Recent Google News
-
Micro Focus moves for cyber security protection firm - Insider MediaFebruary 20, 2019
-
Cisco launches co-innovation centre and cybersecurity CoE in Singapore - Human Resources OnlineFebruary 20, 2019
-
2019 cyber security: More of the same or worse? - ITWebFebruary 20, 2019
-
OPINION: Students should be more concerned with cybersecurity - N.C. State University Technician OnlineFebruary 20, 2019
-
Fed Circuit backs invalidation of 'abstract' cybersecurity patents - ReutersFebruary 20, 2019
Latest Episode 12/29/2018
Brian Krebs
-
A Deep Dive on the Recent Widespread DNS Hijacking AttacksThe U.S. government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon h ...
Newsletter
ThreatPost.com
-
Microsoft to Kill Updates for Legacy OS Using SHA-1Windows 7 and Windows Server 2008 users are being asked to upgrade their encryption support.
Andrew Hay
-
Do You Suffer From Breach Optimism Bias?Optimism bias is the belief that each of us is more likely to experience good outcomes and less likely to experience bad outcomes. How prevalent is this in the cybersecurity industry? If you're a salty security professional like me, you already know the answer. ...
Adam Shostck
-
Dolphins and PufferfishApparently, “Dolphins Seem to Use Toxic Pufferfish to Get High.” Of course, pufferfish toxins are also part of why the fish is a delicacy in Japan. It just goes to show that nature finds its own, chaotic, uses for things.
Subscribe
Dan Kaminsky
-
Hacking the Universe with Quantum EncraptionLadies and Gentlemen of the Quantum Physics Community: I want you to make a Pseudorandom Number Generator! And why not! I’m just a crypto nerd working on computers, I only get a few discrete bits and a handful of mathematical operations. You have such an enormous bag of tricks to work with! You’ve got […]
Elie Bursztein
-
Account security - a divided user perceptionThis post considers the perception clash that exists between what users perceive to be their most v ...
Graham Cluley
-
Why real-time intelligence matters for managing third-party risk
Graham Cluley Security News is sponsored this week by the folks at Recorded Future. Thanks to the great team there for their support!
As leading companies in every industry today are undergoing digital transformation, the lines are blurring between any one organization and its partners, suppliers, vendors, and other third parties.
In this new report, ESG examines how these business relationships can introduce new risks that need to be identified and managed “as if these third parties were part of the enterprise itself.”
Download your copy now of “Third-Party Risk: Why Real-Time Intelligence Matters”
About Recorded Future
Recorded Future delivers the only complete threat intelligence solution powered by patented machine learning to lower risk. We empower organizations to reveal unknown threats before they impact business, and enable teams to respond to alerts 10 times faster. To supercharge the efforts of security teams, our technology automatically collects and analyzes intelligence from technical, open web, and dark web sources and aggregates customer-proprietary data.
Recorded Future delivers more context than threat feeds, updates in real time so intelligence stays relevant, and centralizes information ready for human analysis, collaboration, and integration with security technologies. 91 percent of the Fortune 100 use Recorded Future.
If you’re interested in sponsoring my site for a week, and reaching an IT-savvy audience that cares about computer security, you can find more information here.
Hacking Articles
-
TrevorC2 – Command and Control
TrevorC2 is command and control framework. It is a client/server model which works through a browser masquerading as C2 tool. It works on different time intervals which makes it almost impossible to be detected. This tool is coded in python but it’s also compatible with c#, PowerShell, or any other platform. this is supported by... Continue reading →
The post TrevorC2 – Command and Control appeared first on Hacking Articles.
Holistic InfoSec
-
Moving blog to HolisticInfoSec.iotoolsmith and HolisticInfoSec have moved.I've decided to consolidate all content on one platform, namely an R markdown blogdown site running with Hugo for static HTML creation. My frustration with Blo ...
Blogroll
- Akamai
- Andrew Hay
- Ars Technica
- BH Consulting IT Security Watch
- Bleeping Computer
- Brian Krebs
- Check Point Software
- CIO
- CSO Online
- Dark Reading
- Dr. Eric Cole
- Errata Security
- FocusPoint Technologies
- Forbes
- Fox IT Security Blog
- Google Online Security Blog
- Graham Cluley
- Help Net Security
- Hot For Security
- InfoSecurity Magazine
- IT Pro Portal
- IT Security
- Kaspersky Labs
- Kevin Townsend’s IT Security
- Liquidmatrix Security Digest
- Malwarebytes Labs
- Mashable
- McGrew Security
- Motherboard Vice
- Naked Security Blog
- Network Computing
- Palo Alto Networks
- Paul’s Security Weekly
- PCMag’s Security Watch
- Peerlyst
- Privacy Paradox from Lawfare
- SANS Institute AppSec Blog
- SC Magazine
- Schneier on Security
- Security Affairs
- Security Bloggers Network
- Security Ledger
- Securosis
- Softpedia
- Tao Security
- Techcrunch
- TechRepublic
- Techworld Security
- The Guardian Information Security Hub
- The Hacker News
- The Register
- ThreatTrack Security
- Troy Hunt
- Wired
- Wombat Security Blog
- Zero Day
Tripwire.com
-
Decryptor Now Available for Files Affected by GandCrab Ransomware v5.1Researchers have released an updated decryptor that allows victims of GandCrab ransomware version 5.1 to recover their affected files for free. On 19 February, Bitdefender announced that they had deve ...
Jeff Soh
-
Parrot SecurityKali is by far the most well known and widely adopted penetration testing framework, but another contender is gaining popularity. Parrot Security ...
