Recent Google News
-
Cyber security training centre to fuel growing industry - The Lead South AustraliaNovember 13, 2019
-
Cyber security conference motivates students to career path - KTBSNovember 12, 2019
-
PNGISD technology held for ransom; forensic & cyber security specialists involved - Port Arthur News - The Port Arthur NewsNovember 12, 2019
-
Hofstra flips switch on next-level cybersecurity center - Innovate Long IslandNovember 12, 2019
-
Firm Cybersecurity: Professional Services Firms are Vulnerable Targets - Security BoulevardNovember 12, 2019
Latest Episode 6/23/2019
Brian Krebs
-
Patch Tuesday, November 2019 EditionMicrosoft today released updates to plug security holes in its software, including patches to fix at least 74 weaknesses in various flavors of Windows and in software that runs on top of it. The Novem ...
Newsletter
ThreatPost.com
-
Insider Threats, a Cybercriminal Favorite, Not Easy to MitigateRogue employees -- not just external threat groups -- pose a formidable threat to incident response teams.
Andrew Hay
-
Do You Suffer From Breach Optimism Bias?Optimism bias is the belief that each of us is more likely to experience good outcomes and less likely to experience bad outcomes. How prevalent is this in the cybersecurity industry? If you're a salty security professional like me, you already know the answer. ...
Adam Shostck
-
Message Sequence ChartsI was not aware that the ITU had formalized swim lane diagrams into Message Sequence Charts. While you don’t need to use these formalizations, the choices they made, and the comparisons to UML’s diagrams can be interesting, especially if there are tricky corners where you’re having trouble modeling some flow. For example, “They work particularly…
Subscribe
Dan Kaminsky
-
Hacking the Universe with Quantum EncraptionLadies and Gentlemen of the Quantum Physics Community: I want you to make a Pseudorandom Number Generator! And why not! I’m just a crypto nerd working on computers, I only get a few discrete bits and a handful of mathematical operations. You have such an enormous bag of tricks to work with! You’ve got […]
Elie Bursztein
-
Protecting accounts from credential stuffing with password breach alertingProtecting accounts from credential stuffing attacks remains burdensome due to an asymmetry of know ...
Graham Cluley
-
Unlock the power of threat intelligence with this practical guide. Get your free copy now
Graham Cluley Security News is sponsored this week by the folks at Recorded Future. Thanks to the great team there for their support! At Recorded Future, we believe every security team can benefit from threat intelligence. That’s why we’ve published “The Threat Intelligence Handbook.” It’s aimed at helping security professionals realize the advantages of threat […]
Hacking Articles
-
HA: Chakravyuh Vulnhub Walkthrough
Today we are going to solve our Boot to Root challenge called “HA Chakravyuh”. We have developed this lab for the purpose of online penetration practices. It is based on the Mahabharat Saga’s renowned Battle Formation by the same name. Let’s Solve it!! Download Here Level: Intermediate Task: To Enumerate the Target Machine and Get... Continue reading →
The post HA: Chakravyuh Vulnhub Walkthrough appeared first on Hacking Articles.
Holistic InfoSec
-
Moving blog to HolisticInfoSec.iotoolsmith and HolisticInfoSec have moved.I've decided to consolidate all content on one platform, namely an R markdown blogdown site running with Hugo for static HTML creation. My frustration with Blo ...
Blogroll
- Akamai
- Andrew Hay
- Ars Technica
- Asher Security
- BH Consulting IT Security Watch
- Bleeping Computer
- Brian Krebs
- Check Point Software
- CIO
- CSO Online
- Dark Reading
- Dr. Eric Cole
- Errata Security
- FocusPoint Technologies
- Forbes
- Fox IT Security Blog
- Google Online Security Blog
- Graham Cluley
- Help Net Security
- Hot For Security
- InfoSecurity Magazine
- IT Pro Portal
- IT Security
- Kaspersky Labs
- Kevin Townsend’s IT Security
- Liquidmatrix Security Digest
- Malwarebytes Labs
- Mashable
- McGrew Security
- Motherboard Vice
- Naked Security Blog
- Network Computing
- Palo Alto Networks
- Paul’s Security Weekly
- PCMag’s Security Watch
- Peerlyst
- Privacy Paradox from Lawfare
- SANS Institute AppSec Blog
- SC Magazine
- Schneier on Security
- Security Affairs
- Security Bloggers Network
- Security Ledger
- Securosis
- Softpedia
- Tao Security
- Techcrunch
- TechRepublic
- Techworld Security
- The Guardian Information Security Hub
- The Hacker News
- The Register
- ThreatTrack Security
- Troy Hunt
- Wired
- Wombat Security Blog
- Zero Day
Tripwire.com
-
Mexico’s Pemex Said It Quickly Neutralized Digital AttackMexican state-owned petroleum company Petroleos Mexicanos (Pemex) said that it quickly neutralized a digital attack that struck its computer systems. In a statement released on November 11, a spokespe ...
Jeff Soh
-
Behavioral analysis versus artifacts/IOC'sMuch of our defensive architecture today is based on the ability to extract indicators of compromise from logs, packet data and flow data and the moni ...
Liquidmatrix
-
We Don’t Take Vendor Pitches
This site has been online for more than a couple decades now. I removed all advertising from the site a couple years ago to maintain as impartial of an approach as I can.
The post We Don’t Take Vendor Pitches appeared first on Liquidmatrix Security Digest.
