Category Archives: reports

Congressional Report on the 2017 Equifax Data Breach

Posted on by

The US House of Representatives Committee on Oversight and Government Reform has just released a comprehensive report on the 2017 Equifax hack. It’s a great piece of writing, with a detailed timeline, root cause analysis, and lessons learned. Lance Spitzner also commented on this. Here is my testimony before before the House Subcommittee on Digital Commerce and Consumer Protection last… Continue reading Congressional Report on the 2017 Equifax Data Breach→

How to Punish Cybercriminals

Posted on by

Interesting policy paper by Third Way: "To Catch a Hacker: Toward a comprehensive strategy to identify, pursue, and punish malicious cyber actors": In this paper, we argue that the United States currently lacks a comprehensive overarching strategic approach to identify, stop and punish cyberattackers. We show that: There is a burgeoning cybercrime wave: A rising and often unseen crime wave… Continue reading How to Punish Cybercriminals→

Netsparker’s Web Security Scan Statistics for 2018

Posted on by

On average, the online edition of the Netsparker web security solution identifies a vulnerability every 4.59 minutes. Since its launch in early 2015 it identified a total of 156,904 security issues. Since the beginning of this year until the fifth of O… Continue reading Netsparker’s Web Security Scan Statistics for 2018→

Security Vulnerabilities in US Weapons Systems

Posted on by

The US Government Accounting Office just published a new report: "Weapons Systems Cyber Security: DOD Just Beginning to Grapple with Scale of Vulnerabilities" (summary here). The upshot won’t be a surprise to any of my regular readers: they’re … Continue reading Security Vulnerabilities in US Weapons Systems→

Security Vulnerabilities in US Weapons Systems

Posted on by

The US Government Accounting Office just published a new report: "Weapons Systems Cyber Security: DOD Just Beginning to Grapple with Scale of Vulnerabilities" (summary here). The upshot won’t be a surprise to any of my regular readers: they’re … Continue reading Security Vulnerabilities in US Weapons Systems→

Security Vulnerabilities in US Weapons Systems

Posted on by

The US Government Accounting Office just published a new report: "Weapons Systems Cyber Security: DOD Just Beginning to Grapple with Scale of Vulnerabilities" (summary here). The upshot won’t be a surprise to any of my regular readers: they’re vulnerable. From the summary: Automation and connectivity are fundamental enablers of DOD’s modern military capabilities. However, they make weapon systems more vulnerable… Continue reading Security Vulnerabilities in US Weapons Systems→

The Impossible Job: Inside Facebook’s Struggle to Moderate Two Billion People

Posted on by

Moderating billions of posts a week in more than a hundred languages has become Facebook’s biggest challenge. Leaked documents and nearly two dozen interviews show how the company hopes to solve it. Continue reading The Impossible Job: Inside Facebook’s Struggle to Moderate Two Billion People→