The Security Ledger

MARCH 27, 2024

In this episode of The Security Ledger Podcast (#257) Paul speaks with Dennis Kengo Oka, a senior principal automotive security strategist at the firm Synopsys about the growing cyber risks to automobiles as connected vehicle features proliferate in the absence of strong cybersecurity protections. Read the whole entry. »

Security 52

Security Cybersecurity Risk IT 52

Troy Hunt

AUGUST 8, 2018

Rounding out a recent spate of new Pluralsight courses is one final one: Modern Browser Security Reports. In fact, we recorded this course in London only a few days after that pic was taken (although admittedly in a less well-dressed fashion). I hope you enjoy our course, Modern Browser Security Reports is now live!

Security 44

Security IT 44

IT Governance

JUNE 6, 2019

In this blog, we use real-life examples to demonstrate five clues to help you spot phishing scams. For example, emails from Google will read ‘@google.com’. Take this example of a scam mimicking PayPal: Image: WeLiveSecurity. Take this example of a scam imitating Windows: Image: KnowBe4. Not even Google.

Phishing 111

Phishing IT Communications Access 111

eSecurity Planet

JANUARY 30, 2023

Two venture investors have launched an index to track the most popular open source security projects. Chenxi Wang of Rain Capital and Andrew Smyth of Atlantic Bridge unveiled the Open Source Security Index last month. Cloud computing is now mainstream with security operations, such as Cilium, Trivy, Calico, and Sysdig.

Security 111

Security Cloud IT Cybersecurity 111

Troy Hunt

OCTOBER 17, 2017

It's another Pluralsight course! It's another "Play by Play" course which means it's Lars and I sitting there having a conversation like this: We choose to talk about IoT because frankly, it's fascinating. And of course, they're just a tiny snippet of the broader set of things we're seeing go wrong with IoT.

IoT 53

IoT Risk Passwords Cloud 53

eSecurity Planet

JUNE 24, 2022

Cybersecurity and Infrastructure Security Agency (CISA) announced a joint Cybersecurity Information Sheet (CIS) between cybersecurity authorities from the U.S., See the Top Active Directory Security Tools. Of course, it’s not the only attack possible. How Users and Admins Can Secure PowerShell.

Cybersecurity 124

Cybersecurity Security Phishing Authentication 124

IT Governance

MAY 27, 2021

For all the talk of criminal hacking, ransomware infections and the technologies to prevent them, the key to protecting your organisation is cyber security awareness training. The importance of cyber security staff awareness. Cyber security awareness best practices. Consider how your employees work.

Security awareness 119

Security awareness IT Security GDPR 119

eSecurity Planet

FEBRUARY 23, 2022

How can an industrial recycler safely secure its $400,000 hard drive recertification rack with control software that only runs on Windows XP? The devices themselves can’t be secured, but that doesn’t mean we can’t use basic IT techniques to reduce our security risks. Also read: Top IoT Security Solutions for 2022.

Risk 122

Risk Security IoT Communications 122

IT Governance

NOVEMBER 24, 2021

But as is often the case with technological solutions, the benefits of convenience comes with security risks. In this blog, we look at the top five Cloud security challenges that organisations face, and provide tips on how to overcome them. Data breaches.

Cloud 133

Cloud Risk Security Data breaches 133

IBM Big Data Hub

JULY 12, 2023

For example, how you react to a disruptive technology or cope with a sudden change in the markets can be the difference between success and failure. Here are some important definitions, best practices and strong examples to help you build contingency plans for whatever your business faces. What is a contingency plan?

Risk 40

Risk Artificial Intelligence Data breaches Marketing 40

Schneier on Security

APRIL 27, 2021

The one example he gives is that it uses FFmpeg DLLs from 2012, and have not been patched with the 100+ security updates since then.). That malicious file could, for example, insert fabricated evidence or subtly alter the evidence it copies from a phone. According to Moxie, the software is riddled with vulnerabilities.

Security 113

Security IT 113

Troy Hunt

MAY 16, 2018

Just a tad over 5 years ago, I released my first ever Pluralsight course - OWASP Top 10 Web Application Security Risks for ASP.NET. Developers have a huge appetite for OWASP content and I'm very happy to now give them even more Top 10 goodness in the course I'm announcing here - Play by Play: OWASP Top 10 2017.

