Hardware-level espionage and cybercrime are a growing reality that increases the risks to everyone. We are even seeing hardware hacks against consumer devices, including super-secure cryptocurrency hardware wallets!
Read my latest article about sophis
TL;DR for CISOs: Cisco confirmed attacks on a critical Secure Email Gateway flaw, Palo Alto Networks fixed an exploited PAN-OS manag
Something fascinating is quietly playing out in the cryptocurrency world, where super-secure hardware wallets are being physically hacked in order to steal secret keys and empty victims’ accounts. Security researchers, led by Joe Grand, have discover
A communications manager sending an outside writer an ART that he has not published to the public. Borrower accounts for the Poppy Dashboard and pastes the brief into their account to generate a draft. Absolutely no bad stuff goes on and the final pr
A marketing staff member is interested in comparing out-of-the-classroom training videos. An HR coordinator is looking for a few songs to use for an event with staff. A person in IT researches a particular setting in a browser prior to a response to
An executive itinerary is more than just a piece of information that includes a departure and arrival. It could show you where to meet, which businesses you need to deal with, where you will stay while you are there and when senior decision makers ar
TL;DR for CISOs: Ivanti Connect Secure was hit by a zero-day chain that reached root on a patched VPN with one flaw still unpatched,
Artificial intelligence has moved from a support role in cybersecurity into an operational one. Security teams that once relied on dashboards, alerts, and manual triage are now piloting AI agents that can watch telemetry around the clock, investigate
Software testing helps developers build reliable and secure applications. It finds errors, improves performance, and reduces problems before release. Every software version needs proper testing to work as expected.
TL;DR for CISOs: Ahold Delhaize took systems offline after a cybersecurity incident that reportedly reaches U.S. and European banner
AI autonomous weapons represent technology that can severely impact or end innocent lives when in the hands of irresponsible nations seeking to cause fear in pursuit of their foreign policy objectives. Like any powerful tool in nations’ arsenals, the
TL;DR for CISOs: A maximum-severity SonicWall SMA1000 flaw is now drawing exploitation attempts within days of its patch, a new Dark
I am looking forward to being on the upcoming panel to discuss the implications of “Social Engineering and Insider Threats in the Age of AI”, with Rogerio De Lemos, Chris Hadnagy, and Janne Uusilehto. Claire Vishik will moderate.
Generative AI has a s
AI makes protecting our digital technology, assets, and data more challenging. Cybersecurity must adapt as threats are becoming more powerful with AI.
We must know our enemy.
If we only focus our attention on our posture, we miss some of the most cr
The incident slide was finished on Tuesday. Four bullets, no logos, the word "contained" used once. One member of staff typed their password into a fake login page, we caught it the same morning, the account was reset, and nothing suggested data had
TL;DR for CISOs: The FBI and Secret Service say FortiBleed attacks are still running and are locking administrators out of Fortinet f
TL;DR for CISOs: A single phishing click let attackers copy data on about 1.3 million people from Arizona's court system, the FBI say
