Microsoft warned 10,000 targets of nation-state hackers in one year
Microsoft shows off its work to defend democracies under attack by well-funded hackers.
Access Control — News
Microsoft eyes Mozilla’s Rust to obliterate C++ memory security flaws
Could Mozilla's Rust help developers who use C, C++ and C# cut time spent on worrying about security issues?
Will Facebook’s $US5b punishment finally prompt other companies to act on privacy?
The laissez-faire attitude of many companies towards consumer privacy protections is catching up with them after a series of massive fines sent shockwaves through a business community already reeling from an escalating cybersecurity threat climate.
David Braue | 17 Jul | Read more
The week in security: After major GDPR violations, everything is fine
Massive GDPR fines for data breaches were the order of the week as British Airways copped a £183m ($A328m) fine for a hack of its website last year.
David Braue | 17 Jul | Read more
Workers wise up to phishing, but you still need 2FA for business accounts
Train your staff to catch phishing email, but you also have to implement two-factor authentication.
Huge rock, cracked windshield helps hacker land a $10k Tesla security bug
If you have the right information, a cracked windshield on a Tesla can be worth five times its cost of replacement.
Microsoft kicks off public preview of Azure AD password muffler
Microsoft buries the password a little bit more and brings it to Windows 10 201H1 testers.
GDPR fines roll in: After BA, Marriott faces £99m fine over breach affecting 383 million
Marriott Hotels faces the EU's second largest fine under its new data protection laws. It will challenge the fine.
CSOs should look to orchestration, automation to bridge security policy, information silos
Security orchestration, automation and response (SOAR) may have only emerged as an industry buzzword a little over a year ago, but the integrSecurity orchestration, automation and response (SOAR) may have only emerged as an industry buzzword a little over a year ago, but the integration and automation that lie at its core have rapidly gained currency with CSOs whose roles increasingly involve unifying silos of security information and translating them into action.
David Braue | 08 Jul | Read more
The week in security: Boards wear more cyber risk as threats continue to get worse
An Australian IT consultant has been
David Braue | 02 Jul | Read more
180 days later: Reflections on the first half of 2019
Firstly I want to give a clear warning about this article, this is going to be a bit broody as I am very disappointed in our progress, actually, lack of progress is a better way to put it.
Craig Ford | 02 Jul | Read more
Firefox 68 to address antivirus conflict over HTTPS intercepting
Changes follow a "significant" increase in error reports after Firefox 65 in December.
Do I really have to say it? Stop resisting multifactor authentication
Over the first 6 months of 2019, I am seeing more and more accounts being taken over by malicious actors on office 365 and google mail where the attacker will create some rules in the backend to redirect emails of interest into deleted items, RSS feeds or any other folder they think may be overlooked by the user.
Craig Ford | 26 Jun | Read more
Australian IT consultant jailed for wifi-hack and insider trading
Sydney IT consultant was given a three year prison sentence for insider trading and hacking the wifi network of Port Phillip Publishing (PPP), which provided ‘buy’ recommendations to investors.
US warns everyone to use two-factor to counter rising Iranian ‘wiper’ malware threats
Cyberattacks emanating from Iran have prompted a warning from US officials to use two-factor authentication.
The week in security: CSOs struggle with hidden threats, job stress
A capacity crowd of security executives attended CSO Australia’s SecureIT conference this month, with a compelling lineup that was kicked off by former LulzSec hacker Mustafa al-Bassam, whose exploits hacking top-tier businesses landed him in handcuffs at just 16 years old.
David Braue | 18 Jun | Read more
US CERT BlueKeep warning: we got remote code execution
And that means someone else out there could too and compromise about a million vulnerable systems.
Becoming more than human: My take on the advancements of Machine Technology
Machines have come a long way over the last 20 years and it would be naive to think they will not continue to advance with the same leaps and bounds in the next 20 years.
Craig Ford | 17 Jun | Read more
SecurIT 2019: In an increasingly-encrypted world, visibility is more important than ever
Just as many CSOs are focused on automating their organisational threat response, many others are focused on improving their visibility of network traffic – which, with encryption increasingly used to protect legitimate application traffic and obfuscate malware command-and-control (C&C) traffic, has become ever more difficult to do.
David Braue | 14 Jun | Read more
SecurIT 2019: Being a CSO is like Game of Thrones
With the threat climate continuing unabated, the impact of increasing volumes of attacks – and increasing pressure to stop them – has taken its own toll on CSOs who, iOOF Holdings head of cybersecurity and technology risk Ashutosh Kapsé noted, suffer from high burnout rates, job-related physical and mental health issues, loss of a sense of purpose, and constant fears for their jobs.
David Braue | 14 Jun | Read more