Sean Michael Kerner

At the beginning of every new year, vendors and tech pundits alike look ahead to what’s next for IT security. While I understand the need to do so to help identify coming threats and emerging trends, the simple truth is that for the vast majority of IT users (and people reading this column), emerging threats […]

Google came out with its first Android security patch of 2016, and it’s fixing some familiar flaws. There are 12 patches in total, five of which Google rated as critical. Among the critical flaws is CVE-2015-6636, which Google identifies as a remote code execution vulnerability in mediaserver. “During media file and data processing of a […]

The Payment Card Industry Data Security Standard (PCI DSS) is one of the key components of security compliance, and it’s set to improve in 2016. Among the areas of PCI DSS focus for the new year will be improved guidance on how organizations can comply with requirement for continuous monitoring and logging. “The PCI DSS […]

Linux is driving into 2016 with new members joining the Automotive Grade Linux project and a new Unified Code Base distribution to enable the next generation of automotive technology. AGL is run as a Linux Foundation Collaborative Project that first got started in September 2012. Ford, Mazda, Mitsubishi Motors and Subaru are now officially joining […]

As Internet Gets Faster, Volume of DDoS Attacks Grows, Akamai Reports Broadband speeds aren’t the only thing on the rise. The volume of security risks are also increasing. Here are key findings in Akamai’s 3Q15 State of the Internet report. Top DDoS Attack Was 149G bps During the third quarter, the largest attack that Akamai […]

At the heart of much of the Internet’s security is the use of Secure Sockets Layer/Transport Layer Security (SSL/TLS), which provides encryption for data in motion. Certificate Authorities (CAs) are the trusted entities that issue TLS certificates, and as a group, the CAs are gearing up for big year in 2016, with multiple efforts designed […]

For Mozilla, 2015 has been a year of large challenges, with a shift in funding sources and increasing competitive pressures across the desktop and mobile markets. The biggest challenges for Mozilla, however, are likely yet to come in 2016. One of the biggest challenges for Mozilla in 2015 and into 2016 is funding; 2015 is […]

Japanese toy vendor Sanrio, owner of the popular Hello Kitty brand, is admitting to a security vulnerability on its SanrioTown.com community Website. The vulnerability has already been patched, and there is no public evidence that private user information has been publicly posted. “On Dec. 19, it was revealed through outside sources that personal information such […]

The idea of using isolation techniques—such as a sandbox or a hypervisor—to limit the attack surface in an operating system or a piece of software is not a new one, but it is an evolving space with innovations. One of the vendors using isolation to limit security risks is Bufferzone, which is using its own […]

Oracle has reached a settlement with the U.S. Federal Trade Commission over charges related to Java Software updates and security. The problem that the FTC had with Oracle’s Java updates is that the update mechanism wasn’t actually keeping users secure as it left older versions of Java on the user’s system. For several years, Java […]

A pair of recent reports allege that foreign attackers have been able to infiltrate U.S. critical infrastructure. A Wall Street Journal report alleged that Iranian hackers were able to infiltrate the operation of a dam not far from New York City. An Associated Press report alleged even more widespread risks to the U.S. power grid, […]

Organizations that need to be compliant with Payment Card Industry Data Security Standard (PCI DSS) version 3.1 are getting a reprieve on a key compliance measure. They now do not need to migrate to Transport Layer Security (TLS) version 1.1 or higher until June 2018, a two-year delay from the original data of June 2016. […]