RSA Conference 2024: The good, the bad, and the downright worrying
Kettle If there's one thing infosec needs right now, it's a little pick-me-up
Spotlight on RSA14 May 2024 | 3
Spotlight on RSA
Over the last 33 years the RSA conference has grown from a few security geeks getting together to one of the largest security conferences in the world, attracting those who need to know what to invest in next to keep networks secure. The four-day event will be held in San Francisco between May 6th - 9th and we'll be covering it live.
AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'
RSAC Hint: It's the 'the largest' maker of a key computer component
Spotlight on RSA13 May 2024 | 7
AWS CISO tells The Reg: In the AI gold rush, folks are forgetting application security
RSAC 'Everybody's learning as they go. But there's a rush to get these apps out'
AI + ML13 May 2024 | 5
Ransomware negotiator weighs in on the extortion payment debate with El Reg
Interview As gang tactics get nastier while attacks hit all-time highs
Cyber-crime12 May 2024 | 43
Critical infrastructure security will stay poor until everyone pulls together
Interview Claroty CEO Yaniv Vardi tells us what's needed to defend vital networks
Public Sector11 May 2024 | 12
Iran most likely to launch destructive cyber-attack against US – ex-Air Force intel analyst
Interview But China's the most technologically advanced
Spotlight on RSA10 May 2024 | 8
'Four horsemen of cyber' look back on 2008 DoD IT breach that led to US Cyber Command
RSAC 'This was a no sh*tter'
Spotlight on RSA10 May 2024 | 4
Ex-White House election threat hunter weighs in on what to expect in November
Interview Spoiler alert: We're gonna talk about AI
Public Sector09 May 2024 | 36
Dell customer order database of '49M records' stolen, now up for sale on dark web
IT giant tries to downplay leak as just names, addresses, info about kit
Cyber-crime09 May 2024 | 35
America's enemies targeting US critical infrastructure should be 'wake-up call'
RSAC Having China, Russia, and Iran routinely rummaging around is cause for concern, says ex-NSA man
Spotlight on RSA09 May 2024 | 8
68 tech names sign CISA's secure-by-design pledge
RSAC Security's an uphill battle ... does this latest move have teeth?
Spotlight on RSA09 May 2024 | 14
VMware security advisories now behind bureaucratic Broadcom barricade
Updated If it ain't broke, make it less accessible
Spotlight on RSA09 May 2024 | 16
Undersea cables must have high-priority protection before they become top targets
Interview It's 'essential to national security' ex-Navy intel officer tells us
Networks08 May 2024 | 36
CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'
RSAC And it would seriously inconvenience the Chinese and Russians, too
Spotlight on RSA08 May 2024 | 58
One year on, universities org admits MOVEit attack hit data of 800K people
Nearly 95M people in total snagged by flaw in file transfer tool
Spotlight on RSA08 May 2024 | 2
UK opens investigation of MoD payroll contractor after confirming attack
China vehemently denies involvement
Cyber-crime08 May 2024 | 50
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
Interview On the plus side, infosec's a good bet for a long, stable career
Spotlight on RSA08 May 2024 | 24
From infosec to skunks, RSA Conference SVP spills the tea
Interview Keynotes, physical security, playlists … the buck stops with Linda Gray Martin
Spotlight on RSA08 May 2024 |
UnitedHealth's 'egregious negligence' led to Change Healthcare ransomware infection
Interview 'I'm blown away by the fact that they weren't using MFA'
Spotlight on RSA08 May 2024 | 25
America's War on Drugs and Crime will be AI powered, says Homeland Security boss
RSAC Or at least it might well be if these trial programs work out, with some civil lib oversight etc etc etc
Spotlight on RSA07 May 2024 | 25
Popular
Early MySQL engineer questions whether Oracle is unintentionally killing off the open source database
Preference for proprietary features restricting open source MySQL adoption, says Peter Zaitsev
Raspberry Pi stock surges after London IPO
Priced at £2.80, but goes beyond £3.90 in conditional trading
IBM dream to gobble up HashiCorp challenged in court
Updated This benefits management, but not us shareholders!
Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows
Patch Tuesday Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack
Microsoft's Recall should be celebrated as the savior of SMEs and scourge of CEOs
Column Small businesses have seldom had the chance to understand how they work. A history of PC use makes it possible
China's FortiGate attacks more extensive than first thought
Dutch intelligence says at least 20,000 firewalls pwned in just a few months
Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace
Secure storage company hasn't spilled details on how they got in
Microsoft sends Copilot Pro's GPT Builder to the digital dumpster
Updated Farewell, we hardly scripted thee
AI PC vendors gotta have their TOPS – but is this just the GHz wars all over again?
Comment As usual, things are more complicated than 'bigger number better.'
