Blogs
Most Commented Content posted in October 2017
Ted Schlein Hates Passwords
Curt Franklin  
10/27/2017   64 comments
He hates user names, too, and thinks we should get rid of them. In a keynote address at Networking the Future in Tampa, Fla., he discussed why.
Yahoo Breach News Just Gets Worse
Curt Franklin  
10/4/2017   36 comments
It turns out that more than 3 billion accounts were compromised in the Yahoo breach originally disclosed last year.
CAPTCHA Is Vulnerable
Larry Loeb  
10/30/2017   22 comments
A group of researchers have demonstrated a vulnerability in the widely used CAPTCHA scheme – a vulnerability that may mean the end of CAPTCHA as we know it.
The Simplicity of a Wordpress Hack
Larry Loeb  
10/23/2017   18 comments
The latest Wordpress hack is serious, but it's not part of some grand conspiracy among hackers.
SONIC Quiet on Data Breach Details
Simon Marshall  
10/6/2017   10 comments
Drive-in restaurant chain SONIC has suffered a breach but customers and the public are still looking for critical details.
Necurs Malware Wants a Selfie With Your Desktop
Curt Franklin  
10/18/2017   8 comments
Necurs has returned and this time it's carrying a payload that takes a picture of your desktop.
KRACK Attack: How Enterprises Can Protect Their WiFi
Curt Franklin  
10/17/2017   7 comments
A flaw in the WPA2 protocol means that most WiFi networks worldwide are open to successful attack.
HONEST Poll Results: How Much Should You Encrypt?
Curt Franklin  
10/16/2017   6 comments
What is the 'Goldilocks Zone' when it comes to encryption? Security Now community members speak out in our latest poll.
Friday Haiku: Waves in the Harbor
Curt Franklin  
10/6/2017   5 comments
Do calm winds aloft mean peaceful waves at anchor?
Kaspersky's US Gov Woes Continue
Simon Marshall  
10/27/2017   5 comments
Kaspersky has admitted that its software grabbed a classified file from a private computer. Does it prove the US government's claims – or prove that Kaspersky is a good global citizen?
Will Transparency Save Kaspersky?
Simon Marshall  
10/25/2017   4 comments
Kaspersky is trying radical transparency to counter accusations that it acts as a front for Russian intelligence. Will it be enough to quiet the skeptics?
ShiftLeft Secures Code Pre-Threat
Simon Marshall  
10/12/2017   4 comments
Startup ShiftLeft is moving security forward in the software development lifecycle.
CLKSCREW Hack Breaks Hardware With Software
Larry Loeb  
10/5/2017   4 comments
A new technique can hack into even secure systems by overwhelming with simple commands.
Is Your Security Military-Grade?
Curt Franklin  
10/26/2017   4 comments
Simple civilian security won't cut it for most businesses. It's time to take your cybersecurity mil-spec.
CoinHive Mines New Malware Potential
Larry Loeb  
10/16/2017   3 comments
Some websites have developed a new revenue stream. Unfortunately, it involves placing malware on visitors' computers.
PoohMilk Is Advanced Spear-Phishing
Simon Marshall  
10/10/2017   3 comments
A new vulnerability in Microsoft Office means a new opportunity for phishing – and PoohMilk answers the call.
Risk & Reality Take Different Paths in Cybersecurity
Curt Franklin  
10/13/2017   3 comments
A new study by Barracuda shows once again that the reality and perception of cyberrisks are two very different things.
A New BotNet Is Growing: Are You Already Part of Its Army?
Curt Franklin  
10/24/2017   3 comments
The IoT_Reaper botnet is new and growing. Are your IoT devices already part of a criminal system that will cripple the Internet?
Bad Rabbit Breeds Ransomware Fears
Curt Franklin  
10/25/2017   2 comments
A new breed of ransomware has hit Russia and Eastern Europe. Bad Rabbit could hop the Atlantic and wreak havoc on North American systems.
Ted Schlein: Interview With a Capitalist
Curt Franklin  
10/31/2017   2 comments
Ted Schlein is a partner with the most storied venture capital fund in Silicon Valley. When Ted talks about cybersecurity, people listen.
