There's a lot going on in the world about governments snooping on citizens, and hacker groups trying to gain control over your facebook. While these are genuine concerns, it probably shouldn't be the biggest worry for most citizens. It is always easier to point the finger at a boogeyman, and blame all your woes on … Continue reading Privacy: Take control →

Why should we be concerned about the successful SHA-1 collision attack that was recently demonstrated by Google researchers? I take a look at encryption, cryptographic hashing, and why this attack is a big deal.

Today is the last Alien Eye in The Sky episode for 2016, so rather than just recapping the week, we thought we’d take a look at what’s transpired over the course of 2016. To be honest, I underestimated the huge task at hand, and after researching several hundred breaches, decided that it was better to … Continue reading The 2016 Alien Eye In the Sky Recap →

Another week, another set of impactful, bizarre, and interesting security stories.   We tried something interesting this week, rather than focusing on a few stories in the video and posting links to others, we’ve crammed them all into one action-packed episode! Stories covered   Toyota dealer sued for stealing intimate photos off couple’s smartphone   … Continue reading Alien Eye in the Sky Ep 8 →

Every so often, a report gets presented which looks like it was written by the work experience student that was employed by the intern. So what's the best way to respond? I went on twitter to ask the opinion of folk who have to deal with this kind of thing on a regular basis, and … Continue reading 15 ways to deal with badly written risks →

True to form, cyber security continues its domination of technology and mainstream news. Ransomware continues to strike, using different techniques such as Locky’s recent spread through social media, or attacking targets like the San Francisco Municipal Transport Agency. Password reuse attacks continue to grow. From Deliveroo’s attack a couple of weeks ago, to the UK’s … Continue reading Alien Eye In The Sky – Security News Roundup →

I always get excited when I get to travel to new places and meet interesting people as part of my job. To say I was extremely excited and humbled to have been invited to attend Tactical Edge in Bogota, Colombia would be an understatement. However, as the days drew closer, I found that fewer of my … Continue reading Tactical Edge, Colombia →

After a hiatus of a week while I was attending Tactical Edge in Colombia - I'm back with a roundup. Stories in the video http://www.theregister.co.uk/2016/10/24/chinese_firm_recalls_webcams_over_mirai_botnet_infection_ddo... http://www.bbc.co.uk/news/technology-37761868 https://www.veracode.com/blog/managing-appsec/do-you-use-open-source-components-find-out-what-our-la... https://www.ft.com/content/ed9ff168-9b03-11e6-8f9b-70e3cabccfae (may require subscription to read) https://www.wired.com/2015/07/jeep-hack-chrysler-recalls-1-4m-vehicles-bug-fix/ Other interesting links Independent researchers have confirmed MedSec's findings, including hack to zap someone's heart (PDF) Surveillance Evasion 15 hacker kids under 15 … Continue reading Alien Eye in the Sky: Ep 5 →

I blogged something about Mirai over on the AlienVault blog. But that didn't ease my pain, so I went and made a video as a kind of open letter to manufacturers.