News

Cloud Data Storage Encryption and Data Protection Best Practices

• September 05, 2019 05 Sep'19

  Chronicle: Crimeware group takedowns 'increasingly ineffectual'

  Law enforcement takedowns of cybercrime operations may not be producing the desired results, according to an extensive, five-year study from Alphabet Inc.'s Chronicle.

• September 05, 2019 05 Sep'19

  Hackers earn nearly $2M in HackerOne's hacking event

  One hundred hackers and 75 hackers in training gathered in Las Vegas for HackerOne's hacking event to find security flaws in organizations, including Verizon Media and GitHub.

• September 05, 2019 05 Sep'19

  Awake Security adds adversarial model to security platform

  The new feature is meant to enable companies to identify attackers faster. Other updates to the security system include extending cloud capabilities to Amazon Web Services.

• September 04, 2019 04 Sep'19

  USBAnywhere vulnerabilities put Supermicro servers at risk

  Security researchers discovered BMC vulnerabilities -- dubbed USBAnywhere -- in Supermicro servers that could put systems at risk of remote attacks via virtualized USB drives.

• August 29, 2019 29 Aug'19

  Suspect in Capital One breach indicted for additional intrusions

  The alleged Capital One hacker, Paige Thompson, was charged with additional counts of fraud and abuse for stealing data from more than 30 other organizations.

• August 28, 2019 28 Aug'19

  Imperva security incident exposes cloud WAF customer data

  Imperva told its cloud WAF customers to change passwords and SSL certificates after a security incident exposed data and potentially put customers at risk for further attacks.

• August 28, 2019 28 Aug'19

  Breaking into cybersecurity careers through nontraditional paths

  Some DEF CON attendees discussed their nontraditional paths into cybersecurity and how networking and being eager to learn can bridge the gap between experience and job requirements.

• August 26, 2019 26 Aug'19

  Puppet launches its first vulnerability remediation product

  Puppet Remediate is a vulnerability remediation product that shares data between security and IT ops, provides risk-based prioritization and offers agentless remediation.

• August 23, 2019 23 Aug'19

  Carbon Black acquisition bolsters VMware's security play

  VMWare announced an agreement to acquire endpoint security vendor Carbon Black in an effort to boost its cloud security offerings; the all-cash deal is valued at $2.1 billion.

• August 23, 2019 23 Aug'19

  DARPA unveils first SSITH prototype to mitigate hardware flaws

  DARPA is still in the early prototype stages of its SSITH program, but the aim is to develop an open source chip able to block hardware attacks and reduce the need for software patches.

• August 20, 2019 20 Aug'19

  KNOB attack puts all Bluetooth devices at risk

  Security researchers discovered a way to force Bluetooth devices to use easy-to-crack encryption keys, which could lead to man-in-the-middle attacks and information leaks.

• August 20, 2019 20 Aug'19

  Why is patch management important?

  Borderless networks present new challenges for security pros. Andrew Froehlich explains how this trend makes patch management even more important.

• August 19, 2019 19 Aug'19

  2020 election security to face same vulnerabilities as in 2016

  Confidence in the security of the 2020 election spanned the gamut, depending on who you asked at DEF CON's Voting Village, with local officials more optimistic than technologists.

• August 14, 2019 14 Aug'19

  Microsoft discovers BlueKeep-like flaws in Remote Desktop Services

  Microsoft disclosed four remote code execution flaws in Remote Desktop Services that are similar to BlueKeep, as well as other vulnerabilities in RDP.

• August 14, 2019 14 Aug'19

  IoT botnets reach new threshold in Q2 of 2019

  Defending against the rising number and increasing sophistication of IoT botnet attacks isn't an easy task. Learn about the latest threats and the techniques to mitigate them.