Adam Shostack

JANUARY 10, 2019

My Linkedin Learning course is getting really strong positive feedback. They even “let” you edit your own videos. They even “let” you edit your own videos. From conceptualizing the course and the audience, through final production, it’s been a blast. Just not in a good way.

IT 75

IT Security 75

Security Affairs

JULY 28, 2019

Playing a video on Android devices could be a dangerous operation due to a critical CVE-2019-2107 RCE flaw in Android OS between version 7.0 Playing a specially-crafted video on devices with the Android’s native video player application could allow attackers to compromise them due to a dangerous critical remote code execution flaw.

Manufacturing 107

Manufacturing Security IT Information Security 107

The Last Watchdog

NOVEMBER 3, 2021

While I no longer concern myself with seeking professional recognition for doing this, it’s, of course, always terrific to receive peer validation that we’re steering a good course. The recognition comes from Cyber Security Hub, a website sponsored by IQPC Digital. Acohido is a Pulitzer-winning journalist and web producer.

Cybersecurity 277

Cybersecurity Privacy Data breaches Ransomware 277

Troy Hunt

AUGUST 8, 2018

Rounding out a recent spate of new Pluralsight courses is one final one: Modern Browser Security Reports. In fact, we recorded this course in London only a few days after that pic was taken (although admittedly in a less well-dressed fashion). I hope you enjoy our course, Modern Browser Security Reports is now live!

Security 45

Security IT 45

Troy Hunt

MARCH 15, 2020

Of course it's virtual because let's face it, nobody is going anywhere at the moment. I want to talk about 3 upcoming events which Scott Helme and I are going to be running our Hack Yourself First workshop at starting with this one: NDC Security Australia, 26-27 March, AU$800 This is an extra special event that we've only just decided to run.

Mining 101

Mining IT Communications Security 101

Hunton Privacy

JULY 26, 2019

The European Data Protection Board (the “EDPB”) recently adopted its Guidelines 3/2019 on processing of personal data through video devices (the “Guidelines”). Although the Guidelines provide examples of data processing for video surveillance, these examples are not exhaustive.

GDPR 57

GDPR Personal data Privacy Compliance 57

WIRED Threat Level

JUNE 17, 2020

The video conferencing platform had previously said that only paid accounts would get the feature—a move privacy advocates roundly decried.

Encryption 99

Encryption Privacy Security 99

IT Governance

JUNE 8, 2020

Organisations often fall into the trap of lumping cyber security together with their other IT functions. Although they are obviously connected – anti-malware, firewalls and a host of other technologies are a core part of cyber security – there is a lot more to it. What they need is a wider understanding of cyber security.

IT 96

IT Security Phishing Passwords 96

Troy Hunt

MAY 16, 2018

Just a tad over 5 years ago, I released my first ever Pluralsight course - OWASP Top 10 Web Application Security Risks for ASP.NET. Developers have a huge appetite for OWASP content and I'm very happy to now give them even more Top 10 goodness in the course I'm announcing here - Play by Play: OWASP Top 10 2017.

Libraries 48

Libraries Risk IT Security 48

Security Affairs

NOVEMBER 7, 2019

Bitdefender discovered a high-severity security flaw in Amazon’s Ring Video Doorbell Pro devices that could allow nearby attackers to steal WiFi password. Amazon’s Ring Video Doorbell is a smart wireless home security doorbell camera that allows users to use to remotely control their doorbell.

Passwords 53

Passwords IoT Authentication Communications 53

Troy Hunt

MARCH 9, 2024

I'm reminded of the old "fast, good and cheap - pick 2" saying, but there's a lot more nuance to it than that, of course. References Sponsored by: Kolide ensures that if a device isn't secure, it can't access your apps. Or geo-replicate. Or do ad hoc queries and do on and so forth. Watch the demo today!

Access 81

Access Government IT Security 81

The Last Watchdog

MARCH 29, 2021

Having said that, here are some examples of IT careers you can learn online through free courses: Security specialist. A wide range of companies, in just about every field, are adding computer security specialists. Many universities offer massive open online courses (MOOC) in cybersecurity. IT specialist/manager.

