October 24, 2017
What’s KRACKing at HPE Aruba
Everything you need to know about KRACK(Key Reinstallation Attacks) What is it? Mathy Vanhoef, a technical security researcher, found what we are now calling “KRACK” to be a devastating security flaw in the relatively “secure” standard for wireless networks WPA. KRACK allows for attackers to eavesdrop on your personal data when authenticating to an access point. That’s […]
Read more
May 26, 2017
7 Year Old Code-Execution Bug Found In Samba
7 Year Old Code-execution Bug Found In Samba It appears Wannacry may have gotten people looking at the SMB functions in Samba on Linux as well. A code-execution bug was detected in all versions of Samba 3.5.0 (released March 2010) and onwards. It is CVE-2017-7494 and there is already a Metasploit module available for attacking […]
Read more
May 16, 2017
A Cybersecurity Engineer’s Perspective On Wannacry
A Cybersecurity Engineer’s Perspective On Wannacry When an otherwise routine crypto cash-grab becomes international news, it can make the most seasoned of us pause momentarily in reflection. At its core – WannaCry isn’t anything special. It has your usual components of a ransomware attack – the Bitcoin buy, scary pop-ups and flutter. It has the […]
Read more
March 20, 2017
Compliance and Security are not the Same Things
The EU General Data Protection Regulation was approved on April 14, 2016 and will come into enforcement on May 25, 2018. This timeline leaves little time to perform the work necessary to avoid the stiff 4% penalty (4% of total revenue). Additionally, New York State has implemented a recent regulatory measure where all relevant financial […]
Read more
October 28, 2016
IoT Hack
So…it’s happened… Last year I sat on a panel at our Sayer’s Curio event and was asked about my thoughts on IT security, cloud, and specifically where we were headed with the Internet of Things (IoT). Admittedly, my response was probably a little over the top, and deserving of the few strange looks I received, […]
Read more
