Security News

NIST is Continuing to Work on Post-Quantum-Computing Cryptography Standards (Schneier on Security)
2016-12-23 12:39

NIST is accepting proposals for public-key algorithms immune to quantum computing techniques. Details here. Deadline is the end of November 2017. I applaud NIST for taking the lead on this, and...

NIST Calls for Submissions to Secure Data Against Quantum Computing (Threatpost)
2016-12-22 17:33

NIST has made a public plea for submissions for new crypto algorithms that can stand up against quantum computing and protect data.

NIST Draft Cybersecurity Workforce Framework (November 2 and 3, 2016) (SANS Newsbites)
2016-11-04 19:43

NIST Alters Guidance Wording to Appeal to Non-Federal Audience (InfoRiskToday)
2016-10-24 09:51

NIST: People have given up on cybersecurity it's too much hassle (The Register)
2016-10-06 00:37

NIST Unveils a Cybersecurity Self-Assessment Tool (InfoRiskToday)
2016-09-16 20:35

NIST Updating Guidance on Protecting Federal Information (InfoRiskToday)
2016-08-19 22:36

NIST Denounces SMS 2FA - What are the Alternatives? (SecurityWeek)
2016-08-17 13:06

NIST is No Longer Recommending Two-Factor Authentication Using SMS (Schneier on Security)
2016-08-03 12:11

NIST is no longer recommending two-factor authentication systems that use SMS, because of their many insecurities. In the latest draft of its Digital Authentication Guideline, there's the line:...

NIST: SMS-Based Two-Factor Authentication to be Phased Out (July 27 and 28, 2016) (SANS Newsbites)
2016-08-02 20:48