also become a dangerous double-edged sword; it can sometimes even detract from information security rather than enhance it.

Encryption 353

Encryption Cybersecurity Artificial Intelligence Backups 353

Krebs on Security

AUGUST 27, 2024

” Those third-party reports came in late June 2024 from Michael Horka , senior lead information security engineer at Black Lotus Labs , the security research arm of Lumen Technologies , which operates one of the global Internet’s largest backbones. victims and one non-U.S. ”

Internet 313

Internet Internet Technology Engineering 313

Lohrman on Security

SEPTEMBER 29, 2024

As we head toward 2025, are the duties and goals of a chief information security officer achievable? Are CISOs set up for failure? Should position descriptions be changed? Let’s explore.

CISO 159

CISO Information Security 159

Krebs on Security

SEPTEMBER 30, 2022

Someone has recently created a large number of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. If you were confused at this point, you might ask Google who it thinks is the current Chief Information Security Officer of Chevron.

CISO 344

CISO Cybercrime Accountability Information Security 344

Daniel Miessler

DECEMBER 24, 2022

If you follow Information Security at all you are surely aware of the LastPass breach situation. It started back in August of 2022 as a fairly common breach notification on a blog, but it, unfortunately, turned into more of a blog series.

Password Management 364

Password Management Passwords Encryption Backups 364

Schneier on Security

MARCH 31, 2024

Of course it was before 2008, when we created the Security and Human Behavior workshop. It was well before 2001, when we created the Workshop on Economics and Information Security. I can’t remember when I first met Ross. Okay, he created both—I helped.)

Surveillance 330

Surveillance Engineering Encryption Government 330

Security Boulevard

OCTOBER 18, 2024

There are growing concerns among chief information security officers (CISOs) about the evolving demands of their role, with 84% advocating for a split into separate technical and business-focused positions.

CISO 134

CISO Information Security Cybersecurity Risk 134

Schneier on Security

JANUARY 3, 2023

“ Factoring integers with sublinear resources on a superconducting quantum processor ” Abstract: Shor’s algorithm has seriously challenged information security based on public key cryptosystems. But…wow…maybe…and yikes!

Encryption 363

Encryption Government Information Security 363

Joseph Steinberg

JANUARY 4, 2023

The term Zero Trust refers to a concept, an approach to information security that dramatically deviates from the common approach of yesteryear; Zero Trust states that no request for service is trusted, even if it is issued by a device owned by the resource’s owner, and is made from an internal, private network belonging to the same party.

Architecture 357

Architecture Artificial Intelligence Encryption Cybersecurity 357

Security Boulevard

NOVEMBER 8, 2024

The chief information security officer (CISO) role has changed dramatically from just a few short years ago. Once confined to technical security, CISOs have emerged as key strategic partners in the C-suite. The post The CISO Evolution: From Tactical Defender to Strategic Business Partner appeared first on Security Boulevard.

CISO 122

CISO Information Security Digital transformation Security Awareness 122

Krebs on Security

JUNE 8, 2021

. “Attackers have been seen exploiting these vulnerabilities by sending victims specially crafted PDFs, often attached in a phishing email, that when opened on the victim’s machine, the attacker is able to gain arbitrary code execution,” said Christopher Hass , director of information security and research at Automox.

Backups 338

Backups Ransomware Cyber threats Phishing 338

Krebs on Security

OCTOBER 31, 2021

. “Such code copying is a significant source of real-world security exploits.” ” Image: XKCD.com/2347/. “Before reading this paper, the idea that Unicode could be exploited in some way wouldn’t have surprised me,” Green told KrebsOnSecurity.

Software 363

Software Information Security Encryption Government 363

Security Boulevard

NOVEMBER 20, 2024

According to an IANS survey of more than 800 CISOs, roles such as business information security officers (BISOs), chiefs of staff and heads for privacy, program management and data protection are among the top positions being considered to support cybersecurity efforts.

CISO 133

CISO Information Security Cybersecurity 133

Security Affairs

DECEMBER 21, 2024

” Recently, The Federal Office for Information Security (BSI) announced it had blocked communication between the 30,000 devices infected with the BadBox malware and the C2. .” continues the report “Second, let’s talk volume. The devices were all located in Germany, they were all using outdatedAndroidversions.

Firmware 142

Firmware Malware Internet Internet 142

Joseph Steinberg

JANUARY 20, 2022

Zero Trust is a concept, an approach to information security that dramatically deviates from the approach commonly taken at businesses worldwide by security professionals for many years. . • Zero Trust cannot be purchased off the shelf even from a combination of vendors. So, what is Zero Trust – in layman’s terms?

Cybersecurity 362

Cybersecurity Artificial Intelligence Ransomware Social Engineering 362

Krebs on Security

APRIL 11, 2024

On April 10, Sisense Chief Information Security Officer Sangram Dash told customers the company had been made aware of reports that “certain Sisense company information may have been made available on what we have been advised is a restricted access server (not generally available on the internet.)”