Cybersecurity 223

Cybersecurity IT Education Sales 223

Schneier on Security

AUGUST 15, 2023

Zoom execs swear the company won’t actually train its AI on your video calls without permission, even though the Terms of Service still say it can. Of course, these are Terms of Service. On Monday, the company said in a blog post that there’s no need to worry about that. They can change at any time.

IT 95

IT Artificial Intelligence Privacy 95

Krebs on Security

OCTOBER 2, 2023

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. j/5551112222/pwd=jdjsklskldklsdksdklsdkll Using your PMI to set up new meetings is convenient, but of course convenience often comes at the expense of security.

Encryption 233

Encryption Phishing Passwords Access 233

The Security Ledger

OCTOBER 4, 2023

Tanya Janca of the group We Hack Purple, talks with Security Ledger host Paul Roberts about the biggest security mistakes that DevSecOps teams make, and application development’s “tragedy of the commons,” as more and more development teams lean on open source code. Read the whole entry. » » Click the icon below to listen.

Education 97

Education IoT Security IT 97

IT Governance

FEBRUARY 23, 2023

2FA is considered an essential part of online security, but Twitter announced last week that text message authentication would soon be available only to users who have paid for a premium subscription. And, of course, there is Twitter Blue, an $8 a month (£8.40 It’ll just take a few minutes to remove it.

Authentication 104

Authentication Security Passwords Risk 104

IT Governance

APRIL 29, 2020

You can’t argue with that if you think our health should be our top priority, but keeping the status quo will of course continue to affect our jobs, our organisational security and our wellbeing. But that’s not to suggest that the government’s cyber security agency hadn’t done anything about the threat until now. Phishing scams.

Security 84

Security Phishing Communications Government 84

Schneier on Security

OCTOBER 1, 2020

Researchers can detect deep fakes because they don’t convincingly mimic human blood circulation in the face: In particular, video of a person’s face contains subtle shifts in color that result from pulses in blood circulation. Of course, this is an arms race.

Paper 119

Paper IT 119

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

Troy Hunt

MAY 17, 2018

It's a new Pluralsight course! Yes, I know I said that yesterday too , but this is a new new Pluralsight course and it's the second part in our series on Creating a Security-centric Culture. This course looks at how shadow IT is changing, what it means in a cloud era and what practices we can apply to address it.

IT 48

IT Cloud Access Risk 48

Lenny Zeltser

APRIL 19, 2020

You can now take my malware analysis and cybersecurity writing courses online in two formats at SANS Institute, depending on how you prefer to learn: OnDemand: Self-paced, recorded training with four months of access to course materials and labs. Malware Analysis. Cybersecurity Writing.

Cybersecurity 106

Cybersecurity Communications Access Security 106

Security Affairs

JULY 9, 2020

Researchers from cyber-security firm ACROS Security have disclosed a zero-day vulnerability in the Windows client of the popular Zoom video conferencing platform. Researchers from cyber-security firm ACROS Security have disclosed a zero-day vulnerability in the Windows client of the video conferencing software Zoom.

Security 103

Security Privacy IT Information Security 103

Schneier on Security

SEPTEMBER 20, 2018

Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. This particular vulnerability is particularly interesting because it's the result of a security mistake in the design process. This video shows a demonstration of ExpressVote all-in-one touchscreens purchased by Johnson County, Kansas.

Computer and Electronics 91

Computer and Electronics Paper Security Privacy 91

Security Affairs

APRIL 20, 2021

The popular cyber security expert Luca Bongiorni demonstrated how to hack an X-Ray Machine using his WHIDelite tool. Very high of course. This crap is absolutely NOT secure! Here a quick video review of the whole replay attack: [link]. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Security 105

Security IT Information Security 105

Lenny Zeltser

JULY 1, 2020

I’m happy to share what I’ve learned over the years about writing effective threat reports in the following 36-minute video. These tips draw upon the advice I share in my Cybersecurity Writing course , which you can take online from SANS Institute. How might you address the needs of multiple audiences?

