The Last Watchdog

APRIL 10, 2023

Instilling a culture of cyber security at your organization requires your people to maintain a high level of knowledge and awareness about cyber security risks—and that takes an effective, impactful, and ongoing security awareness program. First and foremost, your security awareness program’s content must be engaging.

Security awareness 212

Security awareness Risk Security Information Security 212

Adam Shostack

JANUARY 10, 2019

My Linkedin Learning course is getting really strong positive feedback. They even “let” you edit your own videos. They even “let” you edit your own videos. From conceptualizing the course and the audience, through final production, it’s been a blast. Just not in a good way.

IT 75

IT Security 75

The Security Ledger

MARCH 27, 2024

In this episode of The Security Ledger Podcast (#257) Paul speaks with Dennis Kengo Oka, a senior principal automotive security strategist at the firm Synopsys about the growing cyber risks to automobiles as connected vehicle features proliferate in the absence of strong cybersecurity protections. Read the whole entry. »

Security 52

Security Cybersecurity Risk IT 52

Security Affairs

JULY 28, 2019

Playing a video on Android devices could be a dangerous operation due to a critical CVE-2019-2107 RCE flaw in Android OS between version 7.0 Playing a specially-crafted video on devices with the Android’s native video player application could allow attackers to compromise them due to a dangerous critical remote code execution flaw.

Manufacturing 101

Manufacturing Security IT Information Security 101

The Last Watchdog

NOVEMBER 3, 2021

While I no longer concern myself with seeking professional recognition for doing this, it’s, of course, always terrific to receive peer validation that we’re steering a good course. The recognition comes from Cyber Security Hub, a website sponsored by IQPC Digital. Acohido is a Pulitzer-winning journalist and web producer.

Cybersecurity 278

Cybersecurity Privacy Data breaches Ransomware 278

Troy Hunt

AUGUST 8, 2018

Rounding out a recent spate of new Pluralsight courses is one final one: Modern Browser Security Reports. In fact, we recorded this course in London only a few days after that pic was taken (although admittedly in a less well-dressed fashion). I hope you enjoy our course, Modern Browser Security Reports is now live!

Security 44

Security IT 44

Troy Hunt

MARCH 15, 2020

Of course it's virtual because let's face it, nobody is going anywhere at the moment. I want to talk about 3 upcoming events which Scott Helme and I are going to be running our Hack Yourself First workshop at starting with this one: NDC Security Australia, 26-27 March, AU$800 This is an extra special event that we've only just decided to run.

Mining 102

Mining IT Communications Security 102

Hunton Privacy

JULY 26, 2019

The European Data Protection Board (the “EDPB”) recently adopted its Guidelines 3/2019 on processing of personal data through video devices (the “Guidelines”). Although the Guidelines provide examples of data processing for video surveillance, these examples are not exhaustive.

GDPR 57

GDPR Personal data Privacy Compliance 57

IT Governance

MAY 15, 2024

Physical access control, physical security monitoring, CCTV, and more When we hear the term ‘information security’ – or, for that matter, ‘ISO 27001’ – our thoughts usually turn straight to cyber security. However, physical security is also an important aspect of information and data security.

Security 52

Security Information Security Access Cloud 52

WIRED Threat Level

JUNE 17, 2020

The video conferencing platform had previously said that only paid accounts would get the feature—a move privacy advocates roundly decried.

Encryption 99

Encryption Privacy Security 99

IT Governance

JUNE 8, 2020

Organisations often fall into the trap of lumping cyber security together with their other IT functions. Although they are obviously connected – anti-malware, firewalls and a host of other technologies are a core part of cyber security – there is a lot more to it. What they need is a wider understanding of cyber security.

IT 96

IT Security Phishing Passwords 96

Troy Hunt

MAY 16, 2018

Just a tad over 5 years ago, I released my first ever Pluralsight course - OWASP Top 10 Web Application Security Risks for ASP.NET. Developers have a huge appetite for OWASP content and I'm very happy to now give them even more Top 10 goodness in the course I'm announcing here - Play by Play: OWASP Top 10 2017.

