Operational Technology Cyber Security Alliance aims to tackle OT threats

Cyber attacks on critical and industrial infrastructure are on the rise, impacting operational reliability and business risk across all industries, including utilities, manufacturing and oil & gas. Threats to operational technology (OT) can disrup… Continue reading Operational Technology Cyber Security Alliance aims to tackle OT threats

Researchers uncover over 35 vulnerabilities in six leading enterprise printers

NCC Group researchers have uncovered significant vulnerabilities in six commonly used enterprise printers, highlighting the vast attack surface that can be presented by internet-connected printers. The research Daniel Romero, managing security consulta… Continue reading Researchers uncover over 35 vulnerabilities in six leading enterprise printers

Merissa & Jessica, WSC – Paul’s Security Weekly #600

    Merissa Villalobos is the North America Talent Acquisition Leader for NCC Group, a global security consulting firm and has been recruiting in security for 10 years. She got her start in Virginia, at a Federal Government contractor, filling roles fo… Continue reading Merissa & Jessica, WSC – Paul’s Security Weekly #600

European standards org releases consumer IoT cybersecurity standard

The European Telecommunications Standards Institute (ETSI) has released ETSI TS 103 645, a standard for cybersecurity in the Internet of Things, to establish a security baseline for internet-connected consumer products and provide a basis for future Io… Continue reading European standards org releases consumer IoT cybersecurity standard

Industry reactions to the enormous Marriott data breach

On September 8, 2018, Marriott received an alert from an internal security tool regarding an attempt to access the Starwood guest reservation database in the United States. Marriott engaged security experts to help determine what occurred. Marriott lea… Continue reading Industry reactions to the enormous Marriott data breach

Same web-based vulnerabilities still prevalent after nine years

Analysis of vulnerabilities discovered by NCC Group researchers over the last nine years found that instances of common web-based vulnerabilities have largely refused to fall over during this time, with cross-site scripting (XSS) vulnerabilities appear… Continue reading Same web-based vulnerabilities still prevalent after nine years