Hot Topics

Microsoft Lost Its Keys, Voice Cloning Scams, The Biden-Harris Cybersecurity Labeling Program

In this episode, we discuss the recent Microsoft security breach where China-backed hackers gained access to numerous email inboxes, including those of several federal government agencies, using a stolen Microsoft signing key ...

Shared Security Podcast

BSides Sofia 2023 – Alexandar Andonov – The Secure Software Supply Chain Function S3C

Marc Handelman | July 23, 2023 | appsec education, BSides Sofia, BSides Sofia 2023, cybersecurity education, education, Hardware Security, Infosec Education, Privacy, Regulatory Education, Risk Education, risk management, Security Architecture, Security BSides, Security Conferences, Security Education

Our thanks to BSides Sofia for publishing their presenter’s tremendous BSides Sofia 2023 content on the organizations’ YouTube channel. Permalink ...

Infosecurity.US

BSides Sofia 2023 – Victor Bonev – Secure Distroless OCI Images Via YAML

Marc Handelman | July 22, 2023 | appsec education, BSides Sofia, BSides Sofia 2023, cybersecurity education, education, Hardware Security, Infosec Education, Privacy, Regulatory Education, Risk Education, risk management, Security Architecture, Security BSides, Security Conferences, Security Education

Our thanks to BSides Sofia for publishing their presenter’s tremendous BSides Sofia 2023 content on the organizations’ YouTube channel. Permalink ...

Infosecurity.US

Review: Can We Trust the Waterfox Browser? (Updated 2023)

Avoid The Hack! | July 22, 2023 | Data Privacy, review, Web Browsers

Waterfox came into the browser scene in 2011, coming right out the box with official x64 support (a rarity among browsers at the time) and promoted itself as an "ethical browser." However, ...

Avoid The Hack!

2023 OWASP Top-10 Series: Introduction

wlrmblog | July 22, 2023 | owasp, OWASP Top 10

In early June 2023, OWASP released the final version of the OWASP API Security Top-10 list update. At that time we published a “hot take” on this final version and followed that ...

Wallarm

GitHub satellite cyberattack Strontium cyberwarfare counter-drone The Legality of Waging War in Cyberspace

GitHub Developers Targeted by North Korea’s Lazarus Group

Jeffrey Burt | July 21, 2023 | Cybersecurity, GitHub, Lazarus Group, npm, supply chain

The Lazarus Group is behind a social engineering campaign that uses repository invitations and malicious npm packages to target developers on GitHub ...

Security Boulevard

BSides Sofia 2023 – Georgi Gerganov – Keytap Acoustic Keyboard Eavesdropping

Marc Handelman | July 21, 2023 | appsec education, BSides Sofia, BSides Sofia 2023, cybersecurity education, education, Hardware Security, Infosec Education, Privacy, Regulatory Education, Risk Education, risk management, Security Architecture, Security BSides, Security Conferences, Security Education

Our thanks to BSides Sofia for publishing their presenter’s tremendous BSides Sofia 2023 content on the organizations’ YouTube channel. Permalink ...

Infosecurity.US

What Is Federated Identity? How It Works & Why

Javed Shah | July 21, 2023 | identity management

What Is Federated Identity? Federated identity refers to linking a person’s electronic identity and attributes stored across multiple identity management systems. These systems use common protocols and communication standards to securely link ...

Identity & Authentication Blog