Human-centered cybersecurity (also known as ‘usable security’) involves the social, organizational, and technological influences on people’s understanding of and interactions with cybersecurity. By taking a human-centered...
Read More[This is a Guest Diary by Joshua Tyrrell, an ISC intern as part of the SANS.edu BACS program] Managing the Attack Surface You’ve begun the journey of reviewing your IT infrastructure and attempting to figure out how to protect...
Read More
I like to enrich my honeypot data from a variety of sources to help understand a bit more about...
Read MoreThe NIST Standards Forum will be held on Wednesday, September 11, 2024 from 9:00 am to 5:00 pm, on NIST’s Gaithersburg campus in the Portrait Room. The purpose of this event is to communicate the commitment of NIST and its key...
Read MoreOverview A vulnerability in the user of hard-coded Platform Keys (PK) within the UEFI framework, known as PKfail, has been discovered. This flaw allows attackers to bypass critical UEFI security mechanisms like Secure Boot,...
Read MoreIt has been a while since I started to track how Python is used in the Windows eco-system[1]. Almost every day I find new pieces of malicious Python scripts. The programming language itself is not malicious. There are plenty of...
Read More
While trying to process some of my honeypot data, I ran into the following error in my Python...
Read More
For a whille now, I have seen scans that contain the pattern “%%target%%” in the URL....
Read MoreFor the U.S. semiconductor industry to flourish in the long-term, its materials and manufacturing practices must be sustainable in both protecting the environment and communities and in producing innovative new technologies....
Read More![Mapping Threats with DNSTwist and the Internet Storm Center [Guest Diary], (Tue, Aug 20th)](https://b923496.smushcdn.com/923496/wp-content/uploads/2024/08/Michael_Tigges_Picture1-627x376.png?lossy=1&strip=1&webp=1)
[This is a Guest Diary by Michael Tigges, an ISC intern as part of the SANS.edu BACS program] On...
Read MoreI recorded a quick live stream with a quick update on CVE-2024-38063. The video focuses on determining the exploitability, particularly whether your systems are reachable by IPv6. After recording this video, Stephen Sims pointed...
Read MoreIn this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon ( United Kingdom (UK) Office of National Statistics (ONS)), and Dr. Michael Fenton (Trūata) who were winners in the UK-US...
Read More