web applications Archives

Podcast: New Malware targets Industrial Safety Systems and Uncle Sam Bans Kaspersky – What Now?

December 18, 2017 Paul Roberts

In our latest podcast: industrial security expert Joe Weiss talks to us about Triton, a new malware family targeting industrial safety systems. Also: Dave Aitel of the firm Immunity Inc. joins us again to talk about new legislation banning government agencies from using anti malware software by Kaspersky Lab. And, Alan Naumann* of the firm Contrast Security talks to us about the major insurance firm that joined the latest round of investment in his company, and why application security is everybody’s problem.

Security Pro tilts at Smart Drill, finds It doesn’t suck

June 20, 2017 Paul Roberts

In-brief: Is there cause for hope? A new analysis of a connected power drill by a researcher at DUO Security finds that it’s actually pretty secure. But challenges remain for connected device makers.

Code Tutorials Spread Application Flaws Far and Wide

April 18, 2017 Paul Roberts

In-brief: Researchers at universities in Germany, working with the security firm Trend Micro, discovered more than 100 vulnerabilities in GitHub code repositories simply by looking for re-used code from tutorials and other free code samples. The same method could be harnessed by cyber criminals or other sophisticated attackers to find and exploit vulnerabilities in software applications, the researchers warned.

Hack of Dallas Sirens Not the First or Last on Emergency Systems, Experts Warn

April 11, 2017 Paul Roberts

In-brief: The weekend hack of civil defense sirens in Dallas, Texas is similar to two incidents in Illinois in 2012. The underlying problem? Woeful security for emergency alerting and other civil defense systems in the U.S., according to security experts.

Survey: Hackers for Hire Find Most Networks Easy Prey

February 10, 2017 Paul Roberts

In-brief: A survey of penetration testers by Rapid7 finds most organizations are failing to detect malicious activity on their networks.