Schneier on Security

JUNE 16, 2023

I’m just back from the sixteenth Workshop on Security and Human Behavior , hosted by Alessandro Acquisti at Carnegie Mellon University in Pittsburgh. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro Acquisti, Ross Anderson, and myself.

Security 88

Security Paper IT Cybersecurity 88

Schneier on Security

MARCH 8, 2019

Video here ). If you missed it live, we have videos: How Public Interest Technologists are Changing the World : Matt Mitchell, Tactical Tech; Bruce Schneier, Fellow and Lecturer, Harvard Kennedy School; and J. Video here.) Video here.). Video here.). Video here.). Video here.). Video here.).

Cybersecurity 70

Cybersecurity Government Security IT 70

Data Breach Today

APRIL 5, 2019

A Guide to Video Interviews With Thought Leaders at This Year's Event At RSA Conference 2019 in San Francisco, Information Security Media Group's editorial team conducted more than 100 video interviews with industry thought leaders. Here are the highlights.

Information Security 223

Information Security Security 223

Krebs on Security

FEBRUARY 28, 2024

The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call. The investor expressed interest in financially supporting Doug’s startup, and asked if Doug could find time for a video call to discuss investment prospects. “We are actively working on fixing these problems.

Phishing 253

Phishing Blockchain Military Passwords 253

Schneier on Security

JULY 15, 2022

” If approved, the draft ordinance would also allow SFPD to collect historical video footage to help conduct criminal investigations and those related to officer misconduct. Currently, the police can only request historical footage from private cameras related to specific times and locations, rather than blanket monitoring. .”

Access 109

Access Security Privacy 109

Krebs on Security

SEPTEMBER 28, 2018

Facebook said today some 90 million of its users may get forcibly logged out of their accounts after the company fixed a rather glaring security vulnerability in its Web site that may have let attackers hijack user profiles. The story notes that the researcher ultimately called off the event.

Security 233

Security Passwords Access IT 233

Data Breach Today

SEPTEMBER 26, 2018

A Guide to Video Interviews With Thought Leaders at This Year's Event At RSA Conference 2018 Asia Pacific & Japan, Information Security Media Group conducted dozens of video interviews with industry thought leaders. Here are the highlights.

Information Security 150

Information Security Security 150

Schneier on Security

MAY 31, 2022

Today is the second day of the fifteenth Workshop on Security and Human Behavior , hosted by Ross Anderson and Alice Hutchings at the University of Cambridge. It’s not just an interdisciplinary event; most of the people here are individually interdisciplinary.

Security 97

Security Paper IT 97

Krebs on Security

APRIL 11, 2019

and higher can now be used as Security Keys , an additional authentication layer that helps thwart phishing sites and password theft. But Google said starting this week, any mobile phone running Android 7.0+ (Nougat) can serve the same function as a USB-based security key. The company announced that all phones running Android 7.0

Security 230

Security Authentication Passwords Phishing 230

Troy Hunt

APRIL 14, 2024

Data breach verification: that seems like a good place to start given the discussion in this week's video about Accor. That's, uh, "brave" 😲 References Sponsored by: Kolide ensures only secure devices can access your cloud apps. It's Device Trust tailor-made for Okta. Book a demo today.

Authentication 87

Authentication Retail Data breaches Cloud 87

Data Breach Today

JULY 24, 2018

A Guide to Video Interviews With Thought Leaders at This Year's Event At Infosecurity Europe 2018, Information Security Media Group conducted dozens of video interviews with industry thought leaders. Here are the highlights.

Information Security 113

Information Security Security 113

Krebs on Security

OCTOBER 18, 2022

“The arrests were the result of a joint investigation by the Sheriff’s Office and Bank of America corporate security,” reads a September 2022 story from The Sacramento Bee. And while some of these EBT cards have Visa or MasterCard logos on them, it is not up to those companies to replace funds in the event of fraud.

Retail 227

Retail Libraries IT Risk 227

Security Affairs

NOVEMBER 30, 2023

Researchers at AppOms discovered a vulnerability in Zoom Room as part of the HackerOne live hacking event H1-4420. Zoom Rooms is a feature of the Zoom video conferencing platform designed to enhance collaboration in physical meeting spaces, such as conference rooms or huddle rooms. ” concludes the report.

Access 130

Access IT Security Information Security 130

Troy Hunt

NOVEMBER 26, 2023

Who knows, but it made for entertaining content this week 🙂 References Sponsored by: Kolide ensures that if a device isn't secure, it can't access your apps. It's Device Trust for Okta. Watch the demo today!

Access 101

Access IT Security 101

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 127

Security Phishing Information Security Communications 127

Data Breach Today

MAY 24, 2018

A Guide to Video Interviews With Thought Leaders at This Year's Event At RSA Conference 2018 in San Francisco, Information Security Media Group's editorial team conducted more than 100 video interviews with industry thought leaders. Here are the highlights.

Information Security 100

Information Security Security 100

Schneier on Security

JUNE 19, 2020

Today is the second day of the thirteenth Workshop on Security and Human Behavior. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro Acquisti, Ross Anderson, and myself.

Security 99

Security Paper IT 99

Krebs on Security

JULY 2, 2021

But just days before the event Western Digital released MyCloud OS 5 , which eliminated the bug they found. We take reports from the security research community very seriously and conduct investigations as soon as we receive them.” Western Digital said it is aware of third parties offering security patches for My Cloud OS 3.

Cloud 343

Cloud Passwords Communications Security 343

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2019

Sports fans aren’t the only ones who are looking forward to this event. It’s not like bad actors haven’t taken an interest in major sporting events before. Just a couple of months after that, World Rugby itself announced that one of its training websites had suffered a security breach that exposed subscribers’ account information.

