The holidays in security: Breaches drive governments to bug bounties
Australia may have taken it easy for the holiday season, but hackers weren’t easing off during the festivities.
David Braue | 08 Jan | Read more
Social Networking Security — News
US charges two Chinese nationals for massive data thefts from NASA and others
US lays charges against employees of Chinese private firm accused of working for the Chinese government.
Windows 10 new sandbox: soon you can safely run untrusted apps
The next version of Windows 10 will contain goodies for malware researchers.
Nation-state attackers fingered for exploiting bug in Twitter's anti-troll tools
Nation-state hackers could be undermining Twitter's efforts to clamp down on state-backed trolls.
Signal: we can't comply with Aussie encryption law even if we wanted to
But the Australian government could follow Brazil's lead by blocking WhatsApp, which uses Signal's encryption protocol.
Gamified training helping Secure Code Warrior build global security brand
A significant capital-raising has positioned Australian secure-coding success story Secure Code Warrior to continue its growth trajectory as it seeks to further strengthen its global brand.
David Braue | 17 Sep | Read more
Home, home on the cyber range
Many practitioners hone their incident detection and response skills through independent certifications, or even self-learning driven by their own enthusiasm. But with the establishment of a dedicated cybersecurity ‘cyber range’ in Sydney, one security vendor is adding gamification and hands-on training to bring skills development to a new level.
David Braue | 25 Jun | Read more
GDPR is here, but few Australian staff know what to do about it
Eurovision may have accepted Australia as one of its own, but Australian businesses may be hoping European Union authorities forget about them for a while as survey after survey suggests that they have missed today’s deadline for compliance with the EU’s general data protection regulation (GDPR) by a country mile.
David Braue | 25 May | Read more
Adobe: attackers can hack Windows 7 with this critical Acrobat PDF flaw
If you use Windows 7 and Adobe Acrobat Reader you need patch now.
When it comes to password hygiene, Australians are almost the least awful of a bad bunch
Australians are more fastidious than those in other countries about separating work and personal passwords – and more careful than many in protecting sensitive data like healthcare accounts – but use of secure passwords remains uncommon, according to new figures, and high rates of password reuse suggest that we still aren’t learning to protect sensitive information right.
David Braue | 04 May | Read more
As automated scan unearths pen-testing gold, careless businesses must polish their DevSecOps
Concerns over the security of companies’ development cultures were validated for an Australian cybersecurity specialist after a recent global scan of GitHub projects identified more than 200,000 servers where developers had left hardcoded passwords and other sensitive information in publicly available source code.
David Braue | 27 Apr | Read more
Are infosec certifications the best way to boost your salary?
Reports that information-security and risk-expertise are attracting salary premiums have long been rife, but the extent of the gap has been quantified even as new training courses and partnerships expand the breadth of available security specialisations.
David Braue | 22 Mar | Read more
Google boosts Gmail anti-phishing defenses to tackle BEC fraud
Google's new G-Suite updates aim to shut out sophisticated CEO impersonation phishing attacks.
“Truly frightening” IoT security should motivate CSOs to reconsider their endpoint strategies
More than a few Israeli security researchers are reconsidering their personal purchase of home security cameras, baby monitors, doorbells and thermostats after a hackathon revealed “truly frightening” security vulnerabilities that highlight the true extent of the Internet of Things (IoT) security threat to individuals and enterprises.
David Braue | 15 Mar | Read more
Online analytics firms leak user passwords from sites
"These aren’t bugs that need to be fixed, but rather insecure practices that should be stopped entirely," say Princeton privacy researchers.
OnePlus customers hit by card fraud after buying phones on oneplus.net
OnePlus investigates a possible card breach after customers report fraudulent charges on cards used to recently purchase OnePlus phones online.
2017: the year cybercrime made the world sit up and take notice
This was the year that cybersecurity hit the mainstream – and cybercriminals showed the world they’re not kidding around.
David Braue | 31 Dec | Read more
If you can’t detect a breach within 3 hours, your data is probably already gone
Distributed denial of service (DDoS) specialists can shut down an attack in 90 seconds once it’s detected – but if you take more than 3 hours to respond you’re likely to be compromised by a related attack in the meantime, warns a security expert who is seeing easy-to-source DDoS attacks becoming smokescreens for brazen data theft.
David Braue | 17 Oct | Read more
Government policy targets APAC for sharing, commercialising Australia’s cybersecurity experience
Cybersecurity firms are redoubling their commitment to sharing cybersecurity knowledge as the government’s new “global in perspective in regional and focus” digital engagement strategy positions cybersecurity as key to promoting and commercialising Australian digital expertise across the Asia-Pacific region.
David Braue | 04 Oct | Read more
WhatsApp is the most blacklisted app on BYOD iPhones in the enterprise
If you employer has blocked you from using WhatsApp on a work-managed iPhone, you’re not alone.