Intel’s Secret Key to Decrypt Microcode Patches is Exposed https://youtu.be/nErIFrZLiKQ A group of security vulnerability researchers, after many months of work, were able to figure out the update process and secret key used to decrypt Intel microcode updates for the Goldmont architecture product lines. This is an important finding as it peels back yet another layer of the onion that protects the core CPU from malicious manipulations. It allows outsiders to pull back the…
Watch the recorded webinar "The Role of Cyber Culture in a Cyber Strategy" https://youtu.be/1J5NPV-OZeo Jack Roehrig, CISO at Turnitin, and I shared insights on how to incorporate Cyber Culture as part of an organization's Cyber Strategy.
U.S. Dept of Justice seizes $1 billion in Bitcoin https://youtu.be/FEFIIa7BMUc Bad news for cryptocurrency criminals! Cryptocurrency watchers were stunned when they recently saw a billion dollars of Bitcoin being moved from a very old account that has been inactive for years. The mystery was solved as the U.S. Dept of Justice unsealed court filings related to the Ross Ulbricht 2015 Silk Road case. This is momentous! Such a seizure puts most others to shame and it will likely…
Deloitte's 'Test your Hacker IQ' Proves Vulnerable to being Hacked https://youtu.be/gijdF7rJ0io A website tied to an event that quizzed people on their hacking knowledge, launched by major a security consultancy firm, is itself vulnerable to being hacked. This incident showcases a number of important lessons for every organization that wants to avoid such embarrassment. If you like these updates, click the Like button and be sure to subscribe to the Cybersecurity Insights…
Inaccurate Predictions about Cybersecurity is Dangerous https://youtu.be/DS4wsFe90SM I may offend some people, so for those who don’t want to hear my rant, skip this video. Recent cybersecurity predictions aren’t just wrong, they are dangerous I am disappointed in the recent comments that Michelle Zatlyn, the co-founder and COO of Cloudflare, made regarding the future of cybersecurity. She stated Cybersecurity would be "a thing of the past the next decade" and that instead…
New Zealand Simplifies Privacy with a Data-Breach Determination Tool https://www.youtube.com/watch?v=TjQcK1RwbR4 The small country of New Zealand is showing great privacy leadership by releasing a tool to help businesses determine if a cybersecurity incident is considered a Data Breach.
Police Cameras are Providing Facial Recognition Tracking to Criminals in Moscow Criminals are offering stalking services, through the use of Moscow’s camera system, to identify and track people for $200. Customers provide a picture and the criminals will return a report of where that person has been, where they frequent, and more. Apparently, the data is being gleaned from the police facial recognition camera system, that includes over 100,000 cameras positioned to watch the…
Future of Offensive Attack Simulation: Strategies, Tools & Techniques A hack is executed every 39 seconds and impacts one in three Americans every year. Join us in the discussion on Future of Offensive Attack Simulation: Strategies, Tools & Techniques with Bikash Barai and Matthew Rosenquist Click Here to Join the CISO Platform Fireside Chat: https://register.gotowebinar.com/register/3356142006680293903
Intel in Denial of the Latest SGX Secure Enclave Vulnerability https://www.youtube.com/watch?v=KK2RrBMnSbU Another vulnerability and exploit named VoltPillager has been published for Intel Corporation's SGX security technology. The attack itself is simply a hardware version of a previously discovered PlunderVolt software vulnerability where voltage to the chip was manipulated to undermine SGX enclave protections. PlunderVolt was able to recover secret information like…
Managing IoT Data Security Risks **We are surrounded!** Smart devices are everywhere and being integrated into all facets of our lives, from toothbrushes to automobiles. Entire cities are becoming ‘smart’, as are factories, governments, global retail, freight logistics, and all national critical infrastructure sectors. As individuals, we are becoming hubs for multiple connected devices in our homes and on our persons. Phones, watches, health monitors, medical devices, and…
Cybersecurity: Opportunity or Threat – A fireside chat Looking forward to speaking with Anand Oswal, SVP & GM at Palo Alto Networks, in a fireside chat at the ASEI 2020 virtual convention! We will be discussing cybersecurity threats and opportunities for Engineers! Dec 5th-6th 10am Pacific. Come join the discussion. http://www.aseiusa.org/NC
Disable Amazon Sidewalk for Now https://www.youtube.com/watch?v=6tv1nR_UcSg Amazon is releasing their Sidewalk network feature that opens users home network to connect with neighbors that also have Amazon products like the Echo devices and Ring security cameras. Amazon is turning Sidewalk ON by DEFAULT! That is concerning. Such a network could enable a host of new capabilities but might also introduce new cyber risks to participants.
China Seizes $4B in Cryptocurrency from Scammers Governments can still pursue cybercriminals and fraudsters who use cryptocurrency. China authorities have seized over 4 billion dollars worth of Bitcoin, Ethereum, and several other cryptocurrencies as part of a crackdown on the PlusToken scheme that defrauded over 2 million people. This seizure has been approved by the courts after the ringleaders were convicted of Ponzi-type fraud.…
@M.Rosenquist