Remotely Stopping Polish Trains
August 28 2023Turns out that it’s easy to broadcast radio commands that force Polish trains to stop:
…the saboteurs appear to have sent simple so-called “radio-stop” commands via radio frequency to...
Read more
White House Announces AI Cybersecurity Challenge
August 21 2023At Black Hat last week, the White House announced an AI Cyber Challenge. Gizmodo reports:
The new AI cyber challenge (which is being abbreviated “AIxCC”) will have a...
Read more
China Hacked Japan’s Military Networks
August 14 2023The NSA discovered the intrusion in 2020—we don’t know how—and alerted the Japanese. The Washington Post has the story:
The hackers had deep, persistent access and appeared to be...
Read more
Microsoft Signing Key Stolen by Chinese
August 7 2023A bunch of networks, including US Government networks, have been hacked by the Chinese. The hackers used forged authentication tokens to access user email, using a stolen...
Read moreNew SEC Rules around Cybersecurity Incident Disclosures
August 2 2023The US Securities and Exchange Commission adopted final rules around the disclosure of cybersecurity incidents. There are two basic rules:
- Public companies must “disclose any cybersecurity incident they determine... Read more
The Atlantic Council released a detailed commentary on the White House’s new “Implementation Plan for the 2023 US National Cybersecurity Strategy.” Lots of interesting bits.
So far, at least...
Read more
Security and Human Behavior (SHB) 2023
June 17 2023I’m just back from the sixteenth Workshop on Security and Human Behavior, hosted by Alessandro Acquisti at Carnegie Mellon University in Pittsburgh.
SHB is a small, annual, invitational workshop...
Read moreNew paper: “Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys“:
Abstract: Incident Response (IR) allows victim firms to detect, contain, and recover from security...
Read more
The Software-Defined Car
June 5 2023Developers are starting to talk about the software-defined car.
For decades, features have accumulated like cruft in new vehicles: a box here to control the antilock brakes, a module...
Read more
Security Risks of New .zip and .mov Domains
May 19 2023Researchers are worried about Google’s .zip and .mov domains, because they are confusing. Mistaking a URL for a filename could be a security vulnerability.
Read more
Recent Comments