Libraries 48

Libraries Risk IT Security 48

IT Governance

JUNE 8, 2020

Organisations often fall into the trap of lumping cyber security together with their other IT functions. Although they are obviously connected – anti-malware, firewalls and a host of other technologies are a core part of cyber security – there is a lot more to it. What they need is a wider understanding of cyber security.

IT 96

IT Security Phishing Passwords 96

IT Governance

JULY 6, 2022

Research presented at the USENIX SOUPS security conference in 2020 supports the theory, although it was slightly more optimistic. It found that employees will recall cyber security staff awareness guidance for four months before their knowledge begins to fade. Ideally, examples should be used to make the lessons clearer.

Information Security 105

Information Security Data breaches Education Phishing 105

IT Governance

OCTOBER 27, 2020

With the COVID-19 pandemic forcing office workers around the world to work from home, organisations have faced a cyber security challenge like no other. Cyber security jobs provide a stable career. Not only is cyber security more important to business than ever but there is also a huge demand for qualified staff.

Security 98

Security Information Security Government IT 98

IT Governance

MAY 18, 2020

Almost half of organisations have suffered a cyber security incident as a result of the sudden shift to remote working, a new study has found. Most people agree that the lockdown is necessary to limit the spread of COVID-19, but it has also introduced security risks that have caught organisations off guard.

Security 98

Security Phishing Risk Cybersecurity 98

IT Governance

AUGUST 31, 2018

Another week, another example of an email using the Cc (carbon copy) field instead of the Bcc (blind carbon copy) field. While this incident was undoubtedly caused by human error, it is a reminder that an organisation’s employees can pose a significant threat to data security. This time, it was West Ham United Football Club. .

Data breaches 40

Data breaches Education Risk Communications 40

The Last Watchdog

NOVEMBER 30, 2021

Yet, in bringing us here, APIs have also spawned a vast new tier of security holes. Yet, API security risks haven’t gotten the attention they deserve. It has become clear that API security needs to be prioritized as companies strive to mitigate modern-day cyber exposures. Thus security-proofing APIs has become a huge challenge.

IT 226

IT Security Big data Digital transformation 226

IT Governance

OCTOBER 31, 2018

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. If you want to keep your organisation secure, you need your employees to know what they’re doing. Meet compliance requirements.

Security 104

Security GDPR Information Security Data breaches 104

IT Governance

OCTOBER 31, 2018

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. If you want to keep your organisation secure, you need your employees to know what they’re doing. Meet compliance requirements.

Security 104

Security GDPR Information Security Data breaches 104

The Last Watchdog

MAY 13, 2021

In this heady environment, the idea of attempting to infuse a dollop of security into new software products — from inception — seems almost quaint. History of product security. As a nod to security, nominal static analysis and maybe a bit of penetration testing gets done just prior to meeting a tight deployment deadline.

Security 140

Security Digital transformation Cybersecurity Compliance 140

IT Governance

OCTOBER 26, 2021

This Sunday is both Halloween and the end of National Cyber Security Awareness Month – and what better way to mark the occasion than with some cyber security horror stories? But when it comes to cyber security, you can never be as sure that the person behind the mask is as benign. Trick or treat. Hack-o-lantern.

Phishing 145

Phishing Security Ransomware Security awareness 145

Thales Cloud Protection & Licensing

JULY 15, 2021

Key Developments in IoT Security. The rush to market for consumers to enjoy the modern conveniences offered by these devices shocked the security community. Security experts were concerned that these devices were built with no security in mind. Has the security of these devices gotten better, or remained the same?

IoT 100

IoT Security Data Privacy Encryption 100

IT Governance

SEPTEMBER 15, 2021

A UK government report published last year found that 48% of organisations lacked the expertise to complete routine cyber security practices. The report also found that 30% of organisations had skills gaps in more advanced areas, such as penetration testing, forensic analysis and security architecture.

Security 122

Security Insurance Education Government 122

Krebs on Security

AUGUST 19, 2021

Criminal hackers will try almost anything to get inside a profitable enterprise and secure a million-dollar payday from a ransomware infection. Image: Abnormal Security. Image: Abnormal Security. For example, the Lockbit 2.0 “Please don’t harm Sociogram’s reputation,” Medayedupin pleaded.

