The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency warned in an advisory that cardio defibrillators from medical device company Medtronic can be modified while still implanted in patients. Without access control, the defibs can't differentiate between authorized and unauthorized instructions.
Joe FitzPatrick, one of the small number of hardware security experts, says security teams and operators need to ask hard questions when they see claims of malicious hardware implants.
Security researchers and enterprise defenders have many Internet-wide scanning tools at their disposal. Researchers at Cisco Talos have developed a way to scan for hosts with IPv6 addresses using the UPnP protocol.
Researchers are developing a framework to analyze and describe misinformation campaigns, similar to the MITRE ATT&CK framework.
From an attacker’s perspective, the wider the net cast, the more number of potential victims caught. So it’s no surprise that Recorded Future research indicates attackers continue to rely heavily on exploits targeting Microsoft applications.
Ocean's Eleven has one of the great ensemble casts of all time, an air-tight script, and an audacious heist at its heart.
Slack Enterprise Key Management tool will let organizations with strict data protection requirements use their own encryption keys in their Slack workspace.
Google's Android Q will include a handful of changes to the way that the OS deals with location privacy and other app permissions.
Bills introduced in the House and Senate this week would require vendors selling IoT devices to the government to adhere to strict security guidelines.
Ron Wyden and Tom Cotton are asking the Senate Sergeant at Arms for numbers on cyber attacks on Senate computers.
Two new kinds of point-of-sale malware have emerged recently and have been seen in use against various targets.
The first Mission: Impossible film includes some ingenious hacking scenes and launched a multi-billion dollar franchise.
In the era of disinformation, manipulation and influence operations, platform providers, enterprises, and government agencies are working to find policy and technical solutions.
There is bipartisan consensus in Congress that a federal data privacy law is necessary. Public policy experts from Google, Microsoft, and Twitter discussed the issues lawmakers will need to address to craft meaningful privacy regulation at a panel at RSA Conference.
Dennis Fisher, Fahmida Rashid, Mike Mimoso and Jessy Irwin gather to talk about RSA Conference.