Intrusion, Inc (INTZ) Q2 2021 Earnings Call Transcript fool.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from fool.com Daily Mail and Mail on Sunday newspapers.
Hardware Cyberattacks: How Worried Should You Be?
How to fit hardware threats into your security model as hardware becomes smaller, faster, cheaper, and more complex.
For most organizations, it s time to put modern hardware threats into perspective.
This year has had its share of hardware scares. We kicked off 2018 with the Spectre and Meltdown attacks; most recently, a Bloomberg BusinessWeek report detailed how Chinese plants implanted network monitoring and control chips on motherboards made for Supermicro.
Hardware technology – and, consequently, hardware attacks – have come a long way as devices have grown smaller, faster, cheaper, and more complex. Attacks that used to cost thousands of dollars can be done for a few hundred bucks or less. Now people panic when a report describes an implant the size of a grain of rice, one which is allegedly everywhere but nobody can find it.
It s Time to Break the Rule of Steve
Today, in a room full of cybersecurity professionals, there are still more people called Steve than there are women.
Discussions about recruitment trends and how people can further their careers in cybersecurity are common topics at industry conferences these days. Recently, at Black Hat Europe, one of the most striking career discussions revolved around audience demographics, which reminded me of a point I d heard earlier in the week: the Rule of Steve, a concept originally introduced by Dawn-Marie Hutchinson, chief information security officer for pharmaceuticals and R&D at GSK.
This rule is easy enough to explain: In a room full of cybersecurity professionals, there are usually more people called Steve than there are females. Yes, this is a tongue-in-cheek observation, but it illustrates how far our industry has to go in encouraging not only women but other diverse groups into the workforce.
Get Permission
A new leaks site claims to be selling data from Cisco, FireEye, Microsoft and SolarWinds that was stolen via the SolarWinds supply chain attack.
While all four organizations are confirmed victims, security experts question whether the offer is legitimate and note that it parallels previous efforts, including by Russia, designed to foil hack attack attribution.
The appearance of the leaks website comes just four weeks after cybersecurity firm FireEye discovered and issued a public alert, warning that Texas-based SolarWinds Orion network monitoring software had been backdoored as part of a sophisticated, monthslong campaign.
Subsequently, numerous Orion-using organizations have confirmed that they were victims of second-stage attacks, launched by hackers who accessed the Orion backdoor - dubbed Sunburst - that may have compromised data and led to further compromises. Confirmed second-stage victims include, among others, FireEye, Microsoft and up to 10 U.S. gover
This edition of the ISMG Security Report features insights from David Forscey, managing director at Aspen Cybersecurity Group, on improving supply chain security in