The Security Ledger

JANUARY 9, 2020

Weak, stolen or reused passwords are the root of 8 in 10 data breaches. Fixing the data breach problem means abandoning passwords for something more secure. But what does passwordless authentication even look like? Yaser Masoudnia, the Senior Director Product Management, Identity Access Management, at LogMeIn* takes us there. The post Eliminate. Read the whole entry. » Related Stories Explained: Two-Factor vs.

Passwords 98

Passwords Data breaches Authentication Risk 98

Data Breach Today

JANUARY 8, 2020

UAE Green Lights All-Access Social Messaging App, Blocks Rivals Not even George Orwell could have predicted nation-state surveillance in the 21st century. Give us free instant messaging for our smartphones, and faster than you can say "viral kitten video," we're collectively part of a mass surveillance nightmare. Case in point: The ToTok social messaging app.

Access 182

Access 182

Dark Reading

JANUARY 8, 2020

No-code and low-code development platforms are part of application development, but there are keys to making sure that they don't leave security behind with traditional coding.

Security 60

Security 60

Threatpost

JANUARY 8, 2020

Project Zero vulnerability disclosures will now happen at 90 days, even if a patch becomes available before then.

55

55

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

IT Governance

JANUARY 9, 2020

Almost everyone wants to know what the future has in store – particularly when it comes to cyber security. Keeping aware of the latest cyber threats and the best solutions to combat them will put organisations in a better position to prevent attacks. With that in mind, Geraint Williams, IT Governance’s chief information security officer, discusses his cyber security predictions in the upcoming year.

Security 98

Security IoT Phishing Ransomware 98

Data Breach Today

JANUARY 10, 2020

But Electric Sector, Driven by Regulators, Has Been Adapting, Experts Say Hackers have been increasingly probing the North American power grid for weaknesses, but the industry - driven in part by regulators - is increasingly able to identify and repel attackers, industrial cybersecurity experts say.

Cybersecurity 246

Cybersecurity 246

erwin

JANUARY 9, 2020

Enterprises are trying to manage data chaos. They might have 300 applications, with 50 different databases and a different schema for each one. They also face increasing regulatory pressure because of global data regulations , such as the European Union’s General Data Protection Regulation (GDPR) and the new California Consumer Privacy Act (CCPA), that went into effect last week on Jan. 1.

Government 144

Government Metadata Unstructured data GDPR 144

Reltio

JANUARY 9, 2020

Customer experience trends might change from time to time, but the central component remains steady: The customer must be at the heart of every business decision that you make. In B. Joseph Pine and James G. Gilmore’s seminal 1999 book, The Experience Economy , they predicted a new economic era in which businesses would shift their focus from creating products or services to delivering memorable experiences to their customers.

Customer Experience 109

Customer Experience Digital transformation Healthcare Communications 109

Krebs on Security

JANUARY 6, 2020

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint.

Passwords 230

Passwords Ransomware Authentication Communications 230

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Cloud

Data Breach Today

JANUARY 9, 2020

20,000 Hacked MikroTik Routers in Southeast Asia Were Malware-Infected Nearly 16,000 malware-infected MicroTik routers in Southeast Asia have been scrubbed of Coinhive cryptojacking code, which mines for monero, thanks to an international police operation. Globally, however, 26,000 MicroTik routers reportedly remain infected with the stealth monero-mining code.

Mining 242

Mining 242

Jamf

JANUARY 6, 2020

Jamf CEO, Dean Hager, highlights four areas where he sees the technology industry expanding in 2020. Read this blog for full details.

104

104

Micro Focus

JANUARY 9, 2020

As a native Texan, I am excited to help host this event in my backyard of Fort Worth, Texas, on February 23-28. A short drive to the venue beats a long flight hands down. Why ‘Cowtown’? Fort Worth got its nickname “Cowtown” in the 1800s as it became the center of the cattle drives, and. View Article.

IT 101

IT 101

Krebs on Security

JANUARY 10, 2020

Federal investigators on Friday arrested a Virginia man accused of being part of a neo-Nazi group that targeted hundreds of people in “swatting” attacks, wherein fake bomb threats, hostage situations and other violent scenarios were phoned in to police as part of a scheme to trick them into visiting potentially deadly force on a target’s address.

Computer and Electronics 201

Computer and Electronics Cybersecurity IT Security 201

Advertisement

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

Data Breach Today

JANUARY 10, 2020

Congress Wants Security Vulnerabilities Addressed to Thwart Foreign Interference The CEOs of the three largest voting machine manufacturers testified before a U.S. Congressional committee that they would be open to greater federal oversight of their equipment to help ensure the security of voting data in upcoming elections, including the 2020 presidential contest.

Manufacturing 239

Manufacturing Security 239

Dark Reading

JANUARY 9, 2020

Researchers found unremovable malware preinstalled in the Unimax U686CL, a budget Android device sold by Assurance Wireless.

