IoT messaging protocol is big security risk
Popular IoT messaging protocol lacks encryption and sufficient device authentication security.
Identity Management — News
When it comes to security analytics, too much data still isn’t enough
Security specialists are taking new approaches to the problem of ‘alert fatigue’ by increasingly feeding large, aggregate data sets into specialised artificial intelligence (AI) engines that are learning to discern good and bad behaviour with a high degree of accuracy.
David Braue | 18 Jul | Read more
FedEx on Petya attack: systems still down, no cyber insurance
FedEx says systems are still down after Petya attacks as UK bank Lloyds spots cyber insurance opportunity.
Week in security: Accelerator woos Aussie infosec innovators; businesses admit 2018 compliance unlikely
Cybersecurity pundits have been talking about strategies to boost cooperation amongst the various elements of the industry to reach common goals around information protection.
David Braue | 17 Jul | Read more
Aussie infosec startups can hit the global bar but don’t know where it is: incubator CEO
Corporate backing for CyRise accelerator will let Australian cybersecurity startups test their products on live networks
David Braue | 14 Jul | Read more
Google’s AI helps its human reviewers spot intrusive Android apps
Google puts developers who abuse Android permissions on notice.
Getting smarter about making cities smart
Many cities claim to be ahead of smart curve, but find themselves handcuffed by custom systems
Insider wreaks havoc on company—after he resigns
A disgruntled former employee, used off-the-shelf tools to destroy files and cause mayhem for Navarro Security
Christopher Burgess | 11 Jul | Read more
Trump: Putin and I will form “impenetrable Cyber Security unit”
Putin and Trump will create a panel of cyber security experts to figure out how to prevent hackers from meddling with elections.
AusCERT 2017 - Playing nice and staying out of prison
Disclosure has a couple of very interesting perspectives according to Troy Hunt, during a very well attended presentation given at AusCERT 2017. On one hand, there are threat researchers like Hunt who disclose vulnerabilities. On the other are organisations receiving reports about problems.
Anthony Caruana | 16 Jun | Read more
AusCERT 2017 - The Balkanisation of the security community
Cisco's Kate Pearce presented at this year's AusCERT conference on of embracing diversity in the security industry and not living and working in an infosec echo chamber. Her focus was on the small differences we can bring in and the big difference they can make.
Anthony Caruana | 16 Jun | Read more
Microsoft sets artificial intelligence on the 'big fish' of tech support scams
Tech support scams are becoming more automated, so Microsoft is throwing artificial intelligence at the challenge.
AusCERT 2017 - Myths and Truths to Building a World Class Cyber Defence
Chris Coryea comes from Leidos – a major MSSP in the United States which is comprised of about 33000 employees that come from the original Leidos MSSP business and Lockheed Martin's cyber security team. That brought together the MSSP capability with advanced analytics and Lockheed Martin's famed Cyber Security Kill Chain approach.
Anthony Caruana | 13 Jun | Read more
'Crashover' malware for power sector can cause black outs
Researchers uncover well-crafted malware that's designed to disrupt core electricity substation equipment to cause outages.
How did a ‘scammy’ $99 per week iPhone VPN become a top App Store earner?
Developers are demanding answers from Apple after a $400-a-month iPhone VPN become a top grossing app on the App Store.
Basic security hygiene blocked WannaCry – but a comprehensive defence needs more
It may have sent European businesses scrambling and the security community abuzz, but the WannaCry ransomware attack’s fizzling in the United States and Australia means its legacy will be mostly as a cautionary tale – and, one security expert warns, a potential distraction from more important security issues.
David Braue | 02 Jun | Read more
AusCERT 2017 - Cyberheroes – saving your business one byte at a time
We have all say through the standard company training on cyber-security. It usually starts with an hour or two trapped in a packed seminar room, surrounded by colleagues pretending to take notes but really playing Words With Friends on their smartphones, followed by bad coffee and slightly stale pastries.
Anthony Caruana | 31 May | Read more
AusCERT 2017 - Identity is the new perimeter
Todd Peterson, from One Identity, delivered the second part of the AusCERT 2017 opening keynote. One Identity may sound like a new business but it’s an offshoot from Dell EMC and Quest Software.
Anthony Caruana | 30 May | Read more
AusCERT 2017 – Changes to Cybersec Laws Need Holistic Thinking
One of the last places you’d expect to find a corporate lawyer is a cybersecurity conference. But as the regulatory and legal landscape for businesses change the intersection between policy and technology is widening.
Anthony Caruana | 29 May | Read more
WannaCry could have been worse – and still could be – as exploit shapes “new normal”
Companies that have been hit by WannaCry may be cursing their bad luck – but the attack could have been much worse had hackers bundled the exploit with malicious malware or other attacks, an ex-military cybersecurity responder has warned amidst industry warnings that the threat from the exploit is far from over.
David Braue | 22 May | Read more