Sean Michael Kerner

Malicious actors that resemble approved users pose serious threats because they do not set off security alerts, according to the findings of Rapid7’s 2015 Incident Detection and Response survey. Additionally, security information and event management (SIEM) tools were insufficient to detect compromised credentials, according to the study, which garnered feedback from 271 security professionals from […]

Mozilla is finally and officially closing its Persona Web authentication system after coming to the conclusion that the technology was not being adopted. Using and storing passwords securely has always been a challenge on the Internet. The promise of Persona was to make Web authentication easier than users needing to remember a separate login for […]

Solus Operating System 1.0 Provides New Linux Desktop Experience Among the many features of the Solus Project’s new Linux distribution is the new Budgie desktop environment. Here’s what else Solus Operating System 1.0 offers. No Installation Required As is the case with other modern Linux distributions, Solus can be installed as a “Live Linux” image […]

As interest in drone technology continues to grow, also expanding is the open-source Dronecode effort, which is a Linux Foundation Collaborative Project. Dronecode launched in October 2014 and has grown significantly since then, from only a handful of members to 51. Dronecode isn’t just vaporware code, but rather, now serves as the basis for multiple […]

Any given attacker can choose from multiple attack vectors to breach an organization, and that is why threat detection technology needs to look at multiple layers. Security vendor LightCyber today expanded its behavioral attack detection capabilities with the announcement of its Magna platform 3.1. “With this new release, we actually converge profiling context for the […]

The open-source Drupal content-management system (CMS) is talking steps to help protect against multiple potential risks that have been publicly revealed. On Jan. 6, security research vendor IOactive first disclosed the issues, which are focused on the Drupal update process. The Drupal project’s security team is aware of the concerns and is fixing all the […]

At the end of 2015, Juniper Networks publicly disclosed that it had found previously unknown backdoor code on some of its firewalls. Juniper patched the issues and is now going a step further by replacing a core cryptography component in its ScreenOS operating system to further reduce any potential risk. A core element of many […]

Jim Morrisroe, newly named president of software security startup SourceClear, worked at the dawn of the modern unified communications and cloud eras and is now keen to lend his management talents to the world of security—which he said he considers the most pressing needs in technology today. The vision for SourceClear, founded in 2013, is […]

In an unexpected move, when browser vendor Mozilla released Firefox 43.0.4 on Jan. 6, it re-enabled support for newly issued SHA-1(Secure Hash Algorithm 1) security certificates. Mozilla had previously set Firefox to reject new SHA-1 signed Secure Sockets Layer/Transport Layer Security certificates as of Jan. 1. “For Firefox users with unfiltered access to the Internet, […]

The RIG exploit kit is under attack, thanks to the efforts of Cisco’s security research group. Among the most popular exploit kits, RIG enables attackers with packaged vulnerabilities to infect users. Cisco monitored the operations of the RIG exploit kit and discovered that two primary service providers out of Russia were hosting much of the […]

Any modern device is made up of multiple hardware and software components, any one of which could represent a potential risk. That’s a reality that secure mobile phone vendor Silent Circle has learned with its Blackphone, thanks to the responsible security disclosure from Tim Strazzere, director of mobile research at SentinelOne. Strazzere found that there […]

Linode is having a rough start to 2016. The cloud hosting provider has been suffering from a series of distributed denial-of-service attacks that were first reported on Dec. 25, impacting multiple Linode data center locations, including Dallas; Atlanta; Newark, N.J.; Fremont, Calif.; Singapore; Frankfurt, Germany; and London. Adding to Linode’s woes, on Jan. 5, after […]