Tag Archives: Home

The Realm of Threat Intelligence – It’s all about the Packets, or is it?

Posted on by

Full Packet Capture (FPC), those three little words are enough to make most security analyst salivate at the prospect of finding and detecting attacks. Back in the days before anyone realized that you could build an Intrusion Prevention System to actually stop attacks, the Intrusion Detection System was king. If you were very lucky you…

The post The Realm of Threat Intelligence – It’s all about the Packets, or is it? appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading The Realm of Threat Intelligence – It’s all about the Packets, or is it?→

Credential Checking Services Soar in Popularity on Dark Web

Posted on by

If you’ve ever needed another reason to not recycle your passwords, I give you Sentry MBA. Although the tool has been around for a couple of years, it has recently been soaring in popularity among those in the fraud community which is no surprise with more than 1.5 billion consumer credentials breached so far this year. The…

The post Credential Checking Services Soar in Popularity on Dark Web appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading Credential Checking Services Soar in Popularity on Dark Web→

Landscape Lighting that Also Texts

Posted on by

Your local hardware store or garden supply center probably has everything you need to install landscape lighting all around your property. What’s a little less likely is coming out of that situation with fewer holes in your wallet than in your yard. And even then, it’s pretty much guaranteed that any off-the-shelf equipment won’t send you a text message when your landscape lighting isn’t working properly. [Mark]’s landscape lighting system does, though!

Powered by a Raspberry Pi, this landscape lighting system has every feature imaginable. It can turn the lighting on at sunset and turn it off at a set …read more

Continue reading Landscape Lighting that Also Texts→

Reverse Engineering and Networking The A/C Remote Control

Posted on by

IoT has become such an polarizing, overused term. But here it is in its essence: [zeroflow] had a thing (his airconditioner) and he needed to put it on the Internet.

For his contribution to this modern vernacular atrocity, he first had to build an IR debugging tool and reverse engineer the signals coming from the air conditioner’s remote. He wrote up a really good summary of the process, and worth reading. He loads up an IR library onto an Arduino and dumps the resulting 32 bits of information to his computer. In a process much like filling in the blanks …read more

Continue reading Reverse Engineering and Networking The A/C Remote Control→

Cyber Security is not for the Faint of Heart

Posted on by

It’s only midweek, but we’ve already witnessed an incredibly active week in the technology and especially the cyber security market: the closing of the Dell/EMC merger; HPE’s sale of its non-core software assets, including Arcsight, a leader in the SIEM space, to British firm Micro Focus, Intel’s sale of a majority ownership stake of McAfee…

The post Cyber Security is not for the Faint of Heart appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading Cyber Security is not for the Faint of Heart→

A New Beginning

Posted on by

Today is a new beginning for RSA as we are now a part of the collective team of Dell Technologies, the world’s largest privately controlled tech company. No doubt, many of you are asking what the impact of this merger will be to RSA. I am happy to tell you that RSA’s mission remains unchanged.…

The post A New Beginning appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading A New Beginning→

The Value of Transaction Risk Analysis for Consumer Authentication

Posted on by

The recent consultation paper set forth by the European Banking Association (EBA) surrounding the call for comments on the regulatory technical requirements for strong customer authentication under PSD2 has created a buzz.  In particular, while the EBA recognizes the “merit” of transaction risk analysis, it has called into question the ability to allow it “as…

The post The Value of Transaction Risk Analysis for Consumer Authentication appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading The Value of Transaction Risk Analysis for Consumer Authentication→

Not all IDaaS Solutions are Created Equal

Posted on by

As I talk to customers who are looking into leveraging cloud Identity services and are thinking about issues around how and where user data is stored and processed, I sometimes come across a customer who throws up their hands and says something like “the identity data is already in the cloud anyway –at the service…

The post Not all IDaaS Solutions are Created Equal appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading Not all IDaaS Solutions are Created Equal→

The Perils of Consumer Single Sign-On

Posted on by

From social media to gaming sites, every headline of a new breach makes me groan, “Time to change my password.”  It’s a begrudging task, but I still have not been pwned.  Aside from the risks associated with the common problem of password recycling among consumers, there are far too many online websites that enable consumers…

The post The Perils of Consumer Single Sign-On appeared first on Speaking of Security – The RSA Blog and Podcast.

Continue reading The Perils of Consumer Single Sign-On→