Government 100

Government 100

IBM Big Data Hub

JANUARY 10, 2020

AutoAI, a feature of IBM Watson Studio, helps application developers and data scientists work in concert to increase yields for model and app investments, and orchestrate ModelOps with DevOps.

Digital transformation 100

Digital transformation 100

WIRED Threat Level

JANUARY 9, 2020

A state-sponsored group called Magnallium has been probing American electric utilities for the past year.

Passwords 99

Passwords Security 99

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

IT

Data Breach Today

JANUARY 6, 2020

Ryuk Attack on DCH Health System Disrupted Patient Care Last Fall A lawsuit filed against DCH Health System in the wake of a ransomware attack that disrupted medical services for several days alleges that the Alabama-based organization failed "to properly maintain and safeguard its computer systems and data.

Ransomware 204

Ransomware IT 204

The Guardian Data Protection

JANUARY 9, 2020

Dutch Liberal MEP Sophie in ’t Veld says leaked report revealed ‘violations and abuse’ The British government has been accused of “behaving like a bunch of cowboys” after a confidential report revealed it had allowed illegal copying of an EU database. The issue, discussed publicly for the first time on Thursday, threatens to sour talks on the post-Brexit relationship between the UK and the EU, despite hopes on both sides for close ties in fighting crime and terrorism.

Government 98

Government IT 98

Security Affairs

JANUARY 8, 2020

MITRE announced the initial release of a version of its MITRE ATT&CK knowledge base that focuses on industrial control systems (ICS). MITRE’s ATT&CK framework is becoming a standard in cybersecurity community for the classification of attacker behavior. Now the organization is going to propose a knowledge base that focused on ICS systems for its MITRE’s ATT&CK. “ ATT&CK for ICS is a knowledge base useful for describing the actions an adversary may take while operatin

Cybersecurity 98

Cybersecurity Risk Security IT 98

WIRED Threat Level

JANUARY 4, 2020

Router security has improved a bunch in recent years, but there are still steps you can take to lock yours down even better.

Security 99

Security 99

Speaker: Anindo Banerjea, CTO at Civio & Tony Karrer, CTO at Aggregage

When developing a Gen AI application, one of the most significant challenges is improving accuracy. This can be especially difficult when working with a large data corpus, and as the complexity of the task increases. The number of use cases/corner cases that the system is expected to handle essentially explodes. 💥 Anindo Banerjea is here to showcase his significant experience building AI/ML SaaS applications as he walks us through the current problems his company, Civio, is solving.

Data Breach Today

JANUARY 8, 2020

Request Echoes 2016 Legal Standoff Between Apple and the FBI The FBI has sent a letter to Apple asking for help in accessing encrypted data from two iPhones belonging to a deceased shooter. The bureau's move may be a prelude to another legal fight between the FBI and Apple over strong encryption.

Access 195

Access Encryption 195

Jamf

JANUARY 9, 2020

Our newest version of Jamf Pro will integrate Jamf Pro and Jamf Connect, offer native Office 365 management and includes Cloud Connector: simplifying Azure integration.

Cloud 96

Cloud 96

Security Affairs

JANUARY 7, 2020

Security experts have found a malicious app in the Google Play that exploits the recently patched CVE-2019-2215 zero-day vulnerability. Earlier October, Google Project Zero researchers Maddie Stone publicly disclosed a zero-day vulnerability , tracked as CVE-2019-2215 , in Android. Maddie Stone published technical details and a proof-of-concept exploit for the high-severity security vulnerability, seven days after she reported it to the colleagues of the Android security team.

Encryption 98

Encryption Access Military Marketing 98

WIRED Threat Level

JANUARY 8, 2020

The US has operated an extensive network of missile warning systems for over half a century, but next-generation missiles will put it to the test.

IT 98

IT Security 98

Advertisement

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

Cloud

Data Breach Today

JANUARY 7, 2020

Pulse Secure Says Critical April 2019 Patch Protects Against Sodinokibi Too Attackers are hitting unpatched Pulse Secure VPN servers with Sodinokibi - aka REvil - ransomware, British security researcher Kevin Beaumont warns. Pulse Secure says that although many organizations have installed the critical April 2019 patch, holdouts persist.

Ransomware 189

Ransomware Security 189

Jamf

JANUARY 9, 2020

For the first time, Jamf Connect configurations are available in Jamf Pro. Combine powerful IT workflows, streamlined Mac authentication and identity management into one integrated experience.

Authentication 93

Authentication IT 93

Security Affairs

JANUARY 10, 2020

The US DHS CISA agency is warning organizations that threat actors continue to exploit the CVE-2019-11510 Pulse Secure VPN vulnerability. The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) is warning organizations that attackers continue to exploit the well known Pulse Secure VPN vulnerability tracked as CVE-2019-11510.

Security 98

Security Cybersecurity Access Ransomware 98