Hot for Security

MARCH 30, 2021

Four months in, the infosec community is more concerned than ever about the infamous supply chain attack that resulted in the breach of more than 18,000 (confirmed) organizations. The reason? More details keep bubbling up as forensic investigations continue.

InfoSec 111

InfoSec Software Data breaches Cybersecurity 111

Troy Hunt

OCTOBER 19, 2018

Given the interest after my pointing out a couple of little differences in the US compared to the rest of the world last week, after the usual tech and infosec intro this week I decided to focus a big whack of this week's video on what some of differences look like. So yeah, business as usual on the internet!

InfoSec 195

InfoSec Scams Data breaches Internet 195

Schneier on Security

JANUARY 9, 2018

Daniel Miessler criticizes my writings about IoT security: I know it's super cool to scream about how IoT is insecure, how it's dumb to hook up everyday objects like houses and cars and locks to the internet, how bad things can get, and I know it's fun to be invited to talk about how everything is doom and gloom.

IoT 159

IoT InfoSec Risk Internet 159

SecureWorld News

OCTOBER 18, 2021

When it comes to Missouri Governor Mike Parson's explosive reaction to a reporter "hacking" the state's web application, there is an outpouring of public figures, InfoSec professionals, and other tech experts telling the governor what they think. October 14, 2021. This mentality is the reason why cybersecurity is terrible everywhere.

InfoSec 98

InfoSec Hacking Education Cybersecurity 98

Security Boulevard

SEPTEMBER 26, 2021

The post No Password Microsoft Accounts, Facebook Smart Glasses, Security.txt Internet Standard appeared first on The Shared Security Show. The post No Password Microsoft Accounts, Facebook Smart Glasses, Security.txt Internet Standard appeared first on The Shared Security Show.

Internet 100

Internet Internet Passwords Accountability 100

Krebs on Security

JUNE 15, 2023

government agency in charge of improving the nation’s cybersecurity posture is ordering all federal agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge in attacks targeting previously unknown vulnerabilities in widely used security and networking appliances.

Risk 263

Risk VPN Internet Internet 263

Security Boulevard

FEBRUARY 6, 2022

The post Graphics Card Web Tracking, Fake Job Ad Scams, Hacker Takes Down North Korea’s Internet appeared first on The Shared Security Show. The post Graphics Card Web Tracking, Fake Job Ad Scams, Hacker Takes Down North Korea’s Internet appeared first on Security Boulevard.

Scams 98

Scams Internet Internet InfoSec 98

Security Boulevard

JANUARY 11, 2022

Sood’s ‘(Internet of Things or Threats) Anatomizing The Structure Of loT Botnets’ appeared first on Security Boulevard. Our thanks to BSides Berlin for publishing their tremendous videos from the BSides Berlin 2021 Conference on the organization’s’ YouTube channel. The post BSides Berlin 2021 – Aditya K.

Internet 111

Internet Internet Education InfoSec 111

SecureWorld News

JULY 31, 2023

Cybersecurity professionals have various views on last week's news from the United States Securities and Exchange Commission (SEC) when it surprised the InfoSec community and the C-suites of corporate America. I recommend the TTX exercise or 'game' be created using the Center for Internet Security v8 control objectives and free templates.

CISO 98

CISO InfoSec Risk Cybersecurity 98

The Last Watchdog

JANUARY 28, 2019

Consider that most of us spend more time navigating the Internet on our laptops and smartphones than we do behind the wheel of a car. But the larger point is that Xbash is just one of dozens of malware families circulating far and wide across the Internet. Credential stuffing campaigns have become part of the fabric of the Internet.

Passwords 196

Passwords Password Management Internet Internet 196

Security Boulevard

MARCH 1, 2022

The post EDRi PrivacyCamp22 – Panel: ‘A Feminist Internet’ appeared first on Security Boulevard. Sincere thanks to EDRi (European Digital Rights) for publishing their phenomenal videos from the EDRi PrivacyCamp22 Conference on the organization’s YouTube channel.

Internet 75

Internet Internet Education InfoSec 75

Security Affairs

JULY 13, 2020

Records of 45 Million+ travelers to Thailand and Malaysia Leaked on #Darkweb (Blog Link) [link] #infosec #leaks #CyberSecurity pic.twitter.com/zHOujQ8CMm — Cyble (@AuCyble) July 12, 2020. The huge trove of data was discovered by the researchers during their regular Deepweb and Darkweb monitoring activity.

