GDPR – Good Times Ahead for Cybercriminals

Just as GDPR will bring more focus (we hope) to cybersecurity at organizations around the world, the emphasis on protecting personal private information (PII) of EU/UK citizens – no matter where the company resides – will make this information more valuable to cybercriminals. One of the first rules of cybercriminals is they will not miss […]… Read More

The post GDPR – Good Times Ahead for Cybercriminals appeared first on The State of Security.

Continue reading GDPR – Good Times Ahead for Cybercriminals

Ordinary People Need Cryptography

With the British election this June, cryptography on the internet is a hot topic. This past March, British Home Secretary Amber Rudd criticized WhatsApp’s implementation of encryption in the wake of a terrorist attack. “It is completely unacceptable. There should be no place for terrorists to hide. We need to make sure that organisations like […]… Read More

The post Ordinary People Need Cryptography appeared first on The State of Security.

Continue reading Ordinary People Need Cryptography

May 2017: The Month in Ransomware

May 2017 shaped up to be the busiest ransomware month to date. The bare statistics speak for themselves: a total of 79 new strains came out and 38 existing ones received updates. Extortion-based cybercrime is obviously more prolific and ubiquitous than ever. Last month, the world confronted the unprecedented WannaCry ransomware epidemic employing NSA exploits. […]… Read More

The post May 2017: The Month in Ransomware appeared first on The State of Security.

Continue reading May 2017: The Month in Ransomware

There Is No Cyber Talent Crunch; You’re Just Hiring Wrong

“Cyber talent crunch challenges CIOs,” says one headline. “Businesses vulnerable due to talent shortage,” screams another. Intel even published a report revealing, among other things, that 82% of IT professionals confirm there is a shortfall in information security talent. And yet, at every information security conference I attend, I find no shortage of unemployed and—worse—underemployed […]… Read More

The post There Is No Cyber Talent Crunch; You’re Just Hiring Wrong appeared first on The State of Security.

Continue reading There Is No Cyber Talent Crunch; You’re Just Hiring Wrong

Women in Information Security: Jennifer Sunshine Steffens

When a layperson imagines someone who works in cybersecurity, or any area of tech, they probably picture a man. But I’m a female information security professional, and I’ve had a great time speaking to other women in my industry. Last time, I spoke to Sarah Aoun, who educates journalists and political activists on how to […]… Read More

The post Women in Information Security: Jennifer Sunshine Steffens appeared first on The State of Security.

Continue reading Women in Information Security: Jennifer Sunshine Steffens

How Hackers Attack Web Applications: Bots and Simple Flaws – Part 2

In the first part of this article, we discussed popularity, average number, and ratio of attacks on web applications. Let’s now focus on some examples and sources. Examples of Attacks An example of detecting a Path Traversal attack The attacker intended to go to the root directory of the server and access the /etc/passwd file, […]… Read More

The post How Hackers Attack Web Applications: Bots and Simple Flaws – Part 2 appeared first on The State of Security.

Continue reading How Hackers Attack Web Applications: Bots and Simple Flaws – Part 2

5 Essential Measures for a Business Security Plan

The tech-driven transition of business enterprises has brought immense benefits for the organizations. It has quantified work and performance, optimized efficiency, and made it convenient for business organizations to expand their areas of operations and invade new markets on the global spectrum. However, while this has escalated the annual profits and perks for business organizations, […]… Read More

The post 5 Essential Measures for a Business Security Plan appeared first on The State of Security.

Continue reading 5 Essential Measures for a Business Security Plan

Don’t You Worry. More Attacks are Underway! It’s Just Combat Warfare.

Cyber-attacks are becoming more and more like the combat warfare seen in the early days of the invasion of Iraq and Afghanistan back in the early-2000s. They come in phases, fast, rapid and dominating most of the battlefield. Usually, if you can control the air, sea and land power, you can control the verdict of […]… Read More

The post Don’t You Worry. More Attacks are Underway! It’s Just Combat Warfare. appeared first on The State of Security.

Continue reading Don’t You Worry. More Attacks are Underway! It’s Just Combat Warfare.

Women in Information Security: Sarah Aoun

Women are doing very important work in the cybersecurity field, and I’ve really been enjoying talking to some of the brightest and most interesting minds in my field. In my last interview, I spoke to Kelly Shortridge. She went from a career in high finance to a security-related product manager role for BAE. This time, […]… Read More

The post Women in Information Security: Sarah Aoun appeared first on The State of Security.

Continue reading Women in Information Security: Sarah Aoun

Five Ways to Empower Your Staff While Keeping Your Network Secure

News of the Google Docs phishing scam is not the first time that shared cloud-based resources have hit the headlines for all the wrong reasons. Many popular collaboration and IT management tools, such as Teamviewer and Slack, have had their time in the spotlight for compromises and breaches. The truth is these systems unwittingly provide […]… Read More

The post Five Ways to Empower Your Staff While Keeping Your Network Secure appeared first on The State of Security.

Continue reading Five Ways to Empower Your Staff While Keeping Your Network Secure