What We Learn from MITRE’s Most Dangerous Software Weaknesses List
A look into MITRE’s 2021 CWE Top 25 Most Dangerous Software Weaknesses
read more
Continue reading What We Learn from MITRE’s Most Dangerous Software Weaknesses List
Author Archives: Kevin Townsend
TikTok fined €750,000 for Violating Children’s Privacy
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens – AP) announced Thursday that it has imposed a fine of €750,000 on TikTok “for violating the privacy of young children”. More specifically, TikTok failed to provide a privacy statement in… Continue reading TikTok fined €750,000 for Violating Children’s Privacy
Ransomware Attack on UK Rail System – Spray and Pray or Targeted?
Northern Rail, one of the UK’s local railway systems covering the north of England, had its new self-service ticketing machines taken off-line following a ransomware attack last week.
read more
Continue reading Ransomware Attack on UK Rail System – Spray and Pray or Targeted?
DNSFilter Raises $30 Million in Series A Funding
Cybersecurity firm raises $30 Million to support growth of its AI-based DNS threat protection system
read more
Continue reading DNSFilter Raises $30 Million in Series A Funding
Life in Lockdown: Offices Are Empty of People, Full of Risky IoT Devices
During lockdown, offices have been empty and quiet – but not dead. Networks have continued to run, and IoT devices have continued to operate unattended. Many of these devices have communicated in plain text leaving the networks vulnerable.
read more
… Continue reading Life in Lockdown: Offices Are Empty of People, Full of Risky IoT Devices
Mitigating Threats to Encryption From Quantum and Bad Random
Details Emerge on Iranian Railroad Cyberattack
One Year After Europe’s Schrems II Decision, Privacy Activist Bemoans Lack of Progress
Little will happen until and unless the European Data Protection Authorities begin to enforce Schrems II
read more
Vulnerabilities in Etherpad Collaboration Tool Allow Data Theft
XSS and Argument Injection Flaws Found in Popular Etherpad Collaboration Tool
read more
Continue reading Vulnerabilities in Etherpad Collaboration Tool Allow Data Theft
UK Spy Agency Releases Annual Threat Report
MI5’s Annual Threat Update Parallels U.S. Intelligence Threat Warnings
MI5’s UK Annual Threat Update 2021 from director general Ken McCallum almost mirrors the threat warnings delivered by U.S. government agencies: ransomware and IP theft in cyber, and… Continue reading UK Spy Agency Releases Annual Threat Report