Sean Michael Kerner

LAS VEGAS—Among the most pernicious forms of malware today is ransomware, which encrypts user devices until a fee is paid to the attacker. There are a number of different ways to find and defend against ransomware, including detecting attacks through network visibility, which is where ExtraHop Network enters the picture. In a video interview at […]

LAS VEGAS—There are those that believe the era of infrastructure is gone, but Martin Casado is not among them. Casado, now a venture capitalist at Andreessen Horowitz, discussed during a keynote address at the Interop conference here why we’re now on the cusp of an evolutionary shift in the infrastructure market. Casado is well-known in […]

The open-source OpenSSL cryptographic library project issued a security update this week that patched six issues, though only two of them are rated “critical.” OpenSSL itself is a critical part of the Internet’s infrastructure, as one of the most widely deployed encryption elements. It is included in desktop, mobile and server applications to help enable […]

Back in August 2015, the Linux Foundation Core Infrastructure Initiative (CII) announced a new badging effort to help open-source projects with security best practices. On May 3, the first groups to achieve the security badge were formally announced, and they include Curl, GitLab, OpenBlox, OpenSSL, Node.js, Zephyr and the Linux kernel. To earn a badge, […]

LAS VEGAS—As security threats and breaches continue to mount, there is a growing need and demand for insurance services to help mitigate risk, which is why the cyber-insurance business is now growing. In a session at the Interop conference here, David Bradford, co-founder of Advisen, detailed the current state of the cyber-insurance market. According to […]

On Internet servers around the world, ImageMagick, a widely deployed technology for processing images for the Internet, is under attack via a vulnerability identified as CVE-2016-3714, a remote code execution issue that could enable an attacker to exploit an affected system. The ImageMagick flaw, which is receiving the branded vulnerability treatment, is also known as […]

New research published May 3 by SophosLabs reveals that even while attackers continue to design custom-tailored lures to exploit users, the inconvenient truth is that the most popular vulnerabilities are issues that have been patched years ago. Instead of just sending random emails, SophosLabs has found an increasing use of what it refers to as […]

Google has released its fifth security update for its Android mobile operating system so far in 2016, this time patching 40 vulnerabilities. Of those, 12 are rated as critical, with two of the critical issues identified as remote code execution vulnerabilities in Android’s much maligned mediaserver component. In addition to the two critical issues in […]

The latest iteration of the Payment Card Industry Data Security Standard—PCI DSS 3.2—adds new requirements and clarifies others. PCI DSS is a compliance specification that is typically a requirement for any organization that handles payments, including online and traditional brick-and-mortar retailers. Among the biggest changes in the PCI DSS 3.2 standard—the successor to the PCI […]

Ubuntu developers are gathering this week for the Ubuntu Online Summit (UOS), which runs from May 3-5, to discuss development plans for the upcoming Ubuntu 16.10 Linux distribution release, code-named “Yakkety Yak.” In a video interview with Mark Shuttleworth, founder of Ubuntu Linux and Canonical, he discusses Ubuntu 16.10, including the Mir display server and […]

AUSTIN, Texas—In the standard philosophy that has defined open-source since its earliest days, developers simply “scratch an itch” for things they want done, rather than follow predefined product roadmaps. At the OpenStack Summit in Austin, Texas, this week, one of the things that was discussed was the emergence of the OpenStack Foundation roadmap effortto help […]

Since the dawn of the Internet era, virtual private networking (VPN) has been the cornerstone of enterprise remote access technology. Now security vendor Zscaler is aiming to disrupt the staid VPN market with a new approach built for the modern cloud era. Zscaler’s core technology is a cloud-based Web security platform that can help reduce […]