Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

DEF CON 29 ICS Village - Javier Perez' & Juan Escobar's 'ICS Intrusion KillChain Explained' →

October 16, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 16, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - Mary Brooks' 'ICS Jeopardy' →

October 16, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 16, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - Dennis Skarr's, Christopher Von Reybyton's & Alexander Vigovskiy's 'Panel: Students Performing ICS Security Assessments' →

October 15, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 15, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - PW Singer's 'Keynote: Reading The Future With Useful Fiction' →

October 15, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 15, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - Thomas Pace's 'Leveraging SBOMs To Enhance ICS Security' →

October 14, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 14, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - Aaron Boyd's 'Living Off The Land In An ICS OT Penetration Test' →

October 14, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 14, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

DEF CON 29 ICS Village - Seth Grover's 'Network Traffic Analysis With Malcolm' →

October 13, 2021 by Marc Handelman in DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

Our thanks to DEFCON for publishing their outstanding DEFCON 29 ICS Village videos on the organizations’ YouTube channel.

October 13, 2021 /Marc Handelman
DEF CON, DEF CON 29, ICS Village, Conferences, Education, Security, ICS Conferences, Cybersecurity Education, Infosec Education, ICS Security Education, Privacy Education, Application Security, ICS Security, Information Security, Industrial Security

SANS@MIC Talk - Threat Hunting via DNS With Eric Conrad →

June 27, 2020 by Marc Handelman in SANS, Threat Hunting, Security, Information Security, Education, SANS@MIC Talks

Some of the finest threat hunting and security bits you'll feast-thine-eyes-upon anywhere. Enjoy.

June 27, 2020 /Marc Handelman
SANS, Threat Hunting, Security, Information Security, Education, SANS@MIC Talks

via the unique cartoon-stylings of Daniel Stori at turnoff.us

Daniel Stori's 'To DevOps Or Not To DevOps' →

June 25, 2020 by Marc Handelman in Daniel Stori, DevOps, SecDevOps Humor, Security
June 25, 2020 /Marc Handelman
Daniel Stori, DevOps, SecDevOps Humor, Security

Via the Erudite Security Mindset of Robert M. Lee & the Superlative Illustration Talents of Jeff Haas at Little Bobby Comics.

Robert M. Lee's and Jeff Haas' Little Bobby Comics, 'It's Not A Light Switch'

November 04, 2018 by Marc Handelman in Security Education, Security Comics, Security, SCADA, Satire, Sarcasm, ICS, Security Humor, Little Bobby Comics
November 04, 2018 /Marc Handelman
Security Education, Security Comics, Security, SCADA, Satire, Sarcasm, ICS, Security Humor, Little Bobby Comics

Dave Lewis' 'Dude, Where's My Car With My Lunch?' →

July 17, 2018 by Marc Handelman in Physical Security, Unintended Consequences, Information Security, Security, Security Must Read

via Dave Lewis, well-known Information Security professional, founder of the security site Liquidmatrix Security Digest and co-host of the Liquidmatrix podcast and a contributing writer at the DUO Decipher blog, tells a fascinating story of a lashup of his Lunch an Autonomous Automobile and the Law of Unintended Consequences. Rather than spill the beans - travel, if you will - via our beloved Interwebs, to the Decipher blog, and luxuriate in the Tale Told by Mr. Lewis! Certainly Today's Security Must Read!

July 17, 2018 /Marc Handelman
Physical Security, Unintended Consequences, Information Security, Security, Security Must Read

Unveiling the “United Cyber Caliphate” and the Birth of the E-Terrorist

July 15, 2018 by Marc Handelman in Security, Terrorism, eTerrorism

Behold, Ladies and Gentlemen, an erudite paper detailing the notion of the eTerrorist, written by Professor Christina Schori Liang has made it's way into my my somestimes overloaded sphere of cogitatory field of vision. Well wrought, indeed! Professor Liang is leading The Terrorism and Organized Crime Cluster at the Geneva Centre for Security Policy and is a Visiting Professor at The Paris School of International Affairs.

In Public Sector or Private Sector, or simply interested in what very well may be the next evil surfactant in the Sea of Evil flotsam, jetsam, lagan, and derelict floating upon the Interwebs, pay attention and read Professor Liang's short, but enlightening work.

July 15, 2018 /Marc Handelman
Security, Terrorism, eTerrorism

SAML Flaws Discovered With SSO Implications →

February 28, 2018 by Marc Handelman in SAML, Security, Secure Coding, Security Architecture, Authentication, SSO

Kelby Ludwig - writing at Duo Lab's has just posted a fascinating blog entry detailing their recent discovery of SAML vulns potentially affecting a range of implementations and deployments. In this case, the vulnerability appears to be a zero knowledge scenario (of the attributes of the target's password). H/T

"This blog post describes a new vulnerability class that affects SAML-based single sign-on (SSO) systems. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim user’s password. - via Duo Lab's Kelby Ludwig

Oops.