Mobile 145

Mobile InfoSec Data breaches Advertising 145

Troy Hunt

MARCH 18, 2024

It is undoubtedly in the hands of thousands of internet randos. The linked article talks about the author verifying the data with various people he knows, as well as other well-known infosec identities verifying its accuracy. So, let's focus on what we can prove, starting with the accuracy of the data.

Data breaches 362

Data breaches Encryption Identity Theft InfoSec 362

Notice Bored

APRIL 10, 2021

We're currently preparing some new information risk and security policies for SecAware.com. It's hard to find gaps in the suite of 81 policy templates already on sale (!)

InfoSec 60

InfoSec Penetration Testing Information Security Risk 60

Troy Hunt

NOVEMBER 21, 2017

Obviously, the work I've been doing with Have I Been Pwned (HIBP) has given me a heap of insight into this specific area of infosec over the last 4 years and the folks from DC felt my views on things might be helpful. That was all great and I was happy to share my thoughts from the other side of the world.

Data breaches 236

Data breaches InfoSec Backups IoT 236

Security Affairs

JANUARY 19, 2020

The list appears to be the result of an Internet scan for devices using default credentials or easy-to-guess passwords. ” The lists leaked online are dated October-November 2019, let’s hope that Internet Service Providers will contact ZDNet to receive them and check if the devices belong to their network and secure them. .

IoT 120

IoT DDOS InfoSec Internet 120

Security Boulevard

JULY 7, 2023

Permalink The post BSides Knoxville 2023 – Zachary Hunsaker – Open Source Intelligence: What Does The Internet Know About You? Our thanks to BSides Knoxville for publishing their presenter’s outstanding BSides Knoxville 2023 content on the organizations’ YouTube channel. appeared first on Security Boulevard.

Internet 81

Internet Internet CISO Education 81

CSO Magazine

DECEMBER 15, 2022

Last year, two high severity, easily exploitable Microsoft Exchange vulnerabilities dubbed ProxyLogon and ProxyShell made waves in the infosec sphere. Both vulnerabilities impact Microsoft Exchange Server on-premises and hybrid setups running Exchange versions 2013, 2016, and 2019 with an internet-exposed Outlook Web App (OWA) component.

InfoSec 97

InfoSec Authentication Internet Internet 97

DoublePulsar

OCTOBER 22, 2024

Back on October 13th, I started a Mastodon thread for something I’d come across: Kevin Beaumont (@GossiTheDog@cyberplace.social) The thread is a bit wild, I didn’t know about the FortiNet private notification as I’m just an InfoSec pleb (InfoSec porg?) My advice is don’t present FGFM to the internet in those situations.

Firewall 102

Firewall InfoSec Internet Internet 102

SecureWorld News

OCTOBER 6, 2021

Follow For More >> @TowardsCybersec #cybersecurity #security #privacy #infosec #meme #internet #Threat #digital #tech #creativity #Hacked #people #Online #safety #data #informationtechnology #informationsecurity pic.twitter.com/tTAPWh4peR — Towards Cybersecurity (@TowardsCybersec). October 5, 2021. October 5, 2021.

InfoSec 98

InfoSec Passwords Cybersecurity Media 98

Krebs on Security

FEBRUARY 22, 2024

“The infosec industry is always trying to distinguish [the work] of one APT group from another. . “From what they chat about we can see this is a very competitive industry, where companies in this space are constantly poaching each others’ employees and tools,” Danowski said. But that’s getting harder to do.”

Government 320

Government Hacking Cyber threats Mobile 320

Hot for Security

FEBRUARY 16, 2021

Seismic monitoring devices linked to the internet are vulnerable to cyberattacks that could disrupt data collection and processing, according to Michael Samios of the National Observatory of Athens and his fellow colleagues who put together a new study published in Seismological Research Letters.

IoT 128

IoT InfoSec Data collection Encryption 128

Security Boulevard

APRIL 3, 2021

The post CERIAS – Scott Shackelford’s ‘The Internet of Things: What Everyone Needs To Know’ appeared first on Security Boulevard. Many thanks to CERIAS Purdue University for publishing their outstanding videos on the organization's YouTube channel. Enjoy and Be Educated Simultaneously!

Internet 69

Internet Internet Education InfoSec 69

The Security Ledger

APRIL 29, 2019

The post Introducing Securepairs.org: Fighting Infosec FUD for the Right to Repair appeared first on. » Related Stories Testimony: There’s No Internet of Things Risk in Repair Podcast 127: Donnie, Talk to China and Other Lessons from 2018 How Digital Transformation is forcing GRC to evolve. Read the whole entry. »

InfoSec 40

InfoSec Digital transformation Internet Internet 40

Security Affairs

NOVEMBER 1, 2020

The researcher Jan Kopriva published a post on the SANS ISC Infosec Forums and revealed that over 103 000 machines online are yet to be patched. This would mean that a vulnerable machine hides behind approximately 8% of all IPs, which have port 445 open.” ” reads the post.

