News

  • 6 questions CISOs should ask if their cybersecurity vendor is acquired

    The sharp increase in funding and mergers-and-acquisition (M&A) activity in the cybersecurity industry over the last year has brought into focus the challenges that organizations can run into when their vendor is acquired by or merges with another company. Specialized, pure-play security companies are being bought by bigger and more generalized technology vendors or by…

    Read More

  • Developer sabotages own npm module prompting open-source supply chain security questions

    The developer of a popular JavaScript component hosted on the npm repository decided to protest Russia’s invasion of Ukraine by adding code to his own component that would add or delete files on people’s computers in a way they didn’t expect. The component, called node-ipc, is a dependency for a variety of other projects, which…

    Read More

  • Friday Squid Blogging: The Costs of Unregulated Squid Fishing

    Greenpeace has published a report, “Squids in the Spotlight,” on the extent and externalities of global squid fishing. News article. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here. Read More

    Read More

  • Ugandan Writers Charged with Cyber Stalking President

    Author and journalist arrested over alleged cyber stalking of Ugandan President Yoweri Museveni Read More

    Read More

  • A Third of Malicious Logins Originate in Nigeria

    Spear phishing study finds one in three malicious logins into compromised accounts came from Nigeria Read More

    Read More

  • Russian Hackers Allegedly Compromise Ukrainian News Sites, Displaying ‘Z’ Symbol

    The ‘Z’ symbol was displayed on multiple Ukrainian news sites, allegedly perpetrated by Russian hackers Read More

    Read More

  • Arkansas Sues Health System for Abandoning Patient Files

    Suit alleges Eastern Ozarks Regional Health System failed to protect patient and employee data Read More

    Read More

  • Netflix to Charge Password Sharers

    Streaming service to charge Latin American users who share password with non-householders Read More

    Read More

  • How to Protect Yourself from March Madness Scams

    It’s the month of top seeds, big upsets, and Cinderella runs by the underdogs. With March Madness basketball cranking up, a fair share of online betting will sure to follow—along with online betting scams.  Since a U.S. Supreme Court ruling in 2018, individual states can determine their own laws for sports betting. Soon after, states…

    Read More

  • Why Vaccine Cards Are So Easily Forged

    My proof of COVID-19 vaccination is recorded on an easy-to-forge paper card. With little trouble, I could print a blank form, fill it out, and snap a photo. Small imperfections wouldn’t pose any problem; you can’t see whether the paper’s weight is right in a digital image. When I fly internationally, I have to show…

    Read More