Security 105

Security IoT Personal data Military 105

Security Affairs

MAY 27, 2022

Security researchers devised a technique, dubbed GhostTouch, to remotely control touchscreens using electromagnetic signals. The researchers demonstrated how to inject two types of basic touch events, taps and swipes, into targeted locations of the touchscreen. The events allowed the researchers to control the devices (i.e.

Paper 143

Paper Libraries Authentication Passwords 143

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Google , Clearview AI , and Meta all receives hefty penalties in 2022, demonstrating the continued important of effective information security.

Security 132

Security Data breaches Ransomware Military 132

IT Governance

JANUARY 9, 2020

Almost everyone wants to know what the future has in store – particularly when it comes to cyber security. With that in mind, Geraint Williams, IT Governance’s chief information security officer, discusses his cyber security predictions in the upcoming year. Our predictions. Business email compromise attacks will increase.

Security 98

Security IoT Phishing Ransomware 98

Security Affairs

JANUARY 29, 2021

. “In recent months, Microsoft has detected cyberattacks targeting security researchers by an actor we track as ZINC. “Observed targeting includes pen testers, private offensive security researchers, and employees at security and tech companies. .” ” states the report published by Microsoft.

Security 116

Security Encryption Passwords Communications 116

IT Governance

FEBRUARY 14, 2024

The benefits of partnering with us, and our partner-exclusive event IT Governance launched its partner programme in 2017, which now includes more than 400 organisations. What else can partners expect from the event? And why should organisations consider partnering with IT Governance? What is it that makes IT Governance special?

Government 59

Government IT Sales Data Privacy 59

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

Troy Hunt

MAY 14, 2022

Geez it was nice to not only be back at an event, but out there socialising and attending all the related things that tend to go along with it. Detect suspicious behavior and strengthen your Salesforce security posture. A short one this week as the previous 7 days disappeared with AusCERT and other commitments. Try it free!

Passwords 86

Passwords IT Security 86

eSecurity Planet

APRIL 21, 2022

This allows EDR to deploy very quickly, but it also allows for a number of security vulnerabilities. Here we’ll discuss why EDR vendors choose these configurations, and how organizations can tune their EDR systems to fit their organization and improve security. Also read: 10 Top Active Directory Security Tools.

Security 95

Security Access Sales e-Discovery 95

Security Affairs

MARCH 20, 2022

This post provides a timeline of the events related to the Russia invasion of Ukraine from the cyber security perspective. Below is the timeline of the events related to the previous weeks: March 18 – China-linked threat actors are targeting the government of Ukraine. Follow me on Twitter: @securityaffairs and Facebook.

Cloud 89

Cloud Government Risk Information Security 89

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M ” reported the Security Incident notice published by the company. worth of cryptocurrency.

Manufacturing 85

Manufacturing Passwords Blockchain Cloud 85

Security Affairs

JANUARY 26, 2021

Google TAG is warning that North Korea-linked hackers targeting security researchers through social media. Google Threat Analysis Group (TAG) is warning that North Korea-linked hackers targeting security researchers through social media. ” reads the TAG’s report. ” reads the TAG’s report.

Security 86

Security Communications Cybersecurity Government 86

Troy Hunt

NOVEMBER 25, 2020

Now for the big challenge - security. The "s" in IoT is for Security Ok, so the joke is a stupid oldie, but a hard truth lies within it: there have been some shocking instances of security lapses in IoT devices. But there are also some quick wins, especially in the realm of "using your common sense". Let's dive into it.

IoT 143

IoT Security Risk Cloud 143

Security Affairs

DECEMBER 27, 2023

Key events include the European Parliament elections in June, the U.S. According to the latest threat landscape report from the European Cyber Security Agency (ENISA) , there has been an increase in the use of AI-based chatbots for fraudulent activities, deepfakes, and similar technologies over the last 12 months.

Artificial Intelligence 119

Artificial Intelligence Government Manufacturing IT 119

Security Affairs

MAY 15, 2022

This post provides a timeline of the events related to Russia invasion of Ukraine from the cyber security perspective. Below is the timeline of the events related to the ongoing Russia invasion that occurred in the previous weeks: May 14 – The LEGION collective calls to action to attack the final of the Eurovision song contest.

Government 96

Government Cybersecurity Security Information Security 96

Security Affairs

JUNE 2, 2020

With over a 1000 names put forward, the shortlists for the 12 awards were put to the public vote, and winners were announced via a video conference. The post SecurityAffairs awarded as Best European Cybersecurity Technical Blog appeared first on Security Affairs. The awards were organized by Eskenzi PR and sponsored by Qualys.

Cybersecurity 95

Cybersecurity Education Security 95

Troy Hunt

MARCH 15, 2020

That sucks for you because you end up both missing out on events and sooner or later, suffering from cabin fever (I've always found that difficult across many years of remote work). It also sucks for companies like NDC Conferences whose entire livelihood is running the very events that people are now avoiding at all costs. Crisitunity!

Mining 101

Mining IT Communications Security 101

Security Affairs

MARCH 8, 2022

Microsoft March 2022 Patch Tuesday security updates address 89 vulnerabilities in multiple products, including 3 zero-days. Three flaws addressed by the Microsoft March 2022 Patch Tuesday security updates are zero-day issues, and for two of them, CVE-2022-21990 and CVE-2022-24459, public exploits are available.

Libraries 101

Libraries IoT Cloud Security 101

Security Affairs

NOVEMBER 11, 2021

The security breach took place between August 2020 and May 2021, the intrusion has been attributed to a financially motivated attacker that deployed a custom implant to redirect visitor traffic to an online video platform. The hacked server was used by the company to manage customer information for the Queensland water supplier.

Passwords 93

Passwords Security awareness Authentication Government 93