Gates-backed nuclear plant breaks ground without guarantee it'll have fuel
TerraPower's atomic facility needs lots of low-enriched uranium and who mainly makes it ... ah, jeez
MORE
STORIES
Watch out for rogue DHCP servers decloaking your VPN connections
Avoid traffic-redirecting snoops who have TunnelVision
Spotlight on RSA07 May 2024 | 34
CISA's early-warning system helped critical orgs close 852 ransomware holes
Interview In the first year alone, that's saved us all a lot of money and woe
Spotlight on RSA07 May 2024 | 3
US State Department launches cyber and digital policy strategy
RSAC Part of the race with Beijing to set standards and advance norms
Spotlight on RSA07 May 2024 | 4
Ransomware crooks now SIM swap executives' kids to pressure their parents
RSAC Extortionists turning to 'psychological attacks', Mandiant CTO says
Spotlight on RSA07 May 2024 | 20
Fed-run LockBit site back from the dead and vows to really spill the beans on gang
Updated After very boring first reveal, this could be the real deal
Spotlight on RSA06 May 2024 | 8
Another RSA Conf under our belt, here's the stuff we didn't print
RSA Conference 2023 For the event itself, it's like the COVID-19 pandemic was all just a long-gone bad dream
Spotlight on RSA04 May 2023 |
Plugging the infosec holes before the bad guys can sneak in
RSA Conference 2023 Security posture management gets its due at RSA
Spotlight on RSA01 May 2023 | 2
RSA Conference or Black Mirror? Either way, we're doomed ... probably
RSA Conference Luckily CrowdStrike's CSO has a brighter outlook than we vultures
Spotlight on RSA30 Apr 2023 | 6
You don't have to wait for quantum computing to prepare for it
RSA Conference 2023 Rapid7 CSO Jaya Baloo on how to tackle this potential looming tech
Spotlight on RSA29 Apr 2023 |
Crooks don't need ChatGPT to social-engineer victims, as they're more than happy to demonstrate
RSA Conference 2023 Not today, AI
Spotlight on RSA29 Apr 2023 | 10
Keep calm and carry on when the supply chain goes up in flames
RSA Conference 2023 Lessons learned from the front-line responders
Spotlight on RSA28 Apr 2023 |
Eric Idle tells infosec world to always look on the bright side of life
RSA Conference 2023 Has harsh words for Python fan Musk after losing the blue tick
Spotlight on RSA27 Apr 2023 | 22
Future of warfare is AI, retired US Army general warns
RSA Conference 2023 Imagine fighting swarms – swarms – of autonomous planes
Spotlight on RSA27 Apr 2023 | 36
US National Cyber Director: Fending off cyber threats in space is 'urgent,' needs 'high level attention'
RSA Conference More public-private collab around this issue coming soon
Spotlight on RSA26 Apr 2023 | 5
You can cross 'Quantum computers to smash crypto' off your list of existential fears for 30 years
RSA Conference 2023 RSA's Adi Shamir thinks we're safe for a generation, but more gnarly keys are still a good idea
Spotlight on RSA26 Apr 2023 | 20
Is your AI hallucinating? Might be time to call in the red team
RSA Conference 2023 Plus: Bias bounties are the new bug bounties
Spotlight on RSA26 Apr 2023 | 5
Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here's one
RSA Conference 2023 OT firms construct handy early-warning info-sharing system
Spotlight on RSA25 Apr 2023 | 5
US to focus on stifling online attacks rather than snagging criminal convictions
RSA Conference 2023 Russia unlikely to give up its crooks, but American CSOs can go to the clink
Spotlight on RSA25 Apr 2023 | 1
Mandiant's 'most prevalent threat actor' may be living under your roof – the teenager
RSA Conference 2023 Plus they are cliquey as all hell
Spotlight on RSA25 Apr 2023 | 18
Google's here to boost your cloud security and the magic ingredient? AI, of course
RSA Conference 2023 Send in the LLMs
Spotlight on RSA25 Apr 2023 | 4
SentinelOne sticks generative AI into its stuff because 2023 gotta 2023
RSA Conference 2023 Look, anyone can build these things
Spotlight on RSA24 Apr 2023 | 5
From tiny acorns mighty oak trees grow – RSA is back in town
RSA Conference 2023 Security bods converge on the cool gray city of love
Spotlight on RSA24 Apr 2023 | 5
Microsoft uses carrot and stick with Exchange Online admins
If you need extra time to dump RPS, OK, but email from unsupported Exchange servers is blocked till they’re up to date
Spotlight on RSA30 Mar 2023 | 16
Warning: Your wireless networks may leak data thanks to Wi-Fi spec ambiguity
How someone can nab buffered info, by hook or by kr00k
Spotlight on RSA30 Mar 2023 | 15
Another year, another North Korean malware-spreading, crypto-stealing gang named
Mandiant identifies 'moderately sophisticated' but 'prolific' APT43 as global menace
Spotlight on RSA30 Mar 2023 | 2
Oh, really? Microsoft worries multicloud complicates security and identity
Coincidentally lays off techies in its identity team
Spotlight on RSA29 Mar 2023 | 8
AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'
RSAC Hint: It's the 'the largest' maker of a key computer component
Spotlight on RSA13 May 2024 | 7
AWS CISO tells The Reg: In the AI gold rush, folks are forgetting application security
