Collaborate Disseminate
The security industry has the perfect skillset and adversarial defense outlook to deal with some of the emerging societal issues in today’s world, said security technologist Bruce Schneier. Continue reading Bruce Schneier Proposes ‘Hacking Society’ for a Better Tomorrow
From data privacy to industrial IoT cybersecurity concerns, Threatpost editors discuss the top stories they expect to see at this year’s RSA Conference, which kicks off next week in San Francisco. Continue reading RSAC 2020: Editors’ Preview of Hottest Sessions, Speakers and Themes
As many ponder the big ethical questions around cyber, some are proposing public interest technologist as a solution. Continue reading RSAC 2019: An Antidote for Tech Gone Wrong
Bruce Schneier discusses the clash between critical infrastructure and cyber threats. Continue reading Newsmaker Interview: Bruce Schneier on Physical Cyber Threats
Happy Thanksgiving! The holiday may equate to a short work week in the US but there is certainly no shortage of news breaking about cybersecurity, privacy and the insider threat. The biggest cybersecurity news out last week had to be passage of the Cyb… Continue reading 11/19/18: Dtex, Insider Threat, Privacy News Blog: Trump Signs CISA Legislation; Defending Against Culture; Surveillance: Freedom’s Killer
Noted cryptographer waxes on the threats posed by physical cyber systems, ‘going dark’ and a crypto arms race. Continue reading Newsmaker Interview: Bruce Schneier on ‘Going Dark’ and the Crypto Arms Race
The day after Halloween, lawmakers at a hearing on the Equifax breach heard scary stories of an under-regulated industry that collects and analyzes vast quantities of data about consumers without their knowledge or consent, stores it insecurely and sells it to the highest bidder. Representatives of the credit reporting industry told the House Energy and Commerce Subcommittee on Digital Commerce and Consumer Protection that those were all campfire tales to frighten children and that searching for a legislative solution would be the governmental equivalent of a snipe hunt. And Republican lawmakers sought to tamp down industry concerns by saying they were still in the information-gathering phase of their work. The hearing, said subcommittee Chairman Bob Latta, R-Ohio, “is an important step toward answering the many questions that consumers are asking.” But the overall tone of proceedings, even from the credit reporting industry’s traditional allies in the GOP, was not at all friendly. “Consumers are getting […]
The post Congress told ‘the market can’t fix’ poor cybersecurity at credit companies appeared first on Cyberscoop.
Continue reading Congress told ‘the market can’t fix’ poor cybersecurity at credit companies
Internet of Things Cybersecurity Improvement Act would mandate stringent security for connected devices sold to the federal government. Continue reading Legislation Proposed to Secure Connected IoT Devices
New research from Harvard suggests that the freshly discovered software flaws called zero day vulnerabilities are independently rediscovered much faster than previously thought. The rediscovery rate has big implications for U.S. cybersecurity policy because it would change the calculation officials make when deciding whether to reveal zero days discovered by U.S. agencies so they can be fixed, or keep them secret so they can be used to spy on foreign adversaries and in other cyber-operations. “If the rediscovery rate is this high, the number of vulnerabilities [secretly retained] for operational use should be lower or subject to more aggressive scrutiny,” said Trey Herr a post-doctoral fellow at the Belfer Center at Harvard. Herr, along with security guru Bruce Schneier and Christopher Morris, a research assistant from the Harvard school of engineering, published their findings this week after a lengthy peer-review process, and will present them at the Black Hat USA conference in Las Vegas next week. […]
The post Study: Zero days rediscovered much faster appeared first on Cyberscoop.
The latest Wikileaks dump of Apple hacking tools, the LastPass vulnerabilities, and a new Android security report are discussed. Continue reading Threatpost News Wrap, March 27, 2017