Sean Michael Kerner

While most Americans were celebrating the Thanksgiving holiday on Nov. 23, image hosting site imgur was dealing with a data breach report. Security researcher Troy Hunt who operates the Have I Been Pwned website, informed Imgur of the security incident after he received data from an alleged breach. “On the afternoon of November 23rd, an […]

Security startup Dome9 announced its new Magellan service on Nov. 22, providing organizations with context-aware security capabilities for cloud deployments. The Magellan service is a new module in Dome9’s Arc cloud security platform that provides cloud configuration analysis capabilities. With Magellan, Dome9 is now adding context awareness, derived from enriched log data and threat analysis, to […]

Uber publicly admitted on Nov. 21 that it was the victim of a massive data breach that exposed personally identifiable information on 56 million users and 600,000 drivers. “I recently learned that in late 2016 we became aware that two individuals outside the company had inappropriately accessed user data stored on a third-party cloud-based service […]

Amazon announced its newest cloud region on Nov. 20, with the public announcement of the AWS Secret Region. As opposed to other Amazon Web Services (AWS) regions, which are available for anyone to use, the Secret Region is specifically for use by the U.S. Intelligence Community. The Secret Region is being made available to the […]

Intel issued a critical firmware update on Nov. 20 for a set of eight vulnerabilities that impact the Intel Management Engine firmware. “In response to issues identified by external researchers, Intel has performed an in-depth comprehensive security review of our Intel Management Engine (ME), Intel Server Platform Services (SPS), and Intel Trusted Execution Engine (TXE) […]

As Black Friday and Cyber Monday approach, American consumers are likely to be buying more connected internet of things toys and devices than ever before. However, with those devices come a host of security risks, though few consumers care, according to a report released Nov. 20 by Keeper Security. Keeper Security surveyed 1,000 U.S. adults […]

McAfee released new research on Nov. 20 indicating that the Lazarus Group hacking gang has now moved into the mobile realm. The Lazarus Group has been implicated in multiple large-scale attacks in recent years, including the 2014 attack against Sony Pictures and this year’s WannaCry ransomware attack. The Lazarus Group is thought to be a […]

Nadir Izrael, co-founder and CTO of Armis Security first brought his company out of stealth mode in June 2017, with the promise of helping organizations to improve Internet of Things (IoT) visibility and control. Now in November 2017, Armis is growing quickly, thanks in part to the company’s discovery of the BlueBorne Bluetooth security vulnerability […]

SecTor Highlights Need for More Trust and Cyber-Security Regulations SecTor, which runs annually in Toronto, has emerged over its 11-year existence to become one of the larger security conferences in North America. The 2017 event ran Nov. 14-15 and included a mix of topics, including government involvement in cyber-security policy, security fundamentals and more involved […]

Oracle generally only issues security patches for its applications as part of a quarterly Critical Patch Update, but on Nov. 14 the company rushed out an emergency patch for five critical flaws in its Tuxedo application—which is included in PeopleSoft products—that could enable a hacker to abuse the Jolt protocol and could leave enterprises at […]

IBM, Packet Clearing House and the Global Cyber Alliance announced on Nov. 16 the launch of Quad9 DNS, a free service to help internet users reduce risk and stay secure online. DNS (Domain Name Service) is a foundational element of internet infrastructure, matching IP addresses with domain names. The name “Quad9” is a reference to […]

TORONTO—The time has come for the U.S. government and other governments around the world to start regulating internet of things (IoT) security, according to Bruce Schneier, CTO of IBM’s Resilient Systems. Schneier delivered his message during a keynote address at the SecTor security conference here Nov. 15. Today everything is basically a computer, whether it’s […]