Security News > 2017 > May

Is There Too Much Cybersecurity Technology? (InfoRiskToday)
2017-05-30 19:48

Former RSA Chair Coviello Says More Tech Won't Reduce RiskBusinesses are suffering from an influx of too much security technology packaged into too many solutions offered by too many vendors, says...

Hack DHS Act Establishes Bug Bounty Program for DHS (Security Week)
2017-05-30 19:38

Following what is now widespread practice among private industry tech giants, a new bill proposes to force the DHS to introduce its own public-sector bug bounty program. read more

An Anti-Fraud Effort Quickly Pays Off (InfoRiskToday)
2017-05-30 19:18

Chris Sibila of Elements Financial Credit Union says thwarting socially engineered schemes waged against call centers as well as debit fraud linked to card breaches spurred the financial...

21st Century Cures Act: Will It Revamp Health Data Exchange? (InfoRiskToday)
2017-05-30 19:18

The 21st Century Cures Act presents a number of critical but challenging issues pertaining to the advancement of nationwide secure health information exchange that federal regulators must address,...

What will it take to keep smart cities safe? (Help Net Security)
2017-05-30 19:18

“Smart cities” use smart technologies in their critical infrastructure sectors: energy, transportation, environment, communications, and government. This includes smart systems for energy...

WannaCry 'Link' to North Korea Remains Tenuous (InfoRiskToday)
2017-05-30 18:48

Avoid the Cyber Attribution Follies: Stay Skeptical; Don't Fear the BogeymanA number of media reports have recently suggested there's a "link" between WannaCry and the Lazarus hacking group,...

FreeRADIUS Update Resolves Authentication Bypass (Threatpost)
2017-05-30 18:39

Developers behind FreeRADIUS, an open source implementation of the networking protocol RADIUS, are encouraging users to update to address an authentication bypass found in the server.

Tainted Leaks: Researchers Unravel Cyber-Espionage Attacks (InfoRiskToday)
2017-05-30 18:17

Phishing Emails, Hacked Gmail Addresses Tied to Campaign with Russian NexusA cyber-espionage campaign apparently linked to Russia has targeted more than 200 people in 39 countries and leaked...

Inmates Secretly Build and Network Computers while in Prison (Schneier on Security)
2017-05-30 17:47

This is kind of amazing: Inmates at a medium-security Ohio prison secretly assembled two functioning computers, hid them in the ceiling, and connected them to the Marion Correctional Institution's...

8 RCE, DoS holes in Microsoft Malware Protection Engine plugged (Help Net Security)
2017-05-30 17:22

After the discovery and the fixing of a “crazy bad” remote code execution flaw in the Microsoft Malware Protection Engine earlier this month, now comes another MMPE security update that plugs...