Phishing 145

Phishing Cybersecurity IT Information Security 145

The Security Ledger

AUGUST 30, 2018

In this interview with The Security Ledger, Amy Blackshaw of RSA talks about how the company’s Netwitness SIEM product is evolving to keep pace with a fast -evolving security market. Job 1: use machine learning and automation to allow customers to make the best use of their human resources. Read the whole entry. »

Blockchain 40

Blockchain Marketing Access Security 40

Security Affairs

JANUARY 2, 2021

The Federal Bureau Investigation (FBI) is warning owners of smart home devices with voice and video capabilities of ‘swatting’ attacks. The FBI has recently issued an alert to warn owners of smart home devices with voice and video capabilities of so-called “swatting” attacks. team to a specific location. Pierluigi Paganini.

Passwords 135

Passwords Manufacturing Authentication Access 135

Security Affairs

DECEMBER 20, 2022

Microsoft has disclosed details of a now-fixed security vulnerability dubbed Achilles ( CVE-2022-42821 , CVSS score: 5.5) in Apple macOS that could be exploited by threat actors to bypass the Gatekeeper security feature. while video POC is available here. Follow me on Twitter: @securityaffairs and Facebook and Mastodon.

Archiving 96

Archiving Security Access IT 96

Krebs on Security

SEPTEMBER 9, 2022

states now have designated safe trading stations — mostly at local police departments — which ensure that all transactions are handled in plain view of both the authorities and security cameras. Nearly all U.S. And it appears most states now have them in at least some major cities.

Sales 275

Sales Paper Risk IT 275

Security Affairs

MAY 7, 2021

HideezKey- This is a deep-dive into a nice concept for a security token & password manager that turned into a horrible product due to lack of proper R&D and Threat Modeling. video below), I started looking around for more interesting and concerning (from a security point of view) NRF52-based products.

Security 101

Security Passwords Encryption Access 101

Security Affairs

MARCH 24, 2023

Of course, the most interesting attack was conducted by David Berard ( @_p0ly_ ) and Vincent Dehors ( @vdehors ) from Synacktiv ( @Synacktiv ) who exploited a heap overflow and an OOB write to hack Tesla – Infotainment Unconfined Root. They earn $75,000 and 8 Master of Pwn points. They earn $30,000 and 3 Master of Pwn points.

Security 97

Security Information Security IT 97

IT Governance

MARCH 15, 2019

Earlier this month we caught up with Geraint Williams, CISO for GRC International Group plc, to find out more about information security and how he raises awareness within the workplace. Interactive e-learning courses are a time- and cost-effective way to educate staff on key organisational issues in a structured manner.

Education 74

Education Security awareness Information Security Risk 74

IT Governance

DECEMBER 8, 2022

On Friday, a deepfake video emerged on Twitter that appeared to show FTX founder Sam Bankman-Fried offering an opportunity for users to recoup their losses. The video directed viewers to visit a website where they could enter a giveaway to win cryptocurrency. A series of phishing emails were discovered by the security firm Trellix.

Phishing 111

Phishing Education Personal data Authentication 111

AIIM

FEBRUARY 27, 2020

In several recent posts, I’ve talked about professional development options for information management professionals and provided guidance on how to determine whether a particular course or certification is a good fit. If there is sufficient interest, I may write a few subsequent posts that go into more depth about our courses.

ECM 116

ECM Records Management Metadata Information governance 116

Security Affairs

MAY 31, 2019

A security researcher demonstrated how to bypass the Apple macOS Gatekeeper by leveraging trust in network shares. The Italian security researcher Filippo Cavallarin demonstrated how to bypass the macOS Gatekeeper by leveraging trust in network shares. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Security 84

Security Archiving Cybersecurity IT 84

Security Affairs

MAY 4, 2022

A security researcher discovered that samples of Conti, REvil, LockBit ransomware were vulnerable to DLL hijacking. Page shared its findings through its Malvuln project exclusively dedicated to the research of security flaws in malware codes. All basic tests were conducted successfully in a virtual machine environment.”

Ransomware 103

Ransomware Encryption Security Cybersecurity 103

The Last Watchdog

JULY 26, 2021

However, there is a fascinating back story about how Google’s introduction of VMCs – to meet advertising and marketing imperatives — could ultimately foster a profound advance in email security. Coclin and I worked through how a huge email security breakthrough could serendipitously arrive as a collateral benefit of VMCs.

Cybersecurity 240

Cybersecurity Marketing Phishing Authentication 240