The Last Watchdog

AUGUST 29, 2023

Related: Pushing the fly-by-wire envelope This is especially true because systems are more interconnected and use more complex commercial software than ever before, meaning a vulnerability in one system could lead to a malicious actor gaining access to more important systems. Risks delineated Still, there have been many other incidents since.

Software 264

Software Risk Artificial Intelligence Engineering 264

Schneier on Security

JULY 25, 2024

As we experienced last week, a single problem in a small piece of software can take large swaths of the internet and global economy offline. In information technology, brittleness also results from the fact that hundreds of companies, none of which you;ve heard of, each perform a small but essential role in keeping the internet running.

Marketing 324

Marketing Software Internet Internet 324

Krebs on Security

APRIL 20, 2023

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. “This is the first time Mandiant has seen a software supply chain attack lead to another software supply chain attack,” reads the April 20 Mandiant report. Microsoft Corp.

Malware 322

Malware Software Technology Accountability 322

Schneier on Security

OCTOBER 17, 2022

Suspected members of a European car-theft ring have been arrested : The criminals targeted vehicles with keyless entry and start systems, exploiting the technology to get into the car and drive away. Among those arrested feature the software developers, its resellers and the car thieves who used this tool to steal vehicles.

Hacking 353

Hacking Manufacturing Marketing Software 353

The Last Watchdog

AUGUST 19, 2024

President Biden’s call for the mainstreaming of Software Bill of Materials (SBOMs) is a major step forward. He drew a vivid parallel between food safety and software security. The post Black Hat Fireside Chat: Why grasping the context of code is a recipe for keeping software secure first appeared on The Last Watchdog.

Software 173

Software Internet Internet Accountability 173

Schneier on Security

MARCH 1, 2021

Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piece of widely used network management software made by a company called SolarWinds. For a while, in 2019, the update server’s password for SolarWinds’s network management software was reported to be “solarwinds123.”

Risk 363

Risk Government Marketing Software 363

Schneier on Security

MARCH 9, 2021

…26% of companies Positive Technologies tested were vulnerable to WannaCry, which was a threat years ago, and some even vulnerable to Heartbleed. “The most frequent vulnerabilities detected during automated assessment date back to 2013­2017, which indicates a lack of recent software updates,” the reported stated.

Technology 360

Technology Software Malware 360

Schneier on Security

NOVEMBER 15, 2022

The app also provides Egypt’s Ministry of Communications and Information Technology, which created it, with other so-called backdoor privileges, or the ability to scan people’s devices. It can also track people’s locations via smartphone’s built-in GPS and Wi-Fi technologies, according to two of the analysts.

Spyware 327

Spyware Technology Encryption Government 327

Schneier on Security

MAY 12, 2023

as a broad set of technologies being marketed to companies to help them cut their costs, the question becomes: how do we keep those technologies from working as “capital’s willing executioners”? Yet such software could easily still cause as much harm as McKinsey has. If you think of A.I. Alternatively, if you imagine A.I.

Risk 299

Risk Software Technology Marketing 299

The Last Watchdog

JULY 26, 2023

He brings more than three decades of investment, operational and entrepreneurial experience in cybersecurity, enterprise software and data analytics to the Board. The company has the vision, technology and expertise to capture a lion’s share of this new market category.”

Software 188

Software Digital transformation Marketing Artificial Intelligence 188

Krebs on Security

OCTOBER 26, 2020

For the second time in as many years, Google is working to fix a weakness in its Widevine digital rights management (DRM) technology used by online streaming sites like Disney , Hulu and Netflix to prevent their content from being pirated. ” Google called the weakness a circumvention that would be fixed. .”

Software 295

Software Technology Mobile Media 295

Schneier on Security

FEBRUARY 2, 2023

It’s a controlled setting for what computer hackers do in real life: finding and fixing vulnerabilities in their own systems and exploiting them in others’ It’s the software vulnerability lifecycle. The competition occurred in a specially designed test environment filled with custom software that had never been analyzed or tested.

Artificial Intelligence 317

Artificial Intelligence Technology Software Hacking 317

Schneier on Security

JULY 12, 2024

Grace Hopper titled “Future Possibilities: Data, Hardware, Software, and People.” With digital obsolescence threatening many early technological formats, the dilemma surrounding Admiral Hopper’s lecture underscores the critical need for and challenge of digital preservation. So they won’t do anything.

Technology 295

Technology Software 295

Schneier on Security

AUGUST 29, 2023

The facial recognition technology is used by the Maine Bureau of Motor Vehicles to ensure no one obtains multiple credentials or credentials under someone else’s name, said Emily Cook, spokesperson for the secretary of state’s office.

Identity Theft 295

Identity Theft Technology Software 295

The Last Watchdog

JULY 25, 2024

Related: Microsoft blames outage on EU A flawed update to CrowdStrike’s Falcon security software caused millions of computers running Microsoft Windows to display the infamous blue screen of death. In the latter, a threat actor purposefully identified and exploited a soft spot in SolarWinds’ automated software update service.

Technology 317

Technology Ransomware Software Cyber Attacks 317

Krebs on Security

DECEMBER 14, 2020

In a security advisory , Austin, Texas based SolarWinds acknowledged its systems “experienced a highly sophisticated, manual supply chain attack on SolarWinds Orion Platform software builds for versions 2019.4 HF 5 through 2020.2.1, released between March 2020 and June 2020.” ”

Hacking 364

Hacking Antivirus Software Accountability 364

The Last Watchdog

AUGUST 12, 2024

This is all part of Generative AI and Large Language Models igniting the next massive technological disruption globally. Highlights of what I learned: Coding level The continual monitoring and hardening of business software as it is being rapidly developed, tested and deployed in the field has become a foundational best practice.

