A weekly collection of news, op-ed analysis, tools and resources for cybersecurity practitioners. Curated and edited by Ryan Naraine and sent to your inbox every Monday morning.
05.27.2021 | 22'' read
What follows is the transcript of a Security Conversations podcast interview with Google security leader Heather Adkins. We discuss her role at the search advertising giant, the priorities around securing the software supply chain, expanding the concept of zero-trust and the future of modern desktop computing. It has been edited for brevity and clarity.
Read05.24.2021 | 6'' read
The deluge of zero-day attacks hitting victims across all major computing platforms is more eyebrow-raising everyday. Just this week, Google quietly updated an Android bulletin to add the dreaded "may be under lim ited, targeted exploitation" language but, as is the norm, there are no IOCs or any documentation to help defenders.
Read05.17.2021 | 6'' read
It's RSA Conference week and, quite frankly, I'm yawning through most of it this year. There's just no way to replicate the in-person experience where RSA offsite networking drive a lot of deal-making, hirings and vendor partnerships. This year, it feels staler than usual and the year-long Zoom/headphone fatigue means that no one is excited to watch another virtual presentation with poor camera/microphone settings...
Read05.10.2021 | 5'' read
A quick word on this Colonial Pipeline ransomware infection dominating mainstream news headlines and bringing the ransomware epidemic to the front burner for everyone. Plus, journalists doing free PR/marketing for ruthless ransomware gangs.
Read05.03.2021 | 6'' read
We complain a lot about FUD and snake-oil ruining this industry but so many reputable security vendors are getting sucked into this pay-for-an-award-logo that turns you in a bit of a laughing stock among educated buyers. Stop buying these fake awards. You're doing yourself and your company a disservice.
Read