Sean Michael Kerner

DROWN, which stands for “Decrypting RSA with Obsolete and Weakened eNcryption,” is a newly disclosed vulnerability that could be exposing millions of sites to risk today. However, the DROWN attack is specific to the legacy SSLv2 protocol, and the impact of the flaw is not nearly as widespread as the Heartbleed flaw. Full details on […]

SAN FRANCISCO—Hewlett Packard Enterprise is using the RSA Conference here to launch its latest security initiatives in a bid to position itself as a strategic security platform partner for organizations. Among the initiatives is a broad, overarching Cyber Reference Architecture (CRA) that encompasses more than 350 distinct security capabilities. “The HPE Cyber Reference Architecture consolidates […]

SAN FRANCISCO—Amit Yoran has a message for the 2016 RSA Conference, and it’s that cyber-security is the cornerstone for the continued survival of the modern world. In a meeting with press and analysts at the RSA Conference here, ahead of his keynote today, Yoran outlined his views on the state of modern IT security and […]

Hugh Njemanze joined security vendor ThreatStream in July 2014 with the goal of helping reinvent the market for security information and event management, or SIEM, that he helped create with ArcSight. Njemanze was previously a co-founder and former CEO of ArcSight, which HP acquired for $1.5 billion in 2010. The executive is now renaming, reinventing […]

The U.S. Internal Revenue Service is warning that a 2105 breach of its Get Transcript application is significantly worse than first reported. In May 2015, the IRS publicly confirmed that information on 114,000 American taxpayers was exposed due to a breach of the IRS’ Get Transcript application. After an additional nine months of investigation, the […]

There is mismatch between what is actually going on in security and what the board of directors hears, according to the “Reporting to the Board: Where CISOs and the Board Are Missing the Mark” report out today. The report is sponsored by Bay Dynamics and is based on surveys of 136 senior IT professionals, with […]

As April 15—tax day in the United States—approaches, the security risk from tax-related fraud is on the rise, according to the Internal Revenue Service. It’s not just the IRS, though, that is warning about tax-related online fraud. The Online Trust Alliance (OTA) is warning that 46 percent of the e-filing tax Websites it surveyed get […]

The annual RSA Conference USA starts Feb. 29 in San Francisco, and once again, the halls of the Moscone Center will be filled to capacity with vendors and users alike, united in the common purpose of understanding the modern security paradigm. Without any doubt, the ongoing privacy and legal battle between Apple and the FBI […]

Breach Levels Subside but Still Affect Millions Fewer organizations reported breaches in 2015 than in the prior year, but the numbers are still large, new research shows. 1,673 Breaches Reported in 2015 The research showed 1,673 reported breaches in 2015, of which 46 involved 1 million or more records. More than 700 million records were […]

Since Feb. 16, the very public dispute between Apple and the FBI has raged, with the use of encryption on mobile devices at the center of the argument. The FBI wants Apple’s assistance to help circumvent the passcode lockout on an iPhone 5C used by one of the suspects in a Dec. 2, 2015 mass […]

How does an enterprise network look to an attacker? That’s the question that Israeli startup Illusive Networks is now tackling with its 3.0 update to its Illusive platform, which aims to provide an attacker’s view in a bid to help organizations both understand risk and defend against attacks. Illusive Networks is the first company launched […]

A key metric across myriad security reports in any given year is the time it takes for an organization to contain a breach. Security vendor Rapid7 today launched a new product called InsightIDR (incident detection and response) that aims to help organizations quickly identify potential breaches and then remediate them. The InsightIDR platform makes use […]