Marco Ramilli
- Nothing to display ...
Matt Flynn
-
Improve Security by Thinking Beyond the Security RealmIt used to be that dairy farmers relied on whatever was growing in the area to feed their cattle. They filled the trough with vegetation grown right on the farm. They probably relied heavily on whatev ...
Notice Bored
-
NBlog Nov 12 - on being a professionalWhile Googling for something else entirely, I chanced across this statement from Darren on a ten year old SceptikLawer forum thread:"The essence of my job as an information security architect is to un ...
Robert Penz Blog
-
Proxmox Container with Debian 10 does not work after upgradeI just did an apt update / upgrade of a Debian 10 container and restarted it afterwards and got following: # pct start 105 Job for pve-container@105.service failed because the control process exited with error code. See "systemctl status pve-container@105.service" and "journalctl -xe" for details. command 'systemctl start pve-container@105' failed: exit code 1 with a […]
Digital Guardian
-
Senator Seeking Answers Following Medical Image Breach
In wake of a massive breach, a U.S. Senator is pressing the U.S. Department of Health and Human Services to explain how it oversees medical imaging security.
Roger McClinton
-
Beginner’s Mind
Shoshin is a word from Zen Buddhism meaning “beginner’s mind.” It refers to having an attitude of openness, eagerness, and a lack of preconceptions when studying a subject, even when studying at an advanced level. As IT people we aren’t always known for our attitude of openness, eagerness and lack of preconceptions. Its an easy ...
Continue reading ‘Beginner’s Mind’ »
The post Beginner’s Mind appeared first on Roger's Information Security Blog.
Bruce Schneier’s blog
-
Identifying and Arresting Ransomware CriminalsThe Wall Street Journal has a story about how two people were identified as the perpetrators of a ransomware scheme. They were found because -- as generally happens -- they made mistakes covering their tracks. They were investigated because they had the bad luck of locking up Washington, DC's video surveillance cameras a week before the 2017 inauguration....
Security Through Education
-
SECTF Report Release from DEF CON 27It is that time of year again—we finally recovered from DEF CON (yes it takes months), and we analyzed all the data, crunched all the numbers, and produced yet another report for your reading enjoym ...
TaoSecurity
-
Seven Security Strategies, SummarizedThis is the sort of story that starts as a comment on Twitter, then becomes a blog post when I realize I can't fit all the ideas into one or two Tweets. (You know how much I hate Tweet threads, and ho ...
Tech Wreck InfoSec Blog
Naked Security
-
Apple to fix Siri bug that exposed parts of encrypted emailsApple may care about your privacy but that doesn't mean it gets it right all the time, especially when it comes to training its Siri AI assistant. ...
Troy Hunt
-
Weekly Update 164
It's a late, early in the day, hazy, bush-firey Aussie weekly update with a whole bunch of various bits and pieces of interest from throughout the week. The references below will give you a sense of how much I've jammed into this week so I won't repeat it all here
Uncommon Sense Security
-
Blog-ified TweetstormI dumped this on Twitter as a tweetstorm, but it is worth sharing here in one place. Those who have followed me for a while have probably noticed that I rarely get technical here anymore. My world, a ...
FocusPoint Blog Posts
-
Increase ROI on User Awareness TrainingHow much risk reduction has your user awareness training provided to your organization? Tough question for most people to answer. The solution - take a baseline metric before providing the user awaren ...
-
IoT Evolution, Revolution or Confusion?The IoT (Internet of Things) evolution is occurring in business and personal lives, the revolution is amazing as it transforms the way we think and act, and the confusion around how to secure IoT is r ...
-
Is Identity the New Perimeter in Security?I’ve recently heard the phrase, “identity is the new perimeter” as it relates to information security. That said, I’ve also heard the same about endpoints, artificial intelligence, email, you ...
- Podcast 3_2_2019
[Music] welcome to the cyber Chronicles my name’s Brian Stevenson and I am your host this week is a pretty incredible episode we’re going to talk about something that impact worldwide cybersecurity we’re going to talk about latest vlog wind var we’re going to talk about turbo tax has some issues recently and new tax […]
Most Important Cyber Stories Per Month
Dark Reading
- While CISOs Fret, Business Leaders Tout Security Robustness
- Companies Increasingly Fail Interim Security Test, But Gap Narrows
- Microsoft Patches IE Zero-Day Among 74 Vulnerabilities
- The Myths of Multifactor Authentication
- New DDoS Attacks Leverage TCP Amplification
- Researchers Disclose New Vulnerabilities in Windows Drivers
- SHAKEN/STIR: Finally! A Solution to Caller ID Spoofing?
- DDoS Attack Targets UK Labour Party Weeks Ahead of Election
- Why Cyber-Risk Is a C-Suite Issue
- Researchers Find New Approach to Attacking Cloud Infrastructure
Newsletter
Recent Posts
- Exclusive: Russia carried out a ‘stunning’ breach of FBI communications system, escalating the spy game on U.S. soil September 16, 2019
- Russian hackers are infiltrating companies via the office printer August 5, 2019
- Increase ROI on User Awareness Training June 26, 2019
- Two years after WannaCry, a million computers remain at risk May 13, 2019
- Fort Bragg cut power for thousands to test ‘real-world reactions’ to a cyber-attack April 30, 2019
Thank you!
— briankrebs (@briankrebs) July 30, 2018
TheCyberChronicle.com Voted One Of The Top 10 Cyber Security News Sites
