This should make you feel better. Especially under the current situation. Palo Alto Networks Unit 42, an extremely well known and well respected group of security researchers, tested 200,000 network connected infusion pumps used in medical facilities. 75% of the devices tested had security vulnerabilities that would allow hackers to exploit them. The purpose of […]
Continue reading → [DISPLAY_ACURAX_ICONS]GitGuardian reported yesterday that organizations leaked more than 6 million passwords, API keys and other secrets last year. That is just in the code that they scanned. This is double the number found the year before. In part, this is due to better software that can sniff out these secrets. That translates to 3 out […]
Continue reading → [DISPLAY_ACURAX_ICONS]The whole model of loyalty programs is how do we make them so hard to use that we can pretend we are giving people something when, in fact, we are not really. Enter the airlines. They give out frequent flyer miles for all kinds of things from actual airline tickets to anything that you buy […]
Continue reading → [DISPLAY_ACURAX_ICONS]Quietly, the IRS was trying to reduce the billions of dollars a year in fraud from people who pretend to be you and me and do things like steal tax refunds. They did this by making it harder to pretend to be someone you are not, including using biometrics. Some people complained that people who […]
Continue reading → [DISPLAY_ACURAX_ICONS]When hackers are faced with multi-factor authentication, they look for another weak spot – often it is the human being. For example, Office 365 users are being bombarded with push notifications requesting access. After a while they just say yes to make it stop. Now the researchers have given it a name – Multi-factor authentication […]
Continue reading → [DISPLAY_ACURAX_ICONS]Sens. Susan Collins and Angus King (Maine) have added their names to a letter to the SEC asking them to increase the cybersecurity reporting rules for publicly traded companies. The first of potentially many new SEC rules was rolled out this week requiring investment advisors and investment companies to report cybersecurity incidents and breaches to […]
Continue reading → [DISPLAY_ACURAX_ICONS]