Office printers: The ticking IT time bomb hiding in plain sight

Office printers don’t have to be security threats: with foresight and maintenance they’re very easily threat-proofed. The problem is that system administrators rarely give the humble printer (or scanner, or multifunction printer) much attention. But ha… Continue reading Office printers: The ticking IT time bomb hiding in plain sight

On my mind: Transitioning to third-party cloud services

During this extended period of social distancing filled with increased online activity, I can’t help but reflect on all the user data that has been created, stored, hacked, exposed, bought, shared and sold over the last 10 years. What’s known as the bl… Continue reading On my mind: Transitioning to third-party cloud services

Information security goes non-binary

Finding security holes in information systems is as old as the first commercially available computer. Back when a “computer” was something that sat in a computer room, users would try to bypass restrictions, sometimes simply by trying to guess the admi… Continue reading Information security goes non-binary

Phishing kits: The new bestsellers on the underground market

Phishing kits are the new bestsellers of the underground market, with the number of phishing kit ads on underground forums and their sellers having doubled in 2019 compared to the previous year, Group-IB reveals. The growing demand for phishing kits is… Continue reading Phishing kits: The new bestsellers on the underground market

Application security: Getting it right, from the start

Security testing data is “the unsung hero” of securing application development. It’s the backbone of application development quality, compliance and risk management, and rests on the three fundamental pillars of security: Confidentiality (the data is p… Continue reading Application security: Getting it right, from the start

Cybersecurity in a remote workplace: A joint effort

The reaction to the COVID-19 pandemic has disrupted every aspect of life across the globe and many companies now find themselves with fully remote workforces. With so many employees now working from home, business networks have been opened to countless… Continue reading Cybersecurity in a remote workplace: A joint effort

Are we doing enough to protect connected cars?

Even though connected cars should meet the highest level of security, safety, and performance, we know this is not always the case. In this interview, Moshe Shlisel, CEO at GuardKnox, discusses today’s most pressing issues related to automotive s… Continue reading Are we doing enough to protect connected cars?

Zoom in crisis: How to respond and manage product security incidents

Zoom is in crisis mode, facing grave and very public concerns regarding the trust in management’s commitment for secure products, the respect for user privacy, the honesty of its marketing, and the design decisions that preserve a positive user experie… Continue reading Zoom in crisis: How to respond and manage product security incidents

April 2020 Patch Tuesday: Microsoft fixes four actively exploited vulnerabilities

For the April 2020 Patch Tuesday, Adobe plugs 5 flaws, Oracle 405, and Microsoft 113, four of which are currently being exploited by attackers. Adobe’s updates On this Patch Tuesday, Adobe has released security updates for ColdFusion (2016 and 20… Continue reading April 2020 Patch Tuesday: Microsoft fixes four actively exploited vulnerabilities

The dangers of assumptions in security

Assuming things is bad for your security posture. You are leaving yourself vulnerable when you assume what you have is what you need, or what you have is working as advertised. You assume you are protected, but are you really? Don’t just trust – … Continue reading The dangers of assumptions in security