Libraries 48

Libraries Risk IT Security 48

The Last Watchdog

AUGUST 17, 2018

The technology that corrals malicious software circulating through desktop PCs, laptops and mobile devices has evolved into a multi-layered security technology referred to as ‘endpoint security.’. What’s more, they’ve all successfully grown into multi-layered full-service endpoint security suppliers. keep intensifying.

Digital transformation 174

Digital transformation Security Cloud Compliance 174

The Last Watchdog

MARCH 29, 2021

Having said that, here are some examples of IT careers you can learn online through free courses: Security specialist. A wide range of companies, in just about every field, are adding computer security specialists. Many universities offer massive open online courses (MOOC) in cybersecurity. IT specialist/manager.

Cybersecurity 240

Cybersecurity IT Education Sales 240

Security Affairs

NOVEMBER 7, 2019

Bitdefender discovered a high-severity security flaw in Amazon’s Ring Video Doorbell Pro devices that could allow nearby attackers to steal WiFi password. Amazon’s Ring Video Doorbell is a smart wireless home security doorbell camera that allows users to use to remotely control their doorbell.

Passwords 48

Passwords IoT Authentication Communications 48

Troy Hunt

MARCH 9, 2024

I'm reminded of the old "fast, good and cheap - pick 2" saying, but there's a lot more nuance to it than that, of course. References Sponsored by: Kolide ensures that if a device isn't secure, it can't access your apps. Or geo-replicate. Or do ad hoc queries and do on and so forth. Watch the demo today!

Access 81

Access Government IT Security 81

Schneier on Security

MARCH 31, 2024

Of course it was before 2008, when we created the Security and Human Behavior workshop. It was well before 2001, when we created the Workshop on Economics and Information Security. He was a cryptographer and security engineer, but also very much a generalist. Also note his fifteen-lecture video series on that same page.

Paper 115

Paper Encryption Information Security Cybersecurity 115

Schneier on Security

APRIL 3, 2020

Over the past few weeks, Zoom's use has exploded since it became the video conferencing platform of choice in today's COVID-19 world. (My Over that same period, the company has been exposed for having both lousy privacy and lousy security. Now security: Zoom's security is at best sloppy, and malicious at worst.

Privacy 145

Privacy Security Encryption Personal data 145

The Last Watchdog

JUNE 22, 2020

Here’s what all parents and school officials need to spend the summer thinking about and planning for: Zoom-bombing lessons “Zoom-bombing” entered our lexicon soon after schools began their first attempts at using the suddenly indispensable video conferencing tool to conduct classes online.

Security 276

Security Passwords Privacy Access 276

Krebs on Security

OCTOBER 2, 2023

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. j/5551112222/pwd=jdjsklskldklsdksdklsdkll Using your PMI to set up new meetings is convenient, but of course convenience often comes at the expense of security.

Encryption 257

Encryption Phishing Passwords Access 257

Schneier on Security

AUGUST 15, 2023

Zoom execs swear the company won’t actually train its AI on your video calls without permission, even though the Terms of Service still say it can. Of course, these are Terms of Service. On Monday, the company said in a blog post that there’s no need to worry about that. They can change at any time.

IT 96

IT Artificial Intelligence Privacy 96

Krebs on Security

APRIL 11, 2022

A security researcher recently shared with KrebsOnSecurity an email he received from someone who said they foolishly invested an entire bitcoin (currently worth ~USD $43,000) at a website called ark-x2[.]org, “An overlay on the video pointed to subscribing to the event at their website. ” Ark-x2[.]org net (pictured below).

Blockchain 201

Blockchain IT Marketing Security 201

Schneier on Security

OCTOBER 1, 2020

Researchers can detect deep fakes because they don’t convincingly mimic human blood circulation in the face: In particular, video of a person’s face contains subtle shifts in color that result from pulses in blood circulation. Of course, this is an arms race.

Paper 123

Paper IT 123

IT Governance

APRIL 29, 2020

You can’t argue with that if you think our health should be our top priority, but keeping the status quo will of course continue to affect our jobs, our organisational security and our wellbeing. But that’s not to suggest that the government’s cyber security agency hadn’t done anything about the threat until now. Phishing scams.