CISO 288

CISO Encryption Telecommunications Financial Services 288

Krebs on Security

OCTOBER 20, 2023

In an interview with KrebsOnSecurity, Okta’s Deputy Chief Information Security Officer Charlotte Wylie said Okta initially believed that BeyondTrust’s alert on Oct. Maiffret said BeyondTrust followed up with Okta on Oct. 2 was not a result of a breach in its systems. But she said that by Oct.

Social Engineering 329

Social Engineering Engineering Accountability Hacking 329

Krebs on Security

NOVEMBER 4, 2022

” In late September 2022, KrebsOnSecurity warned about the proliferation of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. . “These warnings will also give you the choice to report the content without letting the sender know.”

Scams 269

Scams Artificial Intelligence Cryptocurrency Accountability 269

Krebs on Security

SEPTEMBER 15, 2021

TTEC immediately activated its information security incident response business continuity protocols, isolated the systems involved, and took other appropriate measures to contain the incident. We are now in the process of carefully and deliberately restoring the systems that have been involved.

Ransomware 355

Ransomware Banking Cryptocurrency Media 355

The Last Watchdog

APRIL 30, 2024

But as cybersecurity threats evolve, it’s equally important to involve the chief information security officer (CISO) and their team in the due diligence process for any vendor an organization may consider using.Once again, the Unitronics attack offers a great example of why involving security teams early and often is a good idea.

Penetration Testing 182

Penetration Testing CISO Unstructured Data Technology 182

Krebs on Security

OCTOBER 28, 2020

Mark Arena , CEO of cybersecurity threat intelligence firm Intel 471 , said while it might be tempting to believe that firms which specialize in information security typically have better cybersecurity practices than physical security firms, few organizations have a deep understanding of their adversaries. ”

Hacking 361

Hacking Ransomware Banking Accountability 361

Schneier on Security

AUGUST 8, 2022

Fun fact: Those three algorithms were broken by the Center of Encryption and Information Security, part of the Israeli Defense Force. Three other finalists, Kyber, Saber, and Dilithium, were weakened with new techniques that will probably work against some of the other algorithms as well.

Encryption 359

Encryption Architecture Engineering Information Security 359

Krebs on Security

DECEMBER 6, 2023

The new Network and Information Security Directive (NIS2), which EU member states have until October 2024 to implement, requires registrars to keep much more accurate WHOIS records, and to respond within as little as 24 hours to WHOIS data requests tied everything from phishing, malware and spam to copyright and brand enforcement.

Internet 269

Internet Internet Phishing Scams 269

Krebs on Security

OCTOBER 30, 2024

The chief information security officer for a large academic healthcare system affected by the breach told KrebsOnSecurity they participated in a call with the FBI and were told a third party partner managed to recover at least four terabytes of data that was exfiltrated from Change by the cybercriminal group.

Healthcare 283

Healthcare Insurance Computers and Electronics Data breaches 283

Krebs on Security

JANUARY 24, 2023

The blog featured musings on the challenges of running a company that sells “security and anonymity services to customers around the world,” and even included a group photo of RSOCKS employees. “Thanks to you, we are now developing in the field of information security and anonymity!,” Kloster’s blog enthused. “We

Cybercrime 259

Cybercrime Advertising IoT Malware 259

Schneier on Security

JUNE 8, 2021

Last year, one of us (Tarah) was listening to a NATO briefing after the end of the 2020 Cyber Coalition exercises, and asked how she and other information security researchers could volunteer to test cyber ranges used to train its cyber incident response force.

Software 362

Software Cybersecurity Backups Manufacturing 362

The Last Watchdog

DECEMBER 5, 2024

5, 2024, CyberNewswire — One Identity proudly announces it has been named a winner in the Hot Company: Privileged Access Management (PAM) category in the 12th annual Cyber Defense Awards by Cyber Defense Magazine (CDM), the industrys leading information security magazine. Alisa Viejo, Calif.,

InfoSec 130

InfoSec Cyber Risk CISO Cybersecurity 130

Krebs on Security

OCTOBER 20, 2022

In late September 2022, KrebsOnSecurity warned about the proliferation of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. A follow-up story on Oct.

Accountability 315

Accountability Cryptocurrency Scams CISO 315

The Last Watchdog

JANUARY 9, 2024

Everyone in the company is responsible for maintaining information security and applying protective measures in line with established policies. Amos In addition to providing essential knowledge, cybersecurity training encourages individual and team accountability.

Technology 203

Technology Cybersecurity Risk Mobile 203

Krebs on Security

JUNE 22, 2022

“Thanks to you, we are now developing in the field of information security and anonymity!,” The employees who kept things running for RSOCKS, circa 2016. ” the post enthuses. “We make products that are used by thousands of people around the world, and this is very cool! And this is just the beginning!!!

Advertising 307

Advertising Cybercrime System Administration Hacking 307

The Last Watchdog

JANUARY 28, 2024

I had the chance to visit with , senior scientist at NTT Research’s Cryptography & Information Security (CIS) Lab , to learn more about the progress being made on a promising concept called “privacy preserving aggregate statistics.” Rising data privacy regulations underscores the need for such a capability, Boyle told me.

Data privacy 263

Data privacy Financial Services Healthcare Advertising 263