February 28, 2018 /Marc Handelman
SAML, Security, Secure Coding, Security Architecture, Authentication, SSO

North Korean Computer Center Open Library Created →

January 29, 2018 by Marc Handelman in North Korea, Security

Martyn Williams, writing at 38North, reports on the new North Korean Computer Center - ostensibly, an open library of Democratic People's Republic of Korea created (mostly modified) software. We strongly suggest caution when opening any files (eg., PDFs, DOCs, Binaries, et cetera and running any software from the library - especially with this caveat descendit onustus...:

"In publishing the PDF files, the team running the site had to strip out tracking code that had been inserted into the files by the Red Star OS. The software adds a hard-drive serial number to files when they are opened, potentially allowing the government the ability to determine all the computers on which a file has been viewed." - via Martyn Williams, writing at 38North

January 29, 2018 /Marc Handelman
North Korea, Security

AWS GuardDuty: Human Security Employment Will Become Moot →

November 30, 2017 by Marc Handelman in Information Security Jobs, Cybersecurity Jobs, SecDevOpps Jobs, Intelligence, Intelligence Sharing, Information Security, Cybersecurity, Analytics, Security Economics, Security Architecture, Security, Security Automation

The apparent beginning of the end for certain information and cyber security employment categories: Behold the newly minted Amazon.com, Inc. (NASDAQ: AMZN) AWS GuardDuty... H/T via the inimitable Trey Blalock of Firewall Consultants and Verification Labs.

November 30, 2017 /Marc Handelman
Information Security Jobs, Cybersecurity Jobs, SecDevOpps Jobs, Intelligence, Intelligence Sharing, Information Security, Cybersecurity, Analytics, Security Economics, Security Architecture, Security, Security Automation

United States of America, Independence Day 2015 →

July 04, 2015 by Marc Handelman in All is Information, Government, Holidays, National Holidays, National Security, Physical Security, Security, Freedom

via the Library of Congress, United States of America

July 04, 2015 /Marc Handelman
All is Information, Government, Holidays, National Holidays, National Security, Physical Security, Security, Freedom

NIST CSD, ITL, CPP Slated to Host 8th Cloud Computing Forum →

May 04, 2015 by Marc Handelman in All is Information, Conferences, Information Security, Cloud Security, Compute Infrastructure, Security, Government

NIST's Computer Security Division and the Information Technology Laboratory (ITL) along with the NIST Cloud Computing Program has announced hosting of the 8th Cloud Computing Forum and Workshop. Registration Information, etc. can be viewed here. Included with the announcement is the Call for Abstracts, noted below:

  • Abstract Submission Deadline: May 15, 2015
  • Abstracts Review Deadline: June 1, 2015
  • Presentation Submission Deadline: July 1, 2015

Interested? Download the 8th Cloud Computing Forum and Workshop Abstract Submission form, additional information resides here.

May 04, 2015 /Marc Handelman
All is Information, Conferences, Information Security, Cloud Security, Compute Infrastructure, Security, Government

Kim's Big Secret →

January 26, 2015 by Marc Handelman in All is Information, Cryptography, Communications, Encryption, Security

An End-to-End Encrypted Secret, that is...

January 26, 2015 /Marc Handelman
All is Information, Cryptography, Communications, Encryption, Security

Digital Weaponry, Vectored

December 10, 2014 by Marc Handelman in All is Information, Code, Compute Infrastructure, Computer Science, Data Security, Espionage, Government, Information Security, Malware, National Security, Network Security, Physical Security, Security

Once again, Kim Zetters' superlative prose details the astounding story of Stuxnet; this time, in a new book titled  'Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon' [published by Crown Publishing Group a division of Random House]. Apparently, like many other 'infections' the vector [in this case] is the order-of-the-day... This month's MustRead.

December 10, 2014 /Marc Handelman
All is Information, Code, Compute Infrastructure, Computer Science, Data Security, Espionage, Government, Information Security, Malware, National Security, Network Security, Physical Security, Security

Name'd →

December 05, 2014 by Marc Handelman in All is Information, Code, Complexity, Information Security, Research, Security, Vulnerabilities

Everything you would want to know about the naming of malware, via Violet Blue for Zero Day. Enjoy.

 

December 05, 2014 /Marc Handelman
All is Information, Code, Complexity, Information Security, Research, Security, Vulnerabilities
  • Newer
  • Older