Category: Operations Security

April 18, 2019

The federal government’s top IT security chief floated the possibility of new regulations to shore up protections and transparency in the technology supply chain and canvassed industry for feedback. While speaking at a cybersecurity event in Virginia hosted by the […]

April 10, 2019

Sixteen months ago, researchers reported an unsettling escalation in hacks targeting power plants, gas refineries, and other types of critical infrastructure. Attackers who may have been working on behalf of a nation caused an operational outage at a critical-infrastructure site […]

April 8, 2019

Years into the robocalling frenzy, your phone probably still rings off the hook with “important information about your account,” updates from the “Chinese embassy,” and every bogus sweepstakes offer imaginable. That’s despite promises from the telecom industry and the US […]

April 4, 2019

The Apache HTTP Server, the Internet’s most widely used Web server, just fixed a serious vulnerability that makes it possible for untrusted users or software to gain unfettered control of the machine the software runs on. CVE-2019-0211, as the vulnerability […]

March 28, 2019

A program that allows drug agents to obtain a pool of billions of call records from AT&T is “still active,” according to a watchdog report. The report, published Thursday by the Justice Department inspector general, confirmed the program — named […]

March 22, 2019

Homeland Security has issued a warning for a set of critical-rated vulnerabilities in Medtronic defibrillators that put the devices at risk of manipulation. These small cardio-defibrillators are implanted in a patient’s chest to deliver small electrical shocks to prevent irregular […]

March 18, 2019

Slack announced today that it is launching Enterprise Key Management (EKM) for Slack, a new tool that enables customers to control their encryption keys in the enterprise version of the communications app. The keys are managed in the AWS KMS […]

March 15, 2019

Malicious hackers wasted no time exploiting a nasty code-execution vulnerability recently disclosed in WinRAR, a Windows file-compression program with 500 million users worldwide. The in-the-wild attacks install malware that, at the time this post was going live, was undetected by […]

February 20, 2019

WinRAR, a Windows file compression program with 500 million users worldwide, recently fixed a 14-year-old vulnerability that made it possible for attackers to execute malicious code when targets opened a booby-trapped file. The vulnerability was the result of an absolute […]

February 8, 2019

According to leading supply chain analyst Louis Columbus, the biggest challenge facing the high tech industry in 2019 will be securing their supply chains. The challenge is that, as supply chains grow more complex, manufacturers may not be able to […]