Biden Signs New Cybersecurity Order
January 20 2025President Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide.
Some
Scams Based on Fake Google Emails
December 27 2024Scammers are hacking Google Forms to send email to victims that come from google.com. Brian Krebs reports on the effects. Boing Boing post.
Read moreSteve Bellovin’s Retirement Talk
November 21 2024Steve Bellovin is retiring. Here’s his retirement talk, reflecting on his career and what the cybersecurity field needs next.
Read moreMost of 2023’s Top Exploited Vulnerabilities Were Zero-Days
November 18 2024Zero-day vulnerabilities are more commonly used, according to the Five Eyes:
Key Findings
In 2023, malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks compared to 2022, allowing...
Read more
Everybody is reporting about a new security iPhone security feature with iOS 18: if the phone hasn’t been used for a few days, it automatically goes into its “Before...
Read moreCriminals Exploiting FBI Emergency Data Requests
November 12 2024I’ve been writing about the problem with lawful-access backdoors in encryption for decades now: that as soon as you create a mechanism for law enforcement to bypass encryption, the...
Read moreRoger Grimes on Prioritizing Cybersecurity Advice
October 31 2024This is a good point:
Part of the problem is that we are constantly handed lists…list of required controls…list of things we are being asked to fix or improve…lists...
Read more
IronNet Has Shut Down
October 11 2024After retiring in 2014 from an uncharacteristically long tenure running the NSA (and US CyberCommand), Keith Alexander founded a cybersecurity company called IronNet. At the time, he claimed that...
Read moreAn Analysis of the EU’s Cyber Resilience Act
September 26 2024A good—long, complex—analysis of the EU’s new Cyber Resilience Act.
Read more
Recent Comments