Cybersecurity Starts in the Boardroom
If you, as a threat actor, could embed your malware into a software module, that is then used by many innocent and unaware software developers in their packages, they release to the general public, wouldn’t you? That looks like a lot of infected machines for a small amount of work. …
Continue reading “Software repositories are a target for threat actors”
The FBI has issued a warning to investors who plan to Decentralized Finance (DeFi) Platforms for crypto-currency transactions highlighting the ease with which threat actors are exploiting any vulnerabilities in the platform’s security. Cyber Criminals Increasingly Exploit Vulnerabilities in Decentralized Finance Platforms to Obtain Cryptocurrency, Causing Investors to Lose Money …
Continue reading “The FBI warning of DeFi vulnerabilities being exploited”
I am back in the office after my holidays today and the first thing I had to do was write a blog post for our training website, CyberAwake, on the topical subject of working securely when away from the office: Do you have a “work from anywhere” policy? We”ll Start …
Continue reading “The best security tool for when you are working whilst travelling…”
Update: The mission was scrubbed for today. …however today is a Bank Holiday weekend here in England, so for those of us on leave here is something extra. It is either a “Because It’s Friday” or a “Weekend Read” feature, you can choose! For the regular reader, you know that …
I have reported on other air gap exploits by Mordechai Guri, from Ben-Gurion University in Israel – here are two more ways that the secure air gapped system can be exploited: GAIROSCOPE: Injecting Data from Air-Gapped Computers to Nearby Gyroscopes (arxiv.org) ETHERLED: Sending Covert Morse Signals from Air-Gapped Devices via …
Continue reading “Air gapping – not as secure as you think – enter Gairoscope and EtherLED”
