Collaborate Disseminate
British Airways (BA) has been criticized for allowing hackers easy access to customer flight information. The issue was exposed Tuesday by researchers who discovered “a vulnerability affecting British Airways’ e-ticketing system that exposes passengers… Continue reading British Airways Criticized for Exposing Passenger Flight Details
Myers-Briggs is a firm that believes in self-development through self-awareness. To improve the level of self-awareness, it has developed a psychometric test to indicate to which of 16 personality types everybody belongs. This is the Myers-Briggs Type … Continue reading Myers-Briggs Study Examines Employee Personality Traits and Cyber Behaviors
In May 2019 (updated in June), F5 issued a security advisory about a potential injection issue in the Tool Command Language (TCL) as used with its BIG-IP load balancers. Load balancers are essential to ensure consistent web services in high volume circ… Continue reading Hidden Injection Flaws Found in BIG-IP Load Balancers
In the past, data protection regulation has largely been concerned with preventing the theft of personal data. Security and security products have focused on preventing breaches — no breach effectively meant no failure of data protection compliance.
r… Continue reading Privacy Platform Provider Securiti.ai Emerges From Stealth With $31 Million Funding
The growth of IoT devices has highlighted the difficulties in ensuring firmware security — especially where the device and software are initially sourced from third parties, or developed under time pressures in-house. Now a new firmware analyzer has b… Continue reading GM Cruise Releases Automated Firmware Security Analyzer to Open Source
The evolution of ransomware from high volume, low return, spray and pray consumer attacks to lower volume, high value, targeted attacks against business is well documented. The intent now is not to simply encrypt local files, but to find and encrypt ne… Continue reading Network Shares Are a Primary Target for Ransomware
Bolting Security on to DevOps Without Full Integration is Little More Than Keeping Security in its Own Separate Silo
read more
Continue reading The Fundamentals of Developing Effective DevSecOps
The Baldr malware is a bit of an enigma. Appearing first in late 2018, researchers at Sophos have tracked it through four rapid revisions until suddenly, on May 31, 2019, the distributor (overdot) declared that further development and support had cease… Continue reading Baldr Malware: A Short-Lived Star or Info Stealer That Will Return?
A new report from the Cloud Security Alliance (CSA) on the top threats to cloud computing suggests that service providers are improving their security. Many of today’s threats now stem from organizational management decisions and implementation/configu… Continue reading Cloud Providers Improving Security, But Users Need to Up Their Game
Cybereason, a Boston, Mass.-based EDR/EPP security firm heavily invested in machine learning and AI-based solutions, has raised a further $200 million in a Series E funding round to support its product innovation and strengthen its global reach t… Continue reading Cybereason Raises an Additional $200 Million in Funding