Why should we be concerned about the successful SHA-1 collision attack that was recently demonstrated by Google researchers? I take a look at encryption, cryptographic hashing, and why this attack is a big deal.
Flashpoint, shining a light on threat intelligence from the dark web
New York-based Flashpoint was founded in 2010, and has evolved its mission to comb the dark web to provide business risk intelligence to help organizations mitigate risk across the enterprise. The company is headed up by CEO Josh Lefkowitz, with Evan Kohlmann and Josh Devon serving as chief innovation officer, and chief operating officer respectively. … Continue reading Flashpoint, shining a light on threat intelligence from the dark web
The 2016 Alien Eye In the Sky Recap
Today is the last Alien Eye in The Sky episode for 2016, so rather than just recapping the week, we thought we’d take a look at what’s transpired over the course of 2016. To be honest, I underestimated the huge task at hand, and after researching several hundred breaches, decided that it was better to … Continue reading The 2016 Alien Eye In the Sky Recap
Firemon reaches for the FortyCloud
Network security is a major concern for both enterprises and individuals. With threats seemingly around every corner, we focus much of our energy on awareness and mitigation, such as firewalls. Well, sometimes. It’s not always this simple. Setting up a suitable firewall becomes far more of a challenge the more systems there are in a … Continue reading Firemon reaches for the FortyCloud
Alien Eye in the Sky Ep 8
Another week, another set of impactful, bizarre, and interesting security stories. We tried something interesting this week, rather than focusing on a few stories in the video and posting links to others, we’ve crammed them all into one action-packed episode! Stories covered Toyota dealer sued for stealing intimate photos off couple’s smartphone … Continue reading Alien Eye in the Sky Ep 8
15 ways to deal with badly written risks
Every so often, a report gets presented which looks like it was written by the work experience student that was employed by the intern. So what's the best way to respond? I went on twitter to ask the opinion of folk who have to deal with this kind of thing on a regular basis, and … Continue reading 15 ways to deal with badly written risks
Alien Eye In The Sky – Security News Roundup
True to form, cyber security continues its domination of technology and mainstream news. Ransomware continues to strike, using different techniques such as Locky’s recent spread through social media, or attacking targets like the San Francisco Municipal Transport Agency. Password reuse attacks continue to grow. From Deliveroo’s attack a couple of weeks ago, to the UK’s … Continue reading Alien Eye In The Sky – Security News Roundup
Alien Eye in the Sky
A lot went down - some stories in the video and a ton of interesting links below. Enjoy! Stories in Video Tesco Bank Hacked Adult Friend Finder hack Facebook buyingstolen passwords IP Bill set to becomelaw Other interesting stories  Cyber Security Challenge UK crowns youngest ever champion GCHQ wants internet providers to rewrite systems … Continue reading Alien Eye in the Sky
Tactical Edge, Colombia
I always get excited when I get to travel to new places and meet interesting people as part of my job. To say I was extremely excited and humbled to have been invited to attend Tactical Edge in Bogota, Colombia would be an understatement. However, as the days drew closer, I found that fewer of my … Continue reading Tactical Edge, Colombia
Alien Eye in the Sky: Ep 5
After a hiatus of a week while I was attending Tactical Edge in Colombia - I'm back with a roundup. Stories in the video http://www.theregister.co.uk/2016/10/24/chinese_firm_recalls_webcams_over_mirai_botnet_infection_ddo... http://www.bbc.co.uk/news/technology-37761868 https://www.veracode.com/blog/managing-appsec/do-you-use-open-source-components-find-out-what-our-la... https://www.ft.com/content/ed9ff168-9b03-11e6-8f9b-70e3cabccfae (may require subscription to read) https://www.wired.com/2015/07/jeep-hack-chrysler-recalls-1-4m-vehicles-bug-fix/ Other interesting links Independent researchers have confirmed MedSec's findings, including hack to zap someone's heart (PDF) Surveillance Evasion 15 hacker kids under 15 … Continue reading Alien Eye in the Sky: Ep 5
