Collaborate Disseminate
Mozilla, in partnership with Facebook, Cloudflare, and other IETF community members, has announced technical specifications for a new cryptographic protocol called “Delegated Credentials for TLS.”
Delegated Credentials for TLS is a new simplified way … Continue reading Explained: How New ‘Delegated Credentials’ Boosts TLS Protocol Security
A team of cybersecurity researchers has discovered a clever technique to remotely inject inaudible and invisible commands into voice-controlled devices — all just by shining a laser at the targeted device instead of using spoken words.
Dubbed ‘Light C… Continue reading Hackers Can Silently Control Your Google Home, Alexa, Siri With Laser Light
Cybersecurity researchers have spotted a new cyberattack that is believed to be the very first but an amateur attempt to weaponize the infamous BlueKeep RDP vulnerability in the wild to mass compromise vulnerable systems for cryptocurrency mining.
In … Continue reading First Cyber Attack ‘Mass Exploiting’ BlueKeep RDP Flaw Spotted in the Wild
My recent post regarding LNK files got me thinking about other uses of LNK files. That previous post really illustrated how some analysts are following Jesse Kornblum’s adage of “using every part of the buffalo”, in that they made use of everythi… Continue reading More Regarding LNK Files
Two grey hat hackers have pleaded guilty to blackmailing Uber, LinkedIn, and other U.S. corporations for money in exchange for promises to delete data of millions of customers they had stolen in late 2016.
In a San Jose courthouse in California on Wed… Continue reading Two Hackers Who Extorted Money From Uber and LinkedIn Plead Guilty
A story has been making the rounds on the Internet since yesterday about a cyber attack on an Indian nuclear power plant.
Due to some experts commentary on social media even after lack of information about the event and overreactions by many, the inci… Continue reading Hackers Target Indian Nuclear Power Plant – Everything We Know So Far
UniCredit, an Italian global banking and financial services company, announced today that it suffered a security incident that leaked some personal information belonging to at least 3 million of its domestic customers.
Officially founded in 1870, UniC… Continue reading UniCredit Bank Suffers ‘Data Incident’ Exposing 3 Million Italian Customer Records
I wanted to put something scary together in time for Halloween; I was gonna go with a mullet wig, a la Joe Dirt, or maybe pass out cards with truly scary cards for those of us who are adulting, full time, such as, “…your septic field just rose and fl… Continue reading Return of the LNK Files…
If you’re running any PHP based website on NGINX server and have PHP-FPM feature enabled for better performance, then beware of a newly disclosed vulnerability that could allow unauthorized attackers to hack your website server remotely.
The vulnerabi… Continue reading New PHP Flaw Could Let Attackers Hack Sites Running On Nginx Servers
After a huge delay I can finally announce that the new version of our Vulnerability Management Guidance Framework is out! Although it is a refresh of a document that has gone through many updates (even before my Gartner time), this one has some very ni… Continue reading From my Gartner Blog – The New Vulnerability Management Guidance Framework