Security 84

Security Phishing Communications Government 84

The Security Ledger

OCTOBER 4, 2023

Tanya Janca of the group We Hack Purple, talks with Security Ledger host Paul Roberts about the biggest security mistakes that DevSecOps teams make, and application development’s “tragedy of the commons,” as more and more development teams lean on open source code. Read the whole entry. » » Click the icon below to listen.

Education 97

Education IoT Security IT 97

IT Governance

FEBRUARY 23, 2023

2FA is considered an essential part of online security, but Twitter announced last week that text message authentication would soon be available only to users who have paid for a premium subscription. And, of course, there is Twitter Blue, an $8 a month (£8.40 It’ll just take a few minutes to remove it.

Authentication 104

Authentication Security Passwords Risk 104

Troy Hunt

MAY 17, 2018

It's a new Pluralsight course! Yes, I know I said that yesterday too , but this is a new new Pluralsight course and it's the second part in our series on Creating a Security-centric Culture. This course looks at how shadow IT is changing, what it means in a cloud era and what practices we can apply to address it.

IT 48

IT Cloud Access Risk 48

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

Security Affairs

MAY 20, 2024

“Over the course of Insikt Group’s analysis of AMOS, twelve domains were discovered impersonating legitimate macOS applications such as CleanShot X, 1Password, and Bartender. One of these malicious sites masqueraded as Rainway, a now-defunct remote desktop video game streaming service. com, the malicious domain is rainway[.]cloud.

Cloud 93

Cloud Encryption Communications Information Security 93

HL Chronicle of Data Protection

NOVEMBER 12, 2018

litigant’s right to obtain discovery, including video-taped depositions. 19, 2018), a federal magistrate denied an EU citizen’s motion for protective order, holding that the deponent could not rely on EU privacy law to withhold consent to a duly-noted video-recorded deposition scheduled to take place in London. In d’Amico Dry d.a.c.

Privacy 40

Privacy GDPR IT Security 40

Lenny Zeltser

APRIL 19, 2020

You can now take my malware analysis and cybersecurity writing courses online in two formats at SANS Institute, depending on how you prefer to learn: OnDemand: Self-paced, recorded training with four months of access to course materials and labs. Malware Analysis. Cybersecurity Writing.

Cybersecurity 106

Cybersecurity Communications Access Security 106

Krebs on Security

FEBRUARY 22, 2022

In lieu of providing biometric data, taxpayers can now opt for a live video interview with ID.me , the privately-held Virginia company that runs the agency’s identity proofing system. Internal Revenue Service (IRS) said Monday that taxpayers are no longer required to provide facial scans to create an account online at irs.gov.

Authentication 219

Authentication Access Personal data Marketing 219

IT Governance

MAY 27, 2020

Of course, it won’t simply be a case of returning to business as usual. According to cyber security company Darktrace , the proportion of malicious email traffic has increased from 12% at the start of the lockdown to more than 60%. Make sure you don’t have any sensitive information in the background when you make video calls.

Security 98

Security Phishing Data Privacy Access 98

Schneier on Security

SEPTEMBER 20, 2018

Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. This particular vulnerability is particularly interesting because it's the result of a security mistake in the design process. This video shows a demonstration of ExpressVote all-in-one touchscreens purchased by Johnson County, Kansas.

Computer and Electronics 93

Computer and Electronics Paper Security Privacy 93

Krebs on Security

SEPTEMBER 9, 2022

states now have designated safe trading stations — mostly at local police departments — which ensure that all transactions are handled in plain view of both the authorities and security cameras. Nearly all U.S. And it appears most states now have them in at least some major cities.

Sales 297

Sales Paper Risk IT 297

Security Affairs

APRIL 20, 2021

The popular cyber security expert Luca Bongiorni demonstrated how to hack an X-Ray Machine using his WHIDelite tool. Very high of course. This crap is absolutely NOT secure! Here a quick video review of the whole replay attack: [link]. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Security 105

Security IT Information Security 105

Lenny Zeltser

JULY 1, 2020

I’m happy to share what I’ve learned over the years about writing effective threat reports in the following 36-minute video. These tips draw upon the advice I share in my Cybersecurity Writing course , which you can take online from SANS Institute. How might you address the needs of multiple audiences?

Phishing 145

Phishing Cybersecurity IT Information Security 145