Page 37 - Software Security News Today

As in recent years, panelists included Ron Rivest and Adi Shamir - the R and S in the RSA cryptosystem. They were joined by Carmela Troncoso, an assistant professor at Switzerlands École Polytechnique Fédérale de Lausanne, whose work focuses on analyzing, building and deploying secure and privacy-preserving systems. Also on the panel: Ross Anderson, a professor of security engineering at both the University of Cambridge and the University of Edinburgh, founder of the discipline of security e...

BankInfoSecurity Compliance @prajeetspeaks) • May 18, 2021     Get Permission Magecart Group 12, known for skimming payment cards from e-commerce websites using JavaScript skimmers, is using an updated attack technique to gain remote administrative access to sites that run an older version of Adobes Magento software, according to an analysis by Malwarebytes Labs’ Threat Intelligence Team. The latest incarnation of...

BankInfoSecurity Compliance DougOlenick) • May 18, 2021     Ransom payment amounts generated by DarkSide ransomware (Source: Elliptic) The DarkSide ransomware gang apparently collected over $90 million in ransom payments from about 47 victims, including Colonial Pipeline Co., since the gang began operating in August 2020, according to the blockchain analytics firm Elliptic, which says it analyzed bitcoin wallet activ...

Welcome to RSA Conference 2021-and-Only Compliance Compliance SecurityEditor) • May 17, 2021     One view of RSA in a previous, non-virtual form Where to begin? Rohit Ghai, the CEO of RSA, discusses the new RSA Group and how its responded to the coronavirus pandemic, while ex-CEO Art Coviello shares insight on the trends and technologies driving innovation. The FBIs Elvis Chan details lessons learned from what he calls "the most secure ele...

RSAs Zulfikar Ramzan: Beyond Digital Transformation Compliance Compliance SecurityEditor) • May 17, 2021     Zulfikar Ramzan, chief digital officer, RSA Nearly a year ago, RSAs chief digital officer, Zulfikar Ramzan, sat with Information Security Media Group to discuss 2021: A Cybersecurity Odyssey. Which predictions came true, and how have the threat and technology landscapes exploded in unexpected new directions...

Ruby Zefo on Extreme Makeover: Privacy Edition Compliance Compliance SecurityEditor) • May 17, 2021     Ruby Zefo, chief privacy officer, Uber After a year of pandemic resilience and digital transformation, what is the state of global privacy? Ruby Zefo, Ubers chief privacy officer, weighs in on the evolution of privacy, new and emerging legislation and advice for those just starting their privacy careers. The state ...

Making Zero-Day Flaws Disappear Compliance Compliance Twitter Get Permission Maddie Stone, a security researcher with Google Project Zero, speaks on Friday at the AusCERT computer security conference. This year is on track to be a record one for zero-day vulnerabilities, the term for software flaws that are being actively exploited in the wild and do not have a fix. About 21 have been discovered so far, and if that pace continues, the year could end with more than 60, says Maddie Stone, a se...

GovInfoSecurity Compliance Compliance SecurityEditor) • May 17, 2021     Rohit Ghai, RSA Group CEO The past year has been a milestone one for RSA and for RSA Conference alike. In this exclusive interview, RSA Group CEO Rohit Ghai discusses the changes, the state of secure identity and the role XDR will play in shaping cybersecuritys future. Changes to RSA and RSA Conference; RSAs refined approach to secure identity;...

In a world transformed by the coronavirus pandemic, the CEO of security firm RSA, which runs the eponymous conference, took to the stage virtually on Monday, delivering a prerecorded keynote speech on the theme of this years event. "Its been 15 months since we met, right before the pandemic stopped the world in its tracks, and in that time, countless doctors, nurses and other first responders have been brave enough to be the light for all of us. Theyve worked tirelessly to save lives, and we ow...

The ransomware attack that targeted Colonial Pipeline Co. earlier this month, which continued to cause gas shortages in several states Monday, has prompted lawmakers in both parties to introduce measures designed to address cybersecurity shortcomings in the nations critical infrastructure - especially gas and oil pipelines. For example, the bipartisan Pipeline Security Act in the House would codify into law the roles the Transportation Security Administration and the Cybersecurity and Infrastru...