DOD announces expansion of bug bounty program On Wednesday, the Department of Defense announced plans to expand its “Hack the Pentagon” program, which offers bug bounties to ethical hackers who find vulnerabilities in DOD systems. The program, originally launched in…
This week’s Cyber Security Headlines – Week in Review, May 3-7, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Mitch Parker (@mitchparkerciso), CISO, Indiana University Health. Cyber Security Headlines – Week in Review is live every Thursday at…
Startups are all about proving the value of their product and growth. At the beginning, all of their money is funneled into product and market development. When do they need a CISO, if at all? Check out this post for the basis…
Facebook’s Oversight Board upholds Trump suspension The board upheld Facebook’s decision to suspend former US President Donald Trump, saying his posts ahead of the January 6th Capitol riots created “an environment where a serious risk of violence was possible.” However…
A new set of vulnerabilities may affect 60 percent of the world’s public email servers The Qualys Research Team has discovered 21 vulnerabilities in the Exim mail server, some of which can be chained together to obtain full remote unauthenticated…
Work from home seemed ideal until you realized you were working at all hours with people all over the world. It would actually be a nice respite to have to commute and leave work at a reasonable hour. This episode…
A look at the Project Signal ransomware campaign Security researchers at Flashpoint identified the ransomware campaign, seemingly organized by Iran’s Islamic Revolutionary Guard Corps using the contracting company ENP. The project began in the late summer of 2020, with malicious…
As we’re coming on our third anniversary of the CISO/Security Vendor Relationship Podcast my co-host Mike Johnson and I have a question for you, is the relationship between security practitioners and vendors improving, and how? This was our primary mission…
New Spectre exploits beat AMD and Intel mitigations Researchers from the University of Virginia and University of California San Diego discovered several new variants of Spectre exploits that affect all modern processors from AMD and Intel with micro-op caches. Existing…
Babuk ransomware operators announce shutdown In a forum post titled “Hello World 2,” the operators said they intend to close up shop. Often when ransomware groups cease operations, they release their encryption keys. However the Babuk operators plan to make…