Software 290

Software Technology Mobile Cybersecurity 290

Schneier on Security

MAY 24, 2024

The last ten years have seen a global market emerge for ready-made software that lets governments surveil their citizens and foreign adversaries alike and to do so more easily than when such work required tradecraft. The last ten years have also been marked by stark failures to control spyware and its precursors and components.

Marketing 301

Marketing Spyware Surveillance Government 301

Krebs on Security

JANUARY 7, 2021

The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the Administrative Office (AO) of the U.S.

Computers and Electronics 363

Computers and Electronics Software Engineering Accountability 363

Joseph Steinberg

APRIL 25, 2023

It is hardly a secret that, for nearly 30 years, I have been warning about the danger posed to US national security by the simultaneous combination of our growing reliance on Chinese technology, and our general indifference to China’s huge technological “leaps forward” in the realm of cybersecurity.

Cybersecurity 227

Cybersecurity Artificial Intelligence Software Manufacturing 227

Tech Republic Security

JUNE 16, 2023

Threat intelligence firm Abnormal Software is seeing cybercriminals using generative AI to go phishing; the same technology is part of the defense. The post AI vs AI: Next front in phishing wars appeared first on TechRepublic.

Phishing 217

Phishing Technology Software Artificial Intelligence 217

Schneier on Security

DECEMBER 15, 2022

Security researchers found a software bug in the KmsdBot cryptomining botnet: With no error-checking built in, sending KmsdBot a malformed command­—like its controllers did one day while Akamai was watching­—created a panic crash with an “index out of range” error.

Technology 247

Technology Software 247

Schneier on Security

JANUARY 10, 2023

…within a few weeks of ChatGPT going live, participants in cybercrime forums—­some with little or no coding experience­—were using it to write software and emails that could be used for espionage, ransomware, malicious spam, and other malicious tasks. And the technology will only get better.

Malware 65

Malware Encryption Cybercrime Passwords 65

The Last Watchdog

MAY 31, 2022

Microsoft’s Patch Tuesday speaks to the never-ending flow of freshly discovered software flaws — and the software giant’s best efforts ease the burden of mitigating them. This results from companies chasing after agile software development and cloud-centric innovations, above all else.

Risk 235

Risk Digital transformation Software Technology 235

Krebs on Security

APRIL 15, 2024

.” Using those hard-coded credentials, Brown found an attacker could then connect to an application programming interface (API) that Chirp uses which is managed by smart lock vendor August.com , and use that enumerate and remotely lock or unlock any door in any building that uses the technology.

Software 325

Software Mobile Marketing Engineering 325

Krebs on Security

FEBRUARY 28, 2024

Doug then messaged the Mr. Lee account on Telegram, who said there was some kind of technology issue with the video platform, and that their IT people suggested using a different meeting link. MacOS computers include X-Protect , Apple’s built-in antivirus technology. “We are actively working on fixing these problems. .”

Malware 309

Malware Cryptocurrency Software Phishing 309

The Last Watchdog

MAY 24, 2022

Passwordless technology is certainly ready for prime time; innovative solutions from suppliers like Cisco’s Duo, Hypr, OneLogin and Veridium have been steadily gaining traction in corporate settings for the past few years. This was accomplished by using web cameras at each terminal tied into Veridium facial recognition software.

Authentication 342

Authentication Passwords Banking Digital transformation 342

Troy Hunt

NOVEMBER 22, 2019

i speak at conferences around the world and run workshops on how to build more secure software within organisations. i speak at conferences around the world and run workshops on how to build more secure software within organisations. i'm also the creator of the data breach aggregation service known as "have i been pwned".

Data breaches 360

Data breaches Technology Software Accountability 360

Krebs on Security

SEPTEMBER 8, 2021

This year has been a tough one for Windows users and so-called “zero day” threats, which refers to vulnerabilities that are not patched by current versions of the software in question, and are being actively exploited to break into vulnerable computers.

Software 355

Software Engineering Internet Internet 355

Schneier on Security

NOVEMBER 11, 2020

But asking students to install software to monitor them during a test raises a host of fairness issues, experts say. “There’s a big gulf between what this technology promises, and what it actually does on the ground,” said Audrey Watters, a researcher on the edtech industry who runs the website Hack Education.

Artificial Intelligence 324

Artificial Intelligence Education Technology Hacking 324

Joseph Steinberg

JULY 23, 2024

On July 19th, 2024, a faulty software update issued by the cybersecurity firm, CrowdStrike, took down over 8.5 Columbia’s panel of security experts and Columbia University Technology Management faculty will include Cristina Dolan Christy Fernandez-Cull Joseph Steinberg …and will be moderated by Program Director, Alexis Wichowski.

Artificial Intelligence 284

Artificial Intelligence Cybersecurity Government Technology 284

The Last Watchdog

MAY 17, 2022

The good news is that a long-overdue transition to a new attack surface and security paradigm is well underway, one built on a fresh set of cloud-native security frameworks and buttressed by software-defined security technologies.

Technology 235

Technology Software Cybersecurity Internet 235

Schneier on Security

JUNE 8, 2021

Military software is unlikely to be any more secure than commercial software. And since military software is vulnerable to the same cyberattacks as commercial software, military supply chains have many of the same risks. This is just one of many risks to our normal civilian computer supply chains. weapons systems.

Software 363

Software Cybersecurity Backups Manufacturing 363

The Last Watchdog

DECEMBER 20, 2021

This is an important step, but it is also up to organizations to ensure they have the right technology and security protocols to defend themselves. To effectively prevent spearphishing, organizations should look to intelligent technology. water and wastewater systems.

Malware 256

Malware Phishing Technology Ransomware 256