Liquidmatrix
-
Having The Security Rug Pulled Out From Under You
Apache .htaccess changes led to arbitrary file upload vulnerabilities in jQuery project I attended the Messaging, Malware and Mobile Anti-Abuse Working Group (m3aawg.org) meeting in Brooklyn, NY. I expected better weather to wander around the city while enjoying the conference and the neighborhood’s wide selection of food. I had been so confident of clear skies […]
The post Having The Security Rug Pulled Out From Under You appeared first on Liquidmatrix Security Digest.
Marco Ramilli
-
Moving to marcoramilli.comAfter more then 10 years on this amazing platform I decided to move forward to a professional blogging platform. I've reached hundred of thousan ...
Matt Flynn
-
Improve Security by Thinking Beyond the Security RealmIt used to be that dairy farmers relied on whatever was growing in the area to feed their cattle. They filled the trough with vegetation grown right on the farm. They probably relied heavily on whatev ...
Notice Bored
-
NBlog Feb 20 - policy governanceKaspersky blogged about security policies in the context of human factors making organizations vulnerable to malware:"In many cases, policies are written in such a difficult way that they simply canno ...
Robert Penz Blog
-
Howto install Bitwarden in a LXC container (e.g. Proxmox)As many of you know me, I’m quite serious about security and therefore a believer in the theory that a service which is not reachable (e.g. from the Internet) cannot be attacked as easily as one that it. Looking at password managers this makes choosing not that easy. Sure there is Keepass and the descendants, […]
Digital Guardian
-
Welcome Our New CEO, Mo Rosen
This is an exciting day for Digital Guardian. We’ve got a new CEO at the helm, Mo Rosen.
Roger McClinton
-
Its the most wonderful time of the year – Patching
Remember back when Summer and Christmas break was a high time of concern. The kids were out of college and ready to try out their skills. Christmas was worse because so many people were out of the office, no one would notice. Or if they did the response would be limited. Now that’s what we ...
Continue reading ‘Its the most wonderful time of the year – Patching’ »
The post Its the most wonderful time of the year – Patching appeared first on Roger's Information Security Blog.
Bruce Schneier’s blog
-
Estonia's Volunteer Cyber MilitiaInteresting -- although short and not very detailed -- article about Estonia's volunteer cyber-defense militia. Padar's militia of amateur IT workers, economists, lawyers, and other white-hat types are grouped in the city of Tartu, about 65 miles from the Russian border, and in the capital, Tallinn, about twice as far from it. The volunteers, who've inspired a handful of similar...
Security Through Education
-
Ep. 114 – Finding Love with Whitney MerrillWhat do you get when you mix a lawyer, crypto junkie and a romantic together? Well, none other than our guest for this month, Whitney Merrill. – Feb 11, 2019 Contents Download Get Involved Downl ...
TaoSecurity
-
Forcing the Adversary to Pursue Insider TheftJack Crook pointed me toward a story by Christopher Burgess about intellectual property theft by "Hongjin Tan, a 35 year old Chinese national and U.S. legal permanent resident... [who] ...
Tech Wreck InfoSec Blog
Naked Security
-
Facebook flaw could have allowed an attacker to hijack accountsThe CSRF bypass flaw has now been fixed, and the researcher who discovered it has netted $25,000. ...
Troy Hunt
-
Weekly Update 126
Another week, another conference. This time it was Microsoft Ignite in Sydney and as tends to happen at these events, many casual meetups, chats, beers, selfies, delivery of HIBP stickers and an all-round good time, albeit an exhausting one. That's why I'm a day late this week having finally arrived
Uncommon Sense Security
-
Blog-ified TweetstormI dumped this on Twitter as a tweetstorm, but it is worth sharing here in one place. Those who have followed me for a while have probably noticed that I rarely get technical here anymore. My world, a ...
FocusPoint Blog Posts
-
IoT Evolution, Revolution or Confusion?The IoT (Internet of Things) evolution is occurring in business and personal lives, the revolution is amazing as it transforms the way we think and act, and the confusion around how to secure IoT is r ...
-
Is Identity the New Perimeter in Security?I’ve recently heard the phrase, “identity is the new perimeter” as it relates to information security. That said, I’ve also heard the same about endpoints, artificial intelligence, email, you ...
-
Saving Money AND Maturing Security? Tell Me How!When it comes to mitigating risk in your organization, cyber security is one of the most important issues. Most of us have sat through painful sales pitches, where things are said like "100% secure." ...
Privacy Rights
Most Important Cyber Stories Per Month
Dark Reading
- 'Formjacking' Compromises 4,800 Sites Per Month. Could Yours Be One?
- North Korea's Lazarus Group Targets Russian Companies For First Time
- Google Research: No Simple Fix For Spectre-Class Vulnerabilities
- 19 Minutes to Escalation: Russian Hackers Move the Fastest
- Making the Case for a Cybersecurity Moon Shot
- 6 Tax Season Tips for Security Pros
- Breach in Stanford System Exposes Student Records
- Palo Alto Networks to Buy Demisto for $560M
- Security Leaders Are Fallible, Too
- Privacy Ops: The New Nexus for CISOs & DPOs
Newsletter
Recent Posts
- PM Reveals Parliament Cyber Attack Happened Because Nobody Updated Norton Internet Security February 18, 2019
- New Exploit Threatens Over 9,000 Hackable Cisco RV320/RV325 Routers Worldwide January 28, 2019
- 12 Characteristics Of People Who Have True Integrity | Love Unconditionally January 11, 2019
- Someone is trying to take entire countries offline and cybersecurity experts say ‘it’s a matter of time because it’s really easy’ December 29, 2018
- 2019: The Year Ahead in Cybersecurity December 25, 2018
Thank you!
— briankrebs (@briankrebs) July 30, 2018
TheCyberChronicle.com Voted One Of The Top 10 Cyber Security News Sites
