The Payment Card Industry (PCI) council is an industry group that includes the large credit card issuers and they have, for years, owned a standard called the PCI Data Security Standard or PCI DSS. While complying with it is not a law (except in a couple of states), complying with it is a contractual requirement […]
Continue reading → [DISPLAY_ACURAX_ICONS]All software has bugs. But some software has more bugs than others. And some organizations are better at finding and fixing those bugs. Just not those in the public sector. Veracode, the code scanning tool/defect finding tool vendor scans a lot of apps a lot of times. Here is a bit of data that should […]
Continue reading → [DISPLAY_ACURAX_ICONS]The Trump administration effectively eliminated the cybersecurity role in the State Department several years ago by eliminating its leader and burying the function in the State Department bureaucracy. Their theory was that the White House National Security function could assume the diplomatic role for cyberspace. Ultimately, that strategy failed and towards the very end of […]
Continue reading → [DISPLAY_ACURAX_ICONS]How Many Times Do I Need to Say – Crypto is Software, Software Has Bugs, Your Money is at Risk Decentralized Finance platform (DeFi) Revest Finance said that it lost $2 million due to a software bug and, oh yeah, (a) the can’t recover the funds, (b) they do not have the money to cover […]
Continue reading → [DISPLAY_ACURAX_ICONS]Cars have huge attack surfaces. And getting bigger every year. One source says the average car has 30-50 computers and luxury cars have a hundred (personally, I think that is low). Add to that 60 to 100 sensors. Some cars have a hundred million lines of code in them. How do you make that 100 […]
Continue reading → [DISPLAY_ACURAX_ICONS]Hackers are creative if nothing else. Normally when police want data, they need to provide a subpoena or warrant, but that is not required in all cases. If there is a risk of imminent harm – life or death – the police can just ask a company for their data and they have to comply. […]
Continue reading → [DISPLAY_ACURAX_ICONS]