Physical Security
Physical Security | News, how-tos, features, reviews, and videos
IoT vendors ignore basic security best practices, CITL research finds
New measurements by the CITL mass fuzzing project show just how bad things really are--and how IoT device makers could radically increase binary security with one day of engineering work.
Leader of new NSA Cybersecurity Directorate outlines threats, objectives
Director Anne Neuberger says her group will focus on ransomware, threats to US elections, and nation-state influence operations.
ICS as a cloud service is coming: Will the benefits outweigh the risks?
Plugging industrial control and operational technology equipment into cloud-based monitoring and remote management systems increases visibility, but it also takes away their security by obscurity.
ICS security: Popular building management system vulnerable to takeover
Remotely exploitable vulnerability in internet-connected devices gives attackers a means to cause disruption and damage in a wide range of industries.
U.S. Rep Lieu hopeful for election security bill prospects
Congressman sees Republican softening on gun legislation as a sign they might be willing to consider election security. Calls on the security community to expose election system weaknesses.
Critical VxWorks flaws expose millions of devices to hacking
Researchers have found 11 serious vulnerabilities in VxWorks, the world's most popular real-time operating system (RTOS) that powers over 2 billion devices including enterprise network firewalls and routers, industrial controllers and...
Stealing money in the digital age: The dark industry of trafficking financial data
Cybercriminal gangs dealing in credit card and other financial data have refined their tools and changed their ideology for more profitable attacks.
Why getting election security right for 2020 matters
The U.S. is moving at glacial speed to secure election systems against possible interference by foreign adversaries. We're not even close to ready, and that could call contests into question.
Business email compromise: The odds of being a victim are increasing
Given the growth over the last few years in BEC and EAC fraud, businesses should educate employees about the risks involved and red flags of this activity.
Secure elections scorecard: Grading the candidate and Congressional proposals
After 2016's election security debacle, there's a push to secure America's electronic voting infrastructure. Some of the proposals are good. Others fall short. CSO investigates.
What is an ISAC or ISAO? How these cyber threat information sharing organizations improve security
Information Sharing and Analysis Organizations were created to make cyber threat data and best practices more accessible than with Information Sharing and Analysis Centers, but results are mixed.
What is adware? How it works and how to protect against it
Adware is deceptive software that earns its creators money through fraudulent user clicks. Fortunately, it's one of the the most detectable types of malware.
What is the CISA? How the new federal agency protects critical infrastructure from cyber threats
The Cybersecurity and Infrastructure Security Agency (CISA) is a new federal agency, created to protect the nation's critical infrastructure.
6 questions to ask before buying an ICS / OT security monitoring tool
Shopping for an ICS / OT monitoring solution? Here's what you need to know about evaluating the vendors.
Mike Assante’s lasting impact on critical infrastructure security (and me)
Thanks to Mike Assante, critical infrastructure stakeholders have a better understanding of and ability to respond to cybersecurity risks.
Why the Huawei ban is bad for security
Many believe the ban on exporting U.S. technology to Chinese company Huawei could hurt American tech vendors and do little to mitigate supply chain threats.
How to stick it to LinkedIn romance scammers
LinkedIn is becoming a popular channel for criminals to find victims for romance scams. Here's how to identify, report and block those scammers.
What is Magecart? How this hacker group steals payment card data
Hacking groups that make up Magecart are effective and persistent at stealing customer and payment card data through skimmers. Here's how they work and what you can do to mitigate the risk.
-
White Paper
-
White Paper
-
White Paper
-
Sponsor Article
Sponsored -
White Paper