InfoSec 135

InfoSec Advertising Malware Internet 135

Notice Bored

JANUARY 9, 2021

which leaves our organisations, management and society at large asking themselves "What have the infosec pros ever done for us? They are both global in scope and potentially disastrous in nature, and worse still they are both linked through the Internet - the big daddy of all information risks facing the planet right now. Yeah, right.

Internet 52

Internet Internet Risk InfoSec 52

Daniel Miessler

OCTOBER 4, 2020

We could also have a massive network of technical support, using people in infosec who already have jobs. It’s just a placeholder graphic from the internet that I added the Fortify project name to. So basically the Fortify Operatives? who are deployed onsite can ask questions about installations, configs, etc.

Ransomware 246

Ransomware Small Business Government InfoSec 246

SiteLock

AUGUST 27, 2021

Internet Explorer Vulnerability Discovered. Earlier this month, a security researcher discovered a major security flaw in Microsoft’s Internet Explorer browser. The Internet of Things and Cyber Security. The Infosec Institute recently wrote a topic on the subject, which can be read here. You can read it here.

Passwords 95

Passwords Cybersecurity Internet Internet 95

Joseph Steinberg

JUNE 10, 2022

As a result, cybersecurity programs must be crafted and implemented not only to defend against lateral movement through data systems by so called “authorized users” but also to treat users on internal networks as if they were no more trustworthy than users accessing via Internet-based connections emanating from halfway around the work.

Cybersecurity 363

Cybersecurity Artificial Intelligence CISO Wireless 363

Security Boulevard

OCTOBER 5, 2021

The post DEF CON 29 Biohacking Village – Mariam Elgabry’s ‘Internet Of Ingestible Things: Security By Design’ appeared first on Security Boulevard. Our thanks to DEFCON for publishing their tremendous DEFCON Conference Biohacking Village videos on the groups' YouTube channel.

Internet 64

Internet Internet Education InfoSec 64

Security Boulevard

NOVEMBER 24, 2021

The post DEFCON 29 IoT Village – Juneau’s ‘Strategic Trust And Deception In The Internet Of Things’ appeared first on Security Boulevard. Our thanks to DEFCON for publishing their outstanding DEF CON 29 IoT Village videos on the Conferences’ YouTube channel.

IoT 64

IoT Internet Internet Education 64

eSecurity Planet

APRIL 23, 2021

Since 2017, host Jack Rhysider has investigated some of the most noteworthy stories related to the darkside of the internet, specifically hacking, data breaches, and cybercrime. It requires some baseline industry knowledge, but it’s a great way to stay on top of InfoSec current events. Malicious Life. 5 stars, 670 ratings.

Cybersecurity 144

Cybersecurity InfoSec Cybercrime Hacking 144

The Last Watchdog

JANUARY 22, 2024

As part of ChargePoint’s commitment to customer security, the company encourages researchers to collaborate with ChargePoint InfoSec to identify potential new vulnerabilities in its products or environment. For more information, please email the InfoSec team at: infosec@chargepoint.com.

IoT 100

IoT InfoSec Firmware Manufacturing 100

SecureWorld News

JANUARY 9, 2023

chik-fil-a.com #cybersecurity #infosec @ChickfilA pic.twitter.com/kWSBpvQCNt — Dominic Alvieri (@AlvieriD). In the last week or so, several customers took to the internet to share their story of what happened to their CFA account. This has not been handled well. January 6, 2023.

Accountability 98

Accountability InfoSec Media Passwords 98

Threatpost

JULY 8, 2021

Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.

Accountability 81

Accountability Internet Internet InfoSec 81

Security Affairs

JULY 28, 2020

Luca is working as Principal Offensive Security Engineer and in his spare time is involved in InfoSec where the main fields of research are: Radio Networks, Hardware Reverse Engineering, Hardware Hacking, Internet of Things and Physical Security. About the author: Luca Bongiorni.

IoT 145

IoT Hacking Firmware Advertising 145

Security Affairs

APRIL 20, 2021

He is also actively involved in InfoSec where his main fields of research are: Radio Networks, Reverse Engineering, Hardware Hacking, Internet of Things, and Physical Security. The expert published a video PoC of the attack: Author Biography: Luca Bongiorni is working as Head of Offensive Security.

Hacking 114

Hacking InfoSec Engineering Internet 114