The hacker business is like any other business. There are specialists. In the hacking business, one of the specialties is initial access. Initial access brokers break in to businesses and “collect” credentials. They don’t use those credentials. That is a different specialty. Researchers say that they studied Russian language hacker forums for a few months […]
Continue reading → [DISPLAY_ACURAX_ICONS]In 2008 a group of MIT students were going to present a paper at the hacking convention Defcon on vulnerabilities in the Boston Transit (called the MBTA) fare card. The MBTA sued Defcon and the presentation was cancelled. But not before the slides for the presentation were published online. While this is an alternative to […]
Continue reading → [DISPLAY_ACURAX_ICONS]Zelle is one of the most recent incarnations in peer to peer payments. Peer to peer payments are ones that allow you to directly transfer money from one person’s bank account (the sender) to another’s (the receiver). Competitors to Zelle include PayPal, Venmo, Popmoney and CashApp. The difference with Zelle is that it is owned […]
Continue reading → [DISPLAY_ACURAX_ICONS]In light of the most recent Chinese attack on Azure, several people are speaking out. Amit Yoran, chairman of security firm Tenable, former president of RSA and former Homeland Security National Cyber Security Division director, says this in a LinkedIn post: Cloud providers have long espoused the shared responsibility model. That model is irretrievably broken […]
Continue reading → [DISPLAY_ACURAX_ICONS]Since it seems that fully remote work and hybrid work are not going away anytime soon, we need to make sure that remote workers are secure. It is not going away because the best employees will find another job rather than be forced to come into the office. Forester Research says 68% of remote workers […]
Continue reading → [DISPLAY_ACURAX_ICONS]Zero Trust is a buzzword these days. People say that it is a key tool in the security practitioner’s arsenal, but what is it anyway. Here is what the core elements are, according to NIST’s zero trust framework. That means those “software functions” in the cloud. Each of them. Each of them is a resource. […]
Continue reading → [DISPLAY_ACURAX_ICONS]