Security News > 2021

GLEIF CA Stakeholder Group accelerates integration of LEIs in digital certificates
2021-03-15 01:30

GLEIF has launched a CA Stakeholder Group to facilitate communication between GLEIF, CAs and TSPs from across the world, as they collectively aim to coordinate and encourage a global approach to LEI usage across digital identity products. The collaboration announcement follows news last year that ISO has standardized the process of embedding LEIs in digital certificates.

Veracode Hacker Games challenges university students to hack and patch real-life apps online
2021-03-15 01:00

Veracode announced the launch of the Veracode Hacker Games. The two-week collegiate competition will challenge computer science and cybersecurity student teams from eight leading universities across the U.S. and the U.K., including University of Virginia, Tufts and University of Warwick, to test their secure coding skills and give them the opportunity to win individual prizes, plus $15,000 in charitable donations for the top universities.

Nubeva expands monitoring capabilities in AWS
2021-03-15 00:30

Nubeva Technologies expands monitoring capabilities in Amazon Web Services. With the announcement of Amazon VPC Traffic Mirroring support for non-Nitro compute instances, Nubeva can now enable IT and Security teams with full packet inspection capabilities across AWS. "Virtually all cloud network traffic is encrypted, but at the same time, enterprises have a requirement to inspect the data in that traffic for cybersecurity and application assurance," said Steve Perkins, CMO at Nubeva.

Cobalt Partner Program offers new opportunities for partners
2021-03-15 00:00

With the launch of the Cobalt Partner Program, the company's goal is to build out strategic relationships to ensure long-term success to its partners and clients, enabling them to solve their customers' pentesting needs while driving growth and revenue. The Cobalt Partner Program offers two partner options - referral and reseller partners - with tiers within each to fit partners' unique wants and needs, and various commitment levels.

Australia, India, Japan, and USA create joint critical tech working group
2021-03-14 23:46

The first "Quad summit" of leaders from Australia, India, Japan, and the USA has announced the group will create a "Critical and Emerging Technology Working Group". The joint "Spirit of the Quad" statment said the group will: "Respond to the economic and health impacts of COVID-19, combat climate change, and address shared challenges, including in cyber space, critical technologies, counterterrorism, quality infrastructure investment, and humanitarian-assistance and disaster-relief as well as maritime domains."

Robinhood appoints Caleb Sima as CSO
2021-03-14 23:30

Caleb will lead Robinhood's security team and privacy and safety initiatives, including keeping customers informed about our cybersecurity practices. "Caleb brings deep cybersecurity expertise that will enhance our defense capabilities and protect our customers, as well as the leadership qualities to lead our security organization as we scale our systems to serve our customers," said Vlad Tenev, CEO and co-founder of Robinhood.

Best Microsoft tools created for Windows 10 power users
2021-03-14 22:22

Over the past year, Microsoft has quietly released new built-in Windows 10 command-line applications and free Microsoft Store apps that enhance the operating system's functionality. Microsoft did not officially announce these new tools in some cases, and they were discovered by users instead. In this article, we're going to highlight these new programs and other apps so power-users can take greater control over Windows 10.

Twitter bug automatically suspends you when tweeting 'Memphis'
2021-03-14 20:25

A bug on Twitter is causing users to become temporarily suspended if they tweet the word 'Memphis,' BleepingComputer has confirmed. This bug started today after users tweeting about the Tennessee city, sports teams, or players suddenly found that they were temporarily suspended for 12 hours after Tweeting the word Memphis.

New PoC for Microsoft Exchange bugs puts attacks in reach of anyone
2021-03-14 19:42

Since Microsoft disclosed actively exploited Microsoft Exchange security vulnerabilities, known collectively as ProxyLogon, administrators and security researchers have been scrambling to protect vulnerable servers exposed on the Internet. The PoC provided enough information that security researchers and threat actors could use it to develop a functional remote code execution exploit for Microsoft Exchange servers.

Upcoming Speaking Engagements
2021-03-14 18:16

This is a current list of where and when I am scheduled to speak: I’m speaking at the Australian Cyber Conference 2021 on March 17 and 18, 2021. I’m keynoting the (all-virtual) RSA Conference...