What You Should Know About Effective Container Security
As organizations race to embrace and adopt containers, the issue of effective container security is growing exponentially as well. Container environments are dynamic and volatile and introduce unique...
View ArticleClik here to view.
Purported Security Apps in the Mac App Store Found to Be Stealing User Data
There is a concerning trend lately in the Mac App Store. Several security researchers have independently found different apps that are collecting sensitive user data and uploading it to servers...
View ArticleClik here to view.
Secure your Azure Web App using SSL Certificate provided by Let’s Encrypt
The information you send on the Internet is passed from computer to computer to get to the destination server. The least you can do to provide privacy, critical security and data integrity for both...
View ArticleClik here to view.
Hack the Box: Poison Walkthrough
Hello everyone and welcome to yet another CTF challenge from hack the box, called ‘Poison,’ which is available online for those who want to increase their skill in penetration testing and black box...
View ArticleClik here to view.
OpenPGP Keyservers Now Store 'Irremovable' Torrent Magnet Links
BitTorrent is often praised for its decentralized nature. The file-transfers take place between users and there’s no central service required. That’s also one of the main reasons why pirates embraced...
View ArticleServerless Security: Locking Down Your Apps with FunctionShield
I’ve written quite extensively aboutserverless security, and while you don’t need to be an expert on the matter, there are a number of common sense principles that every developer should know....
View Article“Shifting Left” Requires Remediation Guidance
Shifting security “left” is about more than simply changing the timing of testing. When security shifts to earlier phases of the development lifecycle, it also changes the players responsible for...
View ArticleClik here to view.
“网鼎杯”网络安全大赛总决赛圆满落幕
原标题：问鼎之战！“网鼎杯”网络安全大赛总决赛圆满落幕！ 网络空间的竞争归根结底是人才的竞争，建设网络强国，没有一支优秀的人才队伍，没有人才创造力迸发、活力涌流，是难以成功的。9月6日，聚集了全国各行业网络安全精英的“网鼎杯”网络安全大赛线下决赛正式打响。 “网鼎杯”网络安全大赛总决赛打响...
View Article云安全形势复杂 安全服务市场大
网络安全事件频发 “云安全”成企业安全配置刚需 近两个月，网络安全事件频发。 新加坡总理李显龙的医疗记录被黑客盗取;台积电遭勒索病毒侵袭，工厂停产损失或达1.7亿美元;华住集团旗下酒店约5亿条用户数据在暗网被打包出售;国内某省的国土资源专网遭勒索病毒攻击，不动产登记业务无法正常办理……一系列事件的连续发生，无一不显示出网络安全脆弱的一面。...
View ArticleClik here to view.
献礼教师节，感恩有你
也许你已经走出了象牙塔，离开了当年的第二个家，不知你是否还记得那年教你如何解题、如何面对困难的他； 也许你已经整理好行囊，坐在了三尺讲台下，听他讲地理历史，和那难以消化的各种公式。 我们都成了更好的自己，而他们，是我们必须要感恩的人。 老师，不只是一个职业，金秋九月，安全牛课堂献礼教师节，特制定多项惊喜折扣计划，致敬每一个教会我们成长的引路人。 1. 超级技术会员...
View ArticleClik here to view.
How an antivirus search engine plays into Alphabet’s security ambitions
Initially created within X, Alphabet’s so-called “moonshot factory” unit , Chronicle has said that it’s developing a security analytics platform for corporate customers, harnessing the company’s...
View ArticleBritish Airways Internal Memo Points to Security Outsourcing to IBM
British Airways was in talks to transfer part of the company's security services to IBM at the beginning of August 2018, while still keeping security operations services within the company according...
View ArticleFacial Recognition, a British Airways Hack, and More Security News This Week
Tech went to Washington this week, and their biggest problems followed them. Twitter CEO Jack Dorsey and Facebook COO Sheryl Sandbergfaced Congress, and though Google CEO Larry Paige was invited, he...
View ArticleClik here to view.
It's ok for things to go wrong
Until recently I worked on the GOV.UK team at the UK government digital service. One thing this team is really good at is responding to incidents and learning from them. I've been thinking a lot about...
View ArticleClik here to view.
Always Encrypted A new column level security feature in SQL Server 2016
Always Encrypted (AE)is a new feature introduced in SQL Server 2016 to secure your data in SQL Server at column level. Perhaps, SQL Server has many options to secure the data, the new feature Always...
View ArticleClik here to view.
Foreshadow, SGX & the Failure of Trusted Execution
Trusted execution environments are said to provide a hardware-protected enclave that runs software and cannot be accessed externally, but recent developments show they fall far short. One of the...
View ArticleClik here to view.
iOS 12 Jailbreak Security Exploit Discovered, Read And Write Privilege Achieved
This is the news that Apple definitely does not want to hear ahead of its September 12 event. Not long after @nullriver went public to suggest that iOS 12 could be harder to jailbreak , a group of...
View ArticleIs XRP a security or not? Ripple CEO Brad Garlinghouse explains the daunting...
The debate on whether Ripple is a security or not has been on for many months now. What’s even worse is that the Security Exchange Commission (SEC) hasn’t given its stance or a say on whether Ripple...
View ArticleRobinhood’s latest rival, Revolut comes out all guns blazing
Revolut, the latest entrant into the smartphone-based banking sphere has announced its plans to come into the United States after a remarkable run in Europe, which saw the companies expand to over 28...
View ArticleClik here to view.
Worries arise about security of new WebAuthn protocol
A team of security researchers has raised the alarm about some cryptography-related issues with the newly released WebAuthn passwordless authentication protocol. WebAuthn was officially launched...
View Article