Microsoft Confirms Lapsus$ Hacker Group Gained “Limited Access” to Its Source Code
Microsoft has confirmed that the hacking group Lapsus$ managed to… Continue reading Microsoft Confirms Lapsus$ Hacker Group Gained “Limited Access” to Its Source Code
Category Archives: Secuirty
Do Security Cameras Undermine your Authentication?
For various reasons, many executives and senior team members with privileged status on the network and/or access to financial assets oftentimes need to access corporate IT systems from a public place outside the office. What is very common in these typ… Continue reading Do Security Cameras Undermine your Authentication?
Introducing Zombie POODLE and GOLDENDOODLE
I’m excited to announce that I will be presenting at this year’s Black Hat Asia about my research into detecting and exploiting CBC padding oracles! Zombie POODLE and GOLDENDOODLE are the names I’ve given to the vulnerabilities I̵… Continue reading Introducing Zombie POODLE and GOLDENDOODLE
Using ATT&CK As a Teacher
Over the past few years, I’ve had the pleasure of welcoming interns on our security research team. One of my goals was to pass on knowledge of security to these folks and pique their interest in (a career in) security. The goal of any teache… Continue reading Using ATT&CK As a Teacher
The Revenge of the AI Assistants
Disclaimer: Due to a lack of originality over at Google, it’s difficult to anthropomorphize Google Assistant, so our story will be limited to Siri, Alexa and Cortana. Secondary Disclaimer: The horror begins now! As we hit Halloween, I couldn̵… Continue reading The Revenge of the AI Assistants
ICS Security: The European Perspective
ICS security is concerned with securing and safeguarding industrial control systems, keeping processes and machinery running smoothly, and ensuring that the information and data shown on the control room dashboards and screens are accurate. Like every … Continue reading ICS Security: The European Perspective
Senator calls on US Government to start killing Adobe Flash now
For some companies eradicating Adobe Flash content is going to be a significant job. And it may be an even bigger challenge for very large organisations, such as the US Government.
The post Senator calls on US Government to start killing Adobe Flash n… Continue reading Senator calls on US Government to start killing Adobe Flash now
Survey: Only Four Percent of U.S. Adults are Concerned about Cybersecurity during Summer Vacation
This summer, my family and I visited a few Arizona ghost towns, and the experience made me wonder what it might have been like to travel across the Old West with all your possessions in tow. What would it feel like to ride through m… Continue reading Survey: Only Four Percent of U.S. Adults are Concerned about Cybersecurity during Summer Vacation
The Current State of Connected Cars: Can we be Secure?
As certain as the changing of the seasons, the drive toward autonomous cars is gaining pace. Changes in the car industry clearly demonstrate that the way we use our vehicles is evolving. In an increasingly connected world, our cars are becoming an impo… Continue reading The Current State of Connected Cars: Can we be Secure?
Intent Vs Reality: Obstacles Keeping the Sec out of DevOps
The DevOps culture and practice has been sweeping rapidly through the technical community. Combining “Development” and “Operations” roles with automation and monitoring leads to numerous benefits, including faster time to market… Continue reading Intent Vs Reality: Obstacles Keeping the Sec out of DevOps