Collaborate Disseminate
Yet another database of personal information has been found on an unsecured server. This one stands out for its size, the range of unencrypted PII it contains, and the inclusion of vast numbers of biometric records.
read more
A KNOB (key negotiation of Bluetooth) attack against the basic rate/enhanced data rate (BR/EDR, or Bluetooth Classic) configuration can result in information disclosure and/or escalation of privileges.
read more
Continue reading New Bluetooth Vulnerability Allows Attackers to Intercept Traffic
British Airways (BA) has been criticized for allowing hackers easy access to customer flight information. The issue was exposed Tuesday by researchers who discovered “a vulnerability affecting British Airways’ e-ticketing system that exposes passengers… Continue reading British Airways Criticized for Exposing Passenger Flight Details
Myers-Briggs is a firm that believes in self-development through self-awareness. To improve the level of self-awareness, it has developed a psychometric test to indicate to which of 16 personality types everybody belongs. This is the Myers-Briggs Type … Continue reading Myers-Briggs Study Examines Employee Personality Traits and Cyber Behaviors
In May 2019 (updated in June), F5 issued a security advisory about a potential injection issue in the Tool Command Language (TCL) as used with its BIG-IP load balancers. Load balancers are essential to ensure consistent web services in high volume circ… Continue reading Hidden Injection Flaws Found in BIG-IP Load Balancers
In the past, data protection regulation has largely been concerned with preventing the theft of personal data. Security and security products have focused on preventing breaches — no breach effectively meant no failure of data protection compliance.
r… Continue reading Privacy Platform Provider Securiti.ai Emerges From Stealth With $31 Million Funding
The growth of IoT devices has highlighted the difficulties in ensuring firmware security — especially where the device and software are initially sourced from third parties, or developed under time pressures in-house. Now a new firmware analyzer has b… Continue reading GM Cruise Releases Automated Firmware Security Analyzer to Open Source
The evolution of ransomware from high volume, low return, spray and pray consumer attacks to lower volume, high value, targeted attacks against business is well documented. The intent now is not to simply encrypt local files, but to find and encrypt ne… Continue reading Network Shares Are a Primary Target for Ransomware
Bolting Security on to DevOps Without Full Integration is Little More Than Keeping Security in its Own Separate Silo
read more
Continue reading The Fundamentals of Developing Effective DevSecOps
The Baldr malware is a bit of an enigma. Appearing first in late 2018, researchers at Sophos have tracked it through four rapid revisions until suddenly, on May 31, 2019, the distributor (overdot) declared that further development and support had cease… Continue reading Baldr Malware: A Short-Lived Star or Info Stealer That Will Return?