Vermont Grid ‘Hack’ Latest Tumble Down Attribution Rabbit Hole
The rush to connect a security incident at a Vermont utility to Russian government hackers is more evidence of the challenges around attribution.
Michael Mimoso
Four New Normals for 2017
Ransomware, insecure connected devices, bug bounties and governments buying bugs: All four ceased to be novelties in 2016; they’re all new normals for cybersecurity.
NIST Calls for Submissions to Secure Data Against Quantum Computing
NIST has made a public plea for submissions for new crypto algorithms that can stand up against quantum computing and protect data.
Panasonic Avionics has pushed back against research released Tuesday by IOActive disclosing vulnerabilities in in-flight entertainment systems.
Now that a proposed revision to the Wassenaar Arrangement has been rejected, it will be up to the Trump administration to decide whether to attempt to renegotiate again.
IOActive researchers disclosed vulnerabilities in Panasonic Avionics In-Flight Entertainment systems that could be abused to manipulate flight data shown to passengers, or steal their personal information.
Researchers at Flashpoint said their analysis of the latest ShadowBrokers dump of NSA tools leads them to believe an insider with access to a code repository stole the data.
Experts at InfoArmor said the stolen database of 1 billion Yahoo accounts has been sold multiple times for at least $300,000 each time.
Nagios Core has been updated to take care of two critical vulnerabilities that can be pinned together to attack servers hosting the open source IT infrastructure monitoring software.
Microsoft followed Google’s lead and said it will soon block Flash Player by default in the Edge browser.
