Hard questions raised when a software ‘glitch’ takes down an airliner

The parts and systems on an airplane don’t have to fail in a big way to have big consequences. A flaw in airline software could be a matter of life or death. The original version of this post was published on Forbes. It doesn’t take a failu… Continue reading Hard questions raised when a software ‘glitch’ takes down an airliner

Both consumers and retailers need to up their cyber security to make holidays happy

We’ve got some Black Friday advice for retailers and shoppers who want to keep everyone’s data safe and secure, for a truly happy holiday season. The original version of this post was published on Forbes. Most of the cyber security advice l… Continue reading Both consumers and retailers need to up their cyber security to make holidays happy

Don’t expect jailed CEOs, but Wyden at least puts consumer privacy on the table

The Consumer Data Protection Act (as outlined in the CDPA draft circulated in early November by Sen. Ron Wyden) might not send CEOs to jail, but it will certainly help protect Americans’ data. The original version of this post was published in Fo… Continue reading Don’t expect jailed CEOs, but Wyden at least puts consumer privacy on the table

Threats obvious, but electronic voting systems remain insecure

Election security requires that voters trust the results. But many U.S. electronic voting systems are clearly insecure, and untrustworthy. What are we doing about it? The original version of this article was published in Forbes. Surely you’ve hea… Continue reading Threats obvious, but electronic voting systems remain insecure

Rachel Tobac explains how ‘polite paranoia’ can derail social engineering attacks

Rachel Tobac thinks people are the first line of cyber security defense, not the weakest link. She talks about social engineering attacks and how to be “politely paranoid” with us. That old line “Just because you’re paranoid doe… Continue reading Rachel Tobac explains how ‘polite paranoia’ can derail social engineering attacks

‘Cyber Pearl Harbor’ unlikely, but critical infrastructure needs a major upgrade | NCSAM at Synopsys

Officials have warned for decades of a “cyber Pearl Harbor” or “cyber 9/11” kind of attack on the nation’s critical infrastructure. Yet no attack has come. It’s either because our attackers can’t do i… Continue reading ‘Cyber Pearl Harbor’ unlikely, but critical infrastructure needs a major upgrade | NCSAM at Synopsys

Cooking up digital privacy, indecent (data) exposure, and just another zero-day

Taylor Armerding, Synopsys Software Integrity Group senior strategist, gives you the scoop on application security and insecurity in this week’s Security Mashup. What’s in this week’s Security Mashup, you ask? Cook calls for digital p… Continue reading Cooking up digital privacy, indecent (data) exposure, and just another zero-day

Want to close the software security skills gap? Tanya Janca says start mentoring!

Tanya Janca believes that one of the reasons most connected products are insecure from day one is the software security skills gap that comes from developers not learning security in school. Her solution: Those who know should teach those who don&#8217… Continue reading Want to close the software security skills gap? Tanya Janca says start mentoring!

Lance Spitzner: How to secure the human operating system | NCSAM at Synopsys

The original version of this article was published in Forbes. If it is everyone’s job to ensure online safety at work, that means everyone needs more and better training in how to do it. One of those on the front lines of that effort is Lanc… Continue reading Lance Spitzner: How to secure the human operating system | NCSAM at Synopsys