Fraud Campaign Targets Russians with Fake Olympics Tickets
Operation Ticket Heist involves 700 web domains to sell fake Olympic Games tickets to a Russian-speaking audience, QuoIntelligence has found
Month: July 2024
How Does Jailbreaking Or Rooting Affect My Mobile Device Security?
In today’s interconnected world, our mobile devices serve as essential tools for communication, productivity, and entertainment. However, for some tech-savvy…
The post How Does Jailbreaking Or Rooting Affect My Mobile Device Security? appeared first on McAfee Blog.
Ransomware Surges Annually Despite Law Enforcement Takedowns
Symantec figures suggest a 9% annual increase claimed ransomware attacks
The Supreme Court’s Immunity Ruling: “No One Can Guarantee that Trump Is the Last Maniacal Sociopath Who Will Want Power in America”
Renowned Harvard law professor Laurence Tribe is appalled by the recent Supreme Court ruling granting U.S. presidents immunity for “official acts.” He believes the step to a dictatorship is a small one.
Huione Guarantee Marketplace Exposed as Front for Cybercrime
Researchers at Elliptic claim multibillion dollar Huione Guarantee platform is enabler of scams and money laundering
Former Saudi Intelligence Chief: “We Have Nothing to Apologize For”
Saudi Prince Turki bin Faisal has long been explaining his country to outside observers. In an interview, he discusses the war in Gaza, the possible return of Donald Trump and women’s rights in Saudi Arabia.
Defensive Security Podcast Episode 272
On episode 272 of the Defensive Security Podcast, hosts Jerry Bell and Andrew Kalat discuss a variety of pressing cybersecurity topics. These include the responsibilities of CISOs in avoiding legal repercussions following data breaches, highlighted by the case of Uber’s former CISO, Joe Sullivan. The hosts also delve into the impact of the recent U.S. Supreme Court decision overturning the Chevron deference doctrine on cybersecurity regulations, the risk of dynamic loading of JavaScript libraries, and the wide-reaching implications of the OpenSSH regression vulnerability. Throughout, practical advice and insightful commentary are provided on maintaining security in an ever-evolving threat landscape.
00:00 Introduction and Episode Overview
01:08 CISO’s Guide to Avoiding Jail After a Breach
03:29 Challenges and Complexities of the CISO Role
13:35 US Supreme Court Ruling and Its Impact on Cyber Regulation
20:51 Polyfill.io Issue: A Modern Supply Chain Attack?
28:54 Understanding Polyfill Confusion and Risks
29:23 Maintaining Open Source Software Health
30:04 The Need for Open Source Health Ratings
30:41 Challenges with Third-Party Code and Security
34:08 Vendor Questionnaires and False Urgency
39:50 The Regression Vulnerability in OpenSSH
41:18 Cloud Security Best Practices
48:29 Final Thoughts and Recommendations
49:52 Conclusion and Farewell
An In-Depth Look at Crypto-Crime in 2023 Part 2
In 2023, the cryptocurrency industry faced a significant increase in illicit activities, including money laundering, fraud, and ransomware attacks. Ransomware attacks were especially prevalent and profitable for attackers. However, other forms of crimi…
Quantifying the Probability of Flaws in Open Source
Jay Jacobs and I recently delivered an RSA presentation called Quantifying the Probability of Flaws in Open Source. Since many people didn’t get a chance to see it, I thought I’d summarize some of the findings here for posterity.
The question we invest…
Resource Guide: Vulnerability Scans and Approved Scanning Vendors
The PCI Data Security Standard (PCI DSS) has long included requirements for external vulnerability scans conducted by PCI Approved Scanning Vendors (ASVs), and these requirements have also been included in prior versions of some Self-Assessm…