All Posts

Cybersecurity News – June 7, 2021

VMware vulnerability with 9.8 severity rating is under attack The vulnerability, tracked as CVE-2021-21985, resides in the vCenter Server, a tool for managing virtualization in…

Cybersecurity News – June 4, 2021

NYC transportation authority hacked using Pulse Secure zero-day Back in April, Chinese-backed threat actors breached the network of New York City’s Metropolitan Transportation Authority (MTA)…

Cybersecurity News – Week in Review – May 31- Jun 4, 2021

This week’s Cyber Security Headlines – Week in Review, May 31- Jun 4, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Bryan Zimmer,…

Defense in Depth: Fear of Automation

Why are security professionals so darn afraid of automation? We continue to hold on to the idea that people have to be integral in the…

Cybersecurity News – June 3, 2021

Florida teen faces charges for DDoS attack on school district Felony charges have been filed against an unnamed 17-year year old junior at St. Petersburg…

[6-18-21] “Hacking Self-Defending Data” – CISO Series Video Chat

Please join us on Friday, June 18th, 2021 for “Hacking Self-Defending Data:  An hour of critical thinking on how and when your data can intelligently…

Cybersecurity News – June 2, 2021

Critical WordPress plugin zero-day under active exploitation Threat actors are scanning for sites running the Fancy Product Designer plugin to exploit a zero-day bug allowing…

PREVIEW [6-4-21] “Hacking DLP” – CISO Series Video Chat

Here’s a preview video of our CISO Series Video Chat happening this Friday, June 4th, 2021. The video features me and one of our guests,…

Holy Crap! We’ve Been Doing This for Three Years!

On this day three years ago, Mike Johnson and I released the first episode of CISO Series’ CISO/Security Vendor Relationship Podcast. Our primary goal was…

Cybersecurity News – June 1, 2021

Amazon to opt-in users to Amazon Sidewalk  On June 8th, Amazon will enroll Echo, Ring, and other Amazon devices in the US into its new…

Cybersecurity News – May 31, 2021

Two new attacks allow alteration of certified PDF documents Researchers from Ruhr-University Bochum have disclosed two new attack techniques, dubbed Evil Annotation and Sneaky Signature…

Cybersecurity News – May 28, 2021

Twitter urges Indian government to respect free speech On Thursday, Twitter responded to India’s new heavy-handed regulations that give authorities greater control over online media…

Cybersecurity News – Week in Review – May 24-28, 2021

This week’s Cyber Security Headlines – Week in Review, May 24-28, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Jimmy Sanders (@jfireluv), CISO,…

Defense in Depth: Hiring Talent with No Security Experience

Should you look for the ideal candidate that has all the security talent you want, or should you find the right person and train them…

Cybersecurity News – May 27, 2021

Belgium disrupts cyber-espionage campaign In the wake of Microsoft’s recent disclosure of Exchange server vulnerabilities, Belgium’s Federal Public Service Interior launched an investigation in March…

[6-11-21] “Hacking Acceptable Risk” – CISO Series Video Chat

Please join us on Friday, June 11th, 2021 for “Hacking Acceptable Risk: An hour of critical thinking on when we should stop trying to reduce…

Best moments from “Hacking the Speed of Business” – CISO Series Video Chat

Here are some great highlights from “Hacking the Speed of Business: An hour of critical thinking on how security can keep up with accelerating business…

Cybersecurity News – May 26, 2021

DHS to issue first-ever cybersecurity regulations for pipelines after Colonial hack The Department of Homeland Security is moving to regulate cybersecurity in the pipeline industry…

Something Stinks In Here. I Think It’s Your Code.

The problem isn’t our users, it’s you and your past due code. Did your code step in something? Maybe it’s tainted or expired. Whatever it…

Cybersecurity News – May 25, 2021

8.3 million plaintext passwords leaked A leak of almost 13 million DailyQuiz users appeared for sale online from multiple sources, following a breach of the…

Cybersecurity News – May 24, 2021

Air India hack covers ten years and three other airlines The hack that is currently being attributed to Air India was apparently directed at Atlanta-based…

Cybersecurity News – May 21, 2021

Millions of Android users’ data exposed due to cloud authentication failures A report issued by researchers at Check Point reveals serious cloud misconfigurations which have…

Defense in Depth: Security Hygiene for Software Development

How do we improve the quality of our software? In the rush to be competitive, security has often taken a back seat to be first…

Cybersecurity News – Week in Review – May 17-21, 2021

This week’s Cyber Security Headlines – Week in Review, May 17-21, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Ty Sbano, CISO, Sisense…