Security News

NIST Draft Cybersecurity Workforce Framework (November 2 and 3, 2016) (SANS Newsbites)
2016-11-04 19:43

NIST Alters Guidance Wording to Appeal to Non-Federal Audience (InfoRiskToday)
2016-10-24 09:51

NIST: People have given up on cybersecurity it's too much hassle (The Register)
2016-10-06 00:37

NIST Unveils a Cybersecurity Self-Assessment Tool (InfoRiskToday)
2016-09-16 20:35

NIST Updating Guidance on Protecting Federal Information (InfoRiskToday)
2016-08-19 22:36

NIST Denounces SMS 2FA - What are the Alternatives? (SecurityWeek)
2016-08-17 13:06

NIST is No Longer Recommending Two-Factor Authentication Using SMS (Schneier on Security)
2016-08-03 12:11

NIST is no longer recommending two-factor authentication systems that use SMS, because of their many insecurities. In the latest draft of its Digital Authentication Guideline, there's the line:...

NIST: SMS-Based Two-Factor Authentication to be Phased Out (July 27 and 28, 2016) (SANS Newsbites)
2016-08-02 20:48

NIST Recommends Against SMS for 2 Factor Authentication (IT Toolbox Blogs)
2016-08-01 14:16

Cisco, NIST want to help devs escape the vuln/validation trap (The Register)
2016-08-01 05:17