Collaborate Disseminate
The Jmail Breaker attack leverages an old vulnerability in Joomla! along with a newly found flaw in the mail module. Continue reading RSAC 2019: Joomla! Mail Flaw Exploited to Create Mass Phishing Infrastructure
Consumer confidence in companies keeping their data safe is at an all-time low, but password hygiene and not reading EULAs and app permissions remain big problems. Continue reading RSAC 2019: Most Consumers Say ‘No’ to Cumbersome Data Privacy Practices
Raoul Strackx, one of the researchers who discovered the Foreshadow speculative execution vulnerability, talks at RSA about the Catch-22 issue when it comes to fixing speculative execution flaws. Continue reading RSAC 2019: Picking Apart the Foreshadow Attack
At least 463,546 malicious URLs contained in the 28.4 million analyzed emails made it through to corporate in-boxes in Q4 of 2018. Continue reading RSAC 2019: Malicious Emailed URLs See Triple-Digit Increase
Researchers say that Microsoft won’t issue a patch for the issue. Continue reading RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
The workforce and skills gap in cybersecurity continues to plague organizations. Continue reading RSAC 2019: 58% of Orgs Have Unfilled Cyber Positions
A proof-of-concept hack allows adversaries to tweak old exploits, have code jump containers and attack underlying infrastructure. Continue reading Container Escape Hack Targets Vulnerable Linux Kernel
This Thursday, March 7, 2019, I’ll be facilitating a Learning Lab titled Fine Tuning Your Cyber-Defense Technologies with the ATT&CK Framework at the 2019 RSA Conference in San Francisco, CA. This will be my fourth time speaking at RSA, and t… Continue reading Fine-Tuning Cybersecurity with the ATT&CK Framework
As many ponder the big ethical questions around cyber, some are proposing public interest technologist as a solution. Continue reading RSAC 2019: An Antidote for Tech Gone Wrong
New look at server data behind a previously-identified espionage campaign shows that it has exceeded researchers’ expectations in complexity, scope and breadth. Continue reading RSAC 2019: New Operation Sharpshooter Data Reveals Higher Complexity, Scope