Security Fails in Third-Party Hands
Larry Loeb  
10/2/2017   2 comments
Your security may rest in the hands of a third party – and those hands will probably let you down.
You Must Know Blockchain
Curt Franklin  
10/23/2017   2 comments
Even if you're not planning to use it any time soon, the signs are clear: You must know the technology of blockchain.
A Month for Cybersecurity
Simon Marshall  
10/3/2017   2 comments
It's National Cybersecurity Awareness Month, a time to think about, plan and deploy better cybersecurity for your organization.
Attivo Goes On the Attack Against Hackers
Simon Marshall  
10/17/2017   2 comments
Attivo gets $21 million in new funding to take the fight to hackers through advanced deception.
Contesting Control of Container Security
Simon Marshall  
10/20/2017   2 comments
Who should control container security? It's a question that is gaining importance as containers become a favored mechanism for enterprise development.
Cisco Talos Team Tackles Top-Tier TXT Threat
Simon Marshall  
10/13/2017   1 comment
Talos researchers have taken down an attack aimed at the Securities and Exchange Commission.
Rowhammer Attack Pounds With Precision
Larry Loeb  
10/11/2017   1 comment
A new variant of the Rowhammer attack can work around every known defense.
How Can You Beat the Widespread ROCA?
Curt Franklin  
10/19/2017   1 comment
ROCA is a vulnerability hitting millions of devices. How can you tell if yours are affected – and what can you do if they are?
Financial Institutions Lack Confidence in Their Own Defenses
Curt Franklin  
10/20/2017   1 comment
Financial institutions are fighting fraud with tools that aren't completely up to the task, according to the results of a new survey out this week.
McAfee Brings AI to Security With New Products
Curt Franklin  
10/18/2017   1 comment
McAfee has announced new products at MPOWER – products that bring AI and machine learning to security analytics.
Gartner Says Real Security Starts With a Mission
Curt Franklin  
10/6/2017   1 comment
Security for the digital organization starts with a mission that has executive support; the process from mission to execution is step-by-step.
Gartner Symposium Opens in Orlando
Curt Franklin  
10/2/2017   1 comment
Gartner Symposium ITXpo is opening today in Orlando. Security Now is there to bring you the latest from the analysts and consultants at one of the most influential firms in the IT industry.
Gartner Lists Security Trends for 2018
Curt Franklin  
10/3/2017   1 comment
A session at Gartner Symposium/ITxpo laid out security trends for the coming year.




Latest Articles
Cisco's research has proven that beyond meeting compliance requirements, good privacy is good for business and individuals.
Once again, a novel 'speculative execution side-channel' attack has been discovered by researchers.
Security researchers have found that the implementation in Remote Desktop Gateway of string segmentation lays it open to memory corruption vulnerabilities.
In Q4 of 2019, the average ransom payment increased by 104% to $84,116, finds Coveware report.
DHS-CISA has issued a security advisory about GE Carescape medical instrumentation that enumerates many vulnerabilities present in them.
Information Resources
upcoming Webinars
ARCHIVED
Top Tips for Blocking pwned [email protected]$$wOrds in Your Organization
Tuesday, October 29, 2019
12 p.m. New York/ 4:00 p.m. London
Podcasts
Podcast: Infrastructure Hunting – Stopping Bad Actors in Their Tracks
Being able to effectively build a threat intelligence ecosystem or threat-hunting identification response requires both user and systems sophistication and capabilities. Security, orchestration, automation and response (SOAR) is a new technology designed to provide organizations a single comprehensive platform they can use to implement an intelligence driven security strategy.
Podcast: Digital Transformation, SD-WAN & Optimal Security
Dan Reis chats to Cybera's Josh Flynn about how to achieve digital transformation without sacrificing security.
Podcast archive
Flash Poll
Video
In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ...
CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ...
You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ...
Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ...
Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ...
All Videos
Sponsored Video
Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ...
Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ...
This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video
All Videos
like us on facebook
Security Now
About Us     Contact Us     Help     Register     Events     Supporting Partners     Twitter     Facebook     RSS
Copyright © 2020 Light Reading, part of Informa Tech,
a division of Informa PLC. All rights reserved. Privacy Policy | Cookie Policy | Terms of Use
in partnership with