Improving C++
March 15 2024C++ guru Herb Sutter writes about how we can improve the programming language for better security.
The immediate problem “is” that it’s Too Easy By Default™ to write security...
Read more
NIST Cybersecurity Framework 2.0
March 1 2024NIST has released version 2.0 of the Cybersecurity Framework:
The CSF 2.0, which supports implementation of the National Cybersecurity Strategy, has an expanded scope that goes beyond protecting...
Read more
On the Insecurity of Software Bloat
February 15 2024Good essay on software bloat and the insecurities it causes.
The world ships too much code, most of it by third parties, sometimes unintended, most of it uninspected. Because...
Read more
On Software Liabilities
February 8 2024Over on Lawfare, Jim Dempsey published a really interesting proposal for software liability: “Standard for Software Liability: Focus on the Product for Liability, Focus on the Process for...
Read moreFacebook Enables Messenger End-to-End Encryption by Default
December 11 2023It’s happened. Details here, and tech details here (for messages in transit) and here (for messages in storage) Rollout to everyone will take months, but it’s a good day for...
Read moreRansomware Gang Files SEC Complaint
November 18 2023A ransomware gang, annoyed at not being paid, filed an SEC complaint against its victim for not disclosing its security breach within the required four days.
This is over...
Read moreNew York Increases Cybersecurity Rules for Financial Companies
November 3 2023Another example of a large and influential state doing things the federal government won’t:
Boards of directors, or other senior committees, are charged with overseeing cybersecurity risk management, and...
Read more
EPA Won’t Force Water Utilities to Audit Their Cybersecurity
October 24 2023The industry pushed back:
Despite the EPA’s willingness to provide training and technical support to help states and public water system organizations implement cybersecurity surveys, the move garnered opposition...
Read more
On the Cybersecurity Jobs Shortage
September 20 2023In April, Cybersecurity Ventures reported on extreme cybersecurity job shortage:
Global cybersecurity job vacancies grew by 350 percent, from one million openings in 2013 to 3.5 million in 2021,...
Read more
Recent Comments