Любителям "трофейного ПО" посвящается.
Supply Chain Hackers Snuck Malware Into Videogames | WIRED
https://www.wired.com/story/supply-chain-hackers-videogames-asus-ccleaner/
Supply Chain Hackers Snuck Malware Into Videogames | WIRED
https://www.wired.com/story/supply-chain-hackers-videogames-asus-ccleaner/
WIRED
Supply Chain Hackers Snuck Malware Into Videogames
An aggressive group of supply chain hackers strikes again, this time further upstream.
Однозначный тренд в эпоху GDPR.
States giving privacy officers a seat at the table -- GCN
https://gcn.com/articles/2019/04/22/nascio-chief-privacy-officers.aspx?m=1
States giving privacy officers a seat at the table -- GCN
https://gcn.com/articles/2019/04/22/nascio-chief-privacy-officers.aspx?m=1
GCN
States giving privacy officers a seat at the table -- GCN
Most states are addressing privacy issues, and the number of dedicated CPOs is on the rise.
Naming and shaming nations that launch cyberattacks does work, say intel chiefs | ZDNet
https://www.zdnet.com/article/naming-and-shaming-nations-that-launch-cyberattacks-does-work-say-intel-chiefs/
https://www.zdnet.com/article/naming-and-shaming-nations-that-launch-cyberattacks-does-work-say-intel-chiefs/
ZDNet
Naming and shaming nations that launch cyberattacks does work, say intel chiefs
Cybersecurity agencies explain when and why they attribute cyberattacks to other nations.
Пример того насколько надежна современная атрибуция кибер атак.
"...When we used to put out anonymised, non-attributable attacks, we'd say we'd seen something somewhere and this is how you can fix it, you can get a certain response. When you say this is Russia, you get a bigger response and that does matter," he said..."
"...When we used to put out anonymised, non-attributable attacks, we'd say we'd seen something somewhere and this is how you can fix it, you can get a certain response. When you say this is Russia, you get a bigger response and that does matter," he said..."
Council Post: AI And The Cybersecurity Workforce: A Whole New World
https://www.forbes.com/sites/forbestechcouncil/2019/04/26/ai-and-the-cybersecurity-workforce-a-whole-new-world/amp/
https://www.forbes.com/sites/forbestechcouncil/2019/04/26/ai-and-the-cybersecurity-workforce-a-whole-new-world/amp/
Forbes
Council Post: AI And The Cybersecurity Workforce: A Whole New World
AI and the humans that work so closely with it will be able to complement each other's strengths and weaknesses.
Forwarded from Пост Лукацкого
5 советов, от которых зависит успешность вашего SOC (презентация) https://t.co/o1jWWnzFBD
— Alexey Lukatsky (@alukatsky) April 29, 2019
— Alexey Lukatsky (@alukatsky) April 29, 2019
Forwarded from Vulnerability Management and more
Vulnerability Management vendors and Vulnerability Remediation problems
It’s not a secret, that #VulnerabilityManagement vendors don’t pay much attention to the actual process of fixing vulnerabilities, that they detect in the infrastructure (Vulnerability Remediation).
In fact, most of VM vendors see their job in finding a potential problem and providing a link to the Software Vendor’s website page with the #remediation denoscription. How exactly the #remediation will be done is not their business.
Remediation is a painful topic and it’s difficult to sell it as a ready-made solution. And even when Vulnerability Vendors try to sell it this way, it turns out pretty ugly and does not really work. Mainly because the Remediation feature is sold to the Security Team, and the IT Team will have to use it.
#Windows #remediation #patch #Linux #VulnerabilityManagement
Read more: https://avleonov.com/2019/04/29/vulnerability-management-vendors-and-vulnerability-remediation-problems/
It’s not a secret, that #VulnerabilityManagement vendors don’t pay much attention to the actual process of fixing vulnerabilities, that they detect in the infrastructure (Vulnerability Remediation).
In fact, most of VM vendors see their job in finding a potential problem and providing a link to the Software Vendor’s website page with the #remediation denoscription. How exactly the #remediation will be done is not their business.
Remediation is a painful topic and it’s difficult to sell it as a ready-made solution. And even when Vulnerability Vendors try to sell it this way, it turns out pretty ugly and does not really work. Mainly because the Remediation feature is sold to the Security Team, and the IT Team will have to use it.
#Windows #remediation #patch #Linux #VulnerabilityManagement
Read more: https://avleonov.com/2019/04/29/vulnerability-management-vendors-and-vulnerability-remediation-problems/
Cybersecurity: The key lessons of the Triton malware cyberattack you need to learn | ZDNet
https://www.zdnet.com/article/cybersecurity-the-key-lessons-of-the-triton-malware-cyberattack-you-need-to-learn/
https://www.zdnet.com/article/cybersecurity-the-key-lessons-of-the-triton-malware-cyberattack-you-need-to-learn/
ZDNet
Cybersecurity: The key lessons of the Triton malware cyberattack you need to learn | ZDNet
Triton is a particularly dangerous form of malware; learning these lessons could make you a lot safer.
This agency is preparing to score its cyber risk with a new algorithm
https://www.fedscoop.com/cyber-risk-aware-algorithm/
https://www.fedscoop.com/cyber-risk-aware-algorithm/
FedScoop
This agency is preparing to score its cyber risk with a new algorithm - FedScoop
The Department of Labor is integrating into its continuous monitoring dashboard a new algorithm that will measure the security of IT assets to help the agency address vulnerabilities over time. Known as the Agency-Wide Adaptive Risk Enumeration, or AWARE…
Federal Register :: Announcing Issuance of Federal Information Processing Standard (FIPS) 140-3, Security Requirements for Cryptographic Modules
https://www.federalregister.gov/documents/2019/05/01/2019-08817/announcing-issuance-of-federal-information-processing-standard-fips-140-3-security-requirements-for
https://www.federalregister.gov/documents/2019/05/01/2019-08817/announcing-issuance-of-federal-information-processing-standard-fips-140-3-security-requirements-for
Federal Register
Announcing Issuance of Federal Information Processing Standard (FIPS) 140-3, Security Requirements for Cryptographic Modules
This notice announces the Secretary of Commerce's issuance of Federal Information Processing Standard (FIPS) 140-3, Security Requirements for Cryptographic Modules. FIPS 140-3 includes references to existing International Organization for Standardization/…
Putin signs Runet law to cut Russia's internet off from rest of world | ZDNet
https://www.zdnet.com/article/putin-signs-runet-law-to-cut-russias-internet-off-from-rest-of-world/
https://www.zdnet.com/article/putin-signs-runet-law-to-cut-russias-internet-off-from-rest-of-world/
ZDNet
Putin signs Runet law to cut Russia's internet off from rest of world | ZDNet
Russia's sovereign internet bill has been signed into law, giving authorities an easier way to block content.