Sean Michael Kerner

Shape Security launched its BlackFish artificial intelligence technology on Nov. 7, providing organizations with new capabilities to detect credential stuffing attacks. Credential stuffing occurs when attackers use credentials stolen from data breaches to gain unauthorized account access at other sites. Shape Security for years has been warning about credential stuffing, with which attackers use a […]

In the public cloud world, Amazon Web Services, Google Cloud Platform and Microsoft Azure may be the most commonly known providers.  Mark Collier, chief operating officer of the OpenStack Foundation, however, is getting the message out that OpenStack is a growing player in the public cloud market too. Collier delivered his message about the current […]

CAINE 9.0 Linux Helps Investigators With Computer Security Forensics While there are many security-focused Linux distributions on the market, one distribution distinguishes itself by targeting forensic investigators. Instead of penetration testing tools, CAINE—which is an acronym for Computer Aided INvestigative Environment and was updated to version 9.0 on Oct. 25—is loaded with applications and tools […]

The OpenStack Foundation is hosting its semiannual summit in Sydney, Australia, Nov. 6-8, where it is highlighting use cases and progress in the multistakeholder, open-source cloud infrastructure effort.   The first day of the OpenStack Summit saw the unveiling of several initiatives designed to improve and promote integration between OpenStack and other open-source cloud efforts. […]

Online fraud attacks come in many forms and among the most common is new account fraud. IBM Security is now taking direct aim at the new account fraud problem by adding a feature to its IBM Trusteer security platform that helps identify newly created fraudulent accounts. “The new account fraud detection capabilities are new features in […]

Software integrity vendor Synopsys announced on Nov. 1 that it is acquiring privately held Black Duck Software for $565 million, in a deal that is expected to close next month. Black Duck Software develops a software composition analysis platform that is used by organizations to help them understand and secure their open-source software development efforts […]

The second day of this year’s Mobile Pwn2Own hacking contest on Nov. 2 brought with it more exploits, including the longest exploit chain ever seen at a Pwn2Own event.  Mobile Pwn2Own 2017 ran from Nov.1-2 in Tokyo and resulted in the disclosure of 32 vulnerabilities involving Apple, Samsung and Huawei mobile devices. By the end of […]

EU’s GDPR Data Protection Regulations Bring Challenges, Opportunities ABSTRACT: With data protection and data privacy becoming more of a concern, jurisdictions around the world are beginning to enforce data protection regulations. Among the most stringent set of regulations is the European Union’s General Data Protection Regulation (GDPR), which will be enforced starting on May 25, […]

On the first day of the Mobile Pwn2Own 2017 hacking competition in Tokyo, security researchers demonstrated new zero-day attacks against fully patched mobile devices. On Nov. 1, different groups of security researchers made a total of seven exploit attempts, five of which were successful. Among the successful exploit targets were fully patched Apple iPhone 7, […]

Apple released updated versions of its mobile iOS and desktop macOS operating systems on Oct. 31, patching a critical WiFi security vulnerability known as KRACK that was first publicly disclosed on Oct. 16. The iOS 11.1 and macOS 10.13.1 updates patch multiple software flaws associated with the KRACK WiFi vulnerability disclosure. KRACK is an acronym […]

Cyber-Security Vendors Raise New Funding in October 2017 October 2017 was another month in which multiple cyber-security vendors raised new funding as demand for technologies that can help organizations mitigate the risk of network breaches continues to accelerate. The funding highlights the various security technology sectors that are growing, including threat deception, security management, multifactor […]

DigiCert announced on Oct. 31 that is has completed the $950 million acquisition of Symantec’s website security and PKI (Public Key Infrastructure) business assets, which include the company’s SSL/TLS certificates.  The deal was first announced on Aug. 3, with the goal to help improve the PKI infrastructure for Symantec’s certificates, which had been under scrutiny […]