Cloud Security This Week – February 16, 2018

Evident.io in the News Open AWS S3 Bucket Exposes Private Info on Thousands of Fedex Customers “There’s a whole hacker cottage industry around finding and exploiting S3 buckets, and it’s growing because as cloud environments grow, so … Continue reading Cloud Security This Week – February 16, 2018

The Olympics and 4,000 Government Websites Got Owned

Two recent discoveries in the world of cybersecurity – from the Olympics and via cryptojacking – highlight potential trends we can expect to see more of. High profile and brash, they portend an alarming extension of hacker activity. Olympic… Continue reading The Olympics and 4,000 Government Websites Got Owned

The Growth Mindset Applied to Cloud Security in Five Steps

Psychologist Carol Dweck has done research on the concept of “mindset” in humans, and she’s determined that those who seek growth and progress are happier, more fulfilled, and actually achieve more than those focused on quick wins. Tu… Continue reading The Growth Mindset Applied to Cloud Security in Five Steps

Seoul claims North Korea stole millions worth of cryptocurrency from domestic exchanges

Pyongyang’s continued pilfering of cryptocurrency exchanges has racked in millions of dollars for the hermit kingdom. Government officials in Seoul say North Korean hackers targeted and successfully stole cryptocurrencies from businesses and traders based in South Korea worth billions of won last year. Won is the domestic currency of South Korea; one billion won translates to about 920,000 U.S. dollars.  North Korea’s use of cybercrime to finance domestic development projects is well-documented. North Korean hackers have used a variety of tactics to steal cryptocurrency from individuals and companies, alike. Kim Byung-kee, a member of South Korea’s parliamentary intelligence committee, told Reuters on Monday that “North Korea [had] sent emails that could hack into cryptocurrency exchanges and their customers’ private information and stole (cryptocurrency) worth billions of won” over the last 12 months. The National Intelligence Service (NIS) of South Korea recently stated that North Korea-linked hackers neutralized a South Korean company’s anti-hacking system […]

The post Seoul claims North Korea stole millions worth of cryptocurrency from domestic exchanges appeared first on Cyberscoop.

Continue reading Seoul claims North Korea stole millions worth of cryptocurrency from domestic exchanges

Cloud Security This Week – January 19, 2018

New from Evident.io WEBINAR Replay: AWS S3 Security: Your 1 Week Action Plan In this webinar, Justin Hubbard, Enterprise Solutions Architect at Evident.io walked through the AWS S3 security features that will help keep your data secure. He discussed co… Continue reading Cloud Security This Week – January 19, 2018

Bug bounty program offers $100 million for ‘ethical hackers’ to earn by 2020

HackerOne has put $100 million up for grabs in bug bounty rewards for “ethical hackers” over the next two years, the bug bounty platform said in a press release announcing the results of its 2018 Hacker Report. Many other programs are also … Continue reading Bug bounty program offers $100 million for ‘ethical hackers’ to earn by 2020

Bug bounty program offers $100 million for ‘ethical hackers’ to earn by 2020

HackerOne has put $100 million up for grabs in bug bounty rewards for “ethical hackers” over the next two years, the bug bounty platform said in a press release announcing the results of its 2018 Hacker Report. Many other programs are also … Continue reading Bug bounty program offers $100 million for ‘ethical hackers’ to earn by 2020

Trisis has the security world spooked, stumped and searching for answers

At first, technicians at multinational energy giant Schneider Electric thought they were looking at the everyday software used to manage equipment inside nuclear and petroleum plants around the world. They had no idea that the code carried the most dangerous industrial malware on the planet. More than four months have passed since a novel, highly sophisticated piece of malware forced an important oil and gas facility in the Middle East to suddenly shut down, but cybersecurity analysts still don’t know who wrote the code. Since last August, multiple teams of researchers in the public and private sectors have been examining what the perpetrators planted inside a nondescript Saudi computer network. It’s a rare case involving a computer virus specially engineered to sabotage industrial control systems (ICS) — the gear that keeps factories and refineries running. Manipulating these systems can have a destructive impact far beyond the network. Today, the incident’s magnitude and implications are […]

The post Trisis has the security world spooked, stumped and searching for answers appeared first on Cyberscoop.

Continue reading Trisis has the security world spooked, stumped and searching for answers

The Cheeseburger Principle of Cloud Compliance

“I like mine with lettuce and tomato Heinz 57 and French fried potatoes Big kosher pickle and a cold draught beer Well, good God almighty, which way do I steer… …for my cheeseburger in paradise?” – Jimmy Buffett, Cheesebur… Continue reading The Cheeseburger Principle of Cloud Compliance

The Top 17 Information Security Conferences of 2018

With 2017 now in the rear-view mirror, the security industry is turning its attention to 2018. The new year will no doubt present its fair share of challenging digital security threats. So too will it present numerous opportunities for infosec professi… Continue reading The Top 17 Information Security Conferences of 2018