Ransomware 354

Ransomware Access Phishing Encryption 354

Schneier on Security

MARCH 1, 2021

The hack gave the attackers access to the computer networks of some 18,000 of SolarWinds’s customers, including US government agencies such as the Homeland Security Department and State Department, American nuclear research labs, government contractors, IT companies and nongovernmental agencies around the world. Who is at fault?

Risk 142

Risk Security Cybersecurity Marketing 142

CILIP

DECEMBER 9, 2019

First Cyber Defence & Information Assurance courses to receive CILIP accreditation. Independent assessor, Ann Hindson, praised the interesting mixture of delivery methods, teaching materials and assignments which allow students to understand theories and then apply them to real world examples in a very fast changing subject area.

Military 40

Military Education Libraries Government 40

Krebs on Security

OCTOBER 12, 2018

alongside Tony Sager , senior vice president and chief evangelist at the Center for Internet Security and a former bug hunter at the U.S. National Security Agency. Tony Sager, senior vice president and chief evangelist at the Center for Internet Security. BK: Right, the Trusted Foundry program I guess is a good example.

Security 201

Security Computer and Electronics IoT Cloud 201

eSecurity Planet

AUGUST 25, 2021

Amazon Web Services has unveiled a revamped competency for managed security service providers (MSSPs) that is intended to make it simpler for end customers to identify AWS partners that have the most security services expertise. Customers are struggling with cloud security not because the underlying platforms are insecure.

Cloud 84

Cloud Security Sales Compliance 84

Security Affairs

AUGUST 5, 2020

ZDNet has reported in exclusive that a list of plaintext usernames and passwords for 900 Pulse Secure VPN enterprise servers, along with IP addresses, has been shared on a Russian-speaking hacker forum. According to Bank Security , all the Pulse Secure VPN servers included in the list were vulnerable to the CVE-2019-11510 flaw.

Passwords 128

Passwords Security Ransomware Military 128

The Last Watchdog

MARCH 29, 2021

Having said that, here are some examples of IT careers you can learn online through free courses: Security specialist. A wide range of companies, in just about every field, are adding computer security specialists. Many universities offer massive open online courses (MOOC) in cybersecurity. IT specialist/manager.

Cybersecurity 223

Cybersecurity IT Education Sales 223

IT Governance

FEBRUARY 2, 2024

How attackers try to remain undetected and/or mask their actions Vanessa Horton holds a degree in computer forensics, as well as a number of cyber security and forensics qualifications. Vanessa is now part of GRCI Law’s cyber incident response team, helping clients with their cyber security requirements. Vanessa kindly agreed.

Encryption 82

Encryption Compliance Phishing Risk 82

Krebs on Security

NOVEMBER 23, 2018

So here’s a quick refresher course on how to make it through the next few weeks without getting snookered online. For example, KrebsOnSecurity got taken for hundreds of dollars just last year after trying to buy a pricey Sonos speaker from an established Amazon merchant who was selling it new and unboxed at huge discount.

Security 269

Security Phishing Passwords Sales 269

Thales Cloud Protection & Licensing

MARCH 8, 2023

Your Cannot Secure Your Data by Network Penetration Testing divya Thu, 03/09/2023 - 06:05 Organisations continue to experience serious data breaches, often causing harm to their customers, society, and their hard-earned reputations. You would of course lock it in a very secure safe.

Security 71

Security Cybersecurity Data breaches Access 71

IT Governance

SEPTEMBER 19, 2018

Organisations usually spend most of their security budget on technologies intended to keep cyber criminals out of their systems, but this overlooks their biggest vulnerability: human error. And yet organisations do comparatively little to secure these weaknesses by way of staff awareness training. Barriers to training.

Security 92

Security Security awareness Information Security Data Privacy 92

CILIP

JULY 8, 2019

First Museum Studies courses receive CILIP accreditation. CILIP is delighted to announce that museum courses at two major universities have become the first to receive CILIP accreditation, recognising that their solid preparation for professional practice and a suitable base for anybody entering the heritage profession.

Libraries 40

Libraries Archiving Data science Education 40

Data Protection Report

OCTOBER 24, 2022

In the course of their privacy and cybersecurity due diligence, buyers should consider the following when assessing the risks associated with purchasing a company: First, how robust are the company’s data security and information technology (IT) practices? Additional measures may also be required depending on the context.

Privacy 121

Privacy Cybersecurity Risk Compliance 121