3 Lessons Learned in Vulnerability Management
January 17 2023In 2022, multiple high-profile vulnerabilities like Log4j and OpenSSL provided important takeaways for future public reporting.
Read more3 Lessons Learned in Vulnerability Management
January 17 2023In 2022, multiple high-profile vulnerabilities like Log4j and OpenSSL provided important takeaways for future public reporting.
Read moreThe FBI Identified a Tor User
January 17 2023No details, though:
According to the complaint against him, Al-Azhari allegedly visited a dark web site that hosts “unofficial propaganda and photographs related to ISIS” multiple times on May...
Read more
216 questioned, 15 arrested, 4 fake call centres searched, millions seized...
Read moreThe Dangers of Default Cloud Configurations
January 16 2023Default settings can leave blind spots but avoiding this issue can be done.
Read moreJava, .NET Developers Prone to More Frequent Vulnerabilities
January 16 2023About three-quarters of Java and .NET applications have vulnerabilities from the OWASP Top 10 list, while only 55% of JavaScript codebases have such flaws, according to testing data.
Read moreHacked Cellebrite and MSAB Software Released
January 16 2023Cellebrite is an cyberweapons arms manufacturer that sells smartphone forensic software to governments around the world. MSAB is a Swedish company that does the same thing. Someone has released...
Read moreUpcoming Speaking Engagements
January 15 2023This is a current list of where and when I am scheduled to speak: I’m speaking at Capricon, a four-day science fiction convention in Chicago. My talk is on “The...
Read moreBooklist Review of A Hacker’s Mind
January 15 2023Booklist reviews A Hacker’s Mind:
Author and public-interest security technologist Schneier (Data and Goliath, 2015) defines a “hack” as an activity allowed by a system “that subverts the rules...
Read more
Why Mean Time to Repair Is Not Always A Useful Security Metric
January 14 2023Analyzing and learning from incidents is the ideal path to finding more insightful data and metrics, according to the VOID report.
Read more
Recent Comments