How the Pandemic is Reshaping the Bug-Bounty Landscape
Casey Ellis, founder and CTO of Bugcrowd, said that COVID-19’s far-reaching imoact - including increasing the acceptance of remote work, pushing more users to digital platforms and other aspects - are creating unanticipated new trends for bug-bounty platforms. What do you think?
Cybercriminals Step Up Their Game Ahead of U.S. Elections
Ahead of the November U.S. elections, cybercriminals are stepping up their offensive in both attacks against security infrastructure and disinformation campaigns – but this time, social media giants, the government and citizens are more prepared.
305 CVEs and Counting: Bug-Hunting Stories From a Security Engineer
Larry Cashdollar with Akamai talks about his craziest stories over the years finding vulnerabilities - including accidentally throwing a wrench in a demo of the Aegis destroyer class ship for a Navy Admiral.
Critical Industrial Flaws Pose Patching Headache For Manufacturers
When it comes to patching critical flaws, industrial firms face various challenges – with some needing to shut down entire factories in order to apply updates, explains Claroty's Sharon Brizinov.
A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return
The banking trojan Emotet has returned after a five-month hiatus - But one cyber vigilante is thwarting the malware’s comeback. Researchers say a mysterious vigilante is fighting the threat actors behind the malware’s comeback by replacing malicious Emotet payloads with whimsical GIFs and memes.
Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes
Erez Yalon, the director of security research with Checkmarx, talks about critical flaws in the popular Meetup platform that were revealed as part of research unleashed at this week’s Black Hat USA 2020.
Black Hat USA 2020 Preview: Election Security, COVID Disinformation and More
Despite COVID-19 pushing Black Hat USA virtual for the first time, you can still expect a steady stream of new security research. Learn more about the conference's hottest topics during our official preview podcast.
Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills
Proposed legislation like the EARN IT Act and the Lawful Access to Encrypted Data Act are a "full frontal nuclear assault" on encryption and privacy, said Riana Pfefferkorn, associate director of Surveillance and Cybersecurity at the Stanford Center for Internet and Society.
Troves of Zoom Credentials Shared on Hacker Forums
Underground forums are abuzz with discussions about obtaining – and leveraging – credentials for Zoom, Webex and other web conferencing systems. Etay Maor with IntSights talks about what he's seeing.
News Wrap: Nintendo Account Hacks, Apple Zero Days, NFL Security
#Nintendo has confirmed that more than 160,000 accounts have been hacked. Tune in to the Threatpost news wrap #podcast to hear more.