RSAC 'Everybody's learning as they go. But there's a rush to get these apps out'
AI + ML13 May 2024 | 5
Ransomware negotiator weighs in on the extortion payment debate with El Reg
Interview As gang tactics get nastier while attacks hit all-time highs
Cyber-crime12 May 2024 | 43
Critical infrastructure security will stay poor until everyone pulls together
Interview Claroty CEO Yaniv Vardi tells us what's needed to defend vital networks
Public Sector11 May 2024 | 12
Iran most likely to launch destructive cyber-attack against US – ex-Air Force intel analyst
Interview But China's the most technologically advanced
Spotlight on RSA10 May 2024 | 8
'Four horsemen of cyber' look back on 2008 DoD IT breach that led to US Cyber Command
RSAC 'This was a no sh*tter'
Spotlight on RSA10 May 2024 | 4
Ex-White House election threat hunter weighs in on what to expect in November
Interview Spoiler alert: We're gonna talk about AI
Public Sector09 May 2024 | 36
Dell customer order database of '49M records' stolen, now up for sale on dark web
IT giant tries to downplay leak as just names, addresses, info about kit
Cyber-crime09 May 2024 | 35
America's enemies targeting US critical infrastructure should be 'wake-up call'
RSAC Having China, Russia, and Iran routinely rummaging around is cause for concern, says ex-NSA man
Spotlight on RSA09 May 2024 | 8
68 tech names sign CISA's secure-by-design pledge
RSAC Security's an uphill battle ... does this latest move have teeth?
Spotlight on RSA09 May 2024 | 14
VMware security advisories now behind bureaucratic Broadcom barricade
Updated If it ain't broke, make it less accessible
Spotlight on RSA09 May 2024 | 16
Undersea cables must have high-priority protection before they become top targets
Interview It's 'essential to national security' ex-Navy intel officer tells us
Networks08 May 2024 | 36
CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'
RSAC And it would seriously inconvenience the Chinese and Russians, too
Spotlight on RSA08 May 2024 | 58
One year on, universities org admits MOVEit attack hit data of 800K people
Nearly 95M people in total snagged by flaw in file transfer tool
Spotlight on RSA08 May 2024 | 2
UK opens investigation of MoD payroll contractor after confirming attack
China vehemently denies involvement
Cyber-crime08 May 2024 | 50
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
Interview On the plus side, infosec's a good bet for a long, stable career
Spotlight on RSA08 May 2024 | 24
From infosec to skunks, RSA Conference SVP spills the tea
Interview Keynotes, physical security, playlists … the buck stops with Linda Gray Martin
Spotlight on RSA08 May 2024 |
UnitedHealth's 'egregious negligence' led to Change Healthcare ransomware infection
Interview 'I'm blown away by the fact that they weren't using MFA'
Spotlight on RSA08 May 2024 | 25
America's War on Drugs and Crime will be AI powered, says Homeland Security boss
RSAC Or at least it might well be if these trial programs work out, with some civil lib oversight etc etc etc
Spotlight on RSA07 May 2024 | 25
Popular
Early MySQL engineer questions whether Oracle is unintentionally killing off the open source database
Preference for proprietary features restricting open source MySQL adoption, says Peter Zaitsev
Raspberry Pi stock surges after London IPO
Priced at £2.80, but goes beyond £3.90 in conditional trading
IBM dream to gobble up HashiCorp challenged in court
Updated This benefits management, but not us shareholders!
Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows
Patch Tuesday Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack
Microsoft's Recall should be celebrated as the savior of SMEs and scourge of CEOs
Column Small businesses have seldom had the chance to understand how they work. A history of PC use makes it possible
China's FortiGate attacks more extensive than first thought
Dutch intelligence says at least 20,000 firewalls pwned in just a few months
Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace
Secure storage company hasn't spilled details on how they got in
Microsoft sends Copilot Pro's GPT Builder to the digital dumpster
Updated Farewell, we hardly scripted thee
AI PC vendors gotta have their TOPS – but is this just the GHz wars all over again?
Comment As usual, things are more complicated than 'bigger number better.'
Gates-backed nuclear plant breaks ground without guarantee it'll have fuel
TerraPower's atomic facility needs lots of low-enriched uranium and who mainly makes it ... ah, jeez
STORIES
Watch out for rogue DHCP servers decloaking your VPN connections
Avoid traffic-redirecting snoops who have TunnelVision
Spotlight on RSA07 May 2024 | 34
CISA's early-warning system helped critical orgs close 852 ransomware holes
Interview In the first year alone, that's saved us all a lot of money and woe
Spotlight on RSA07 May 2024 | 3
US State Department launches cyber and digital policy strategy
RSAC Part of the race with Beijing to set standards and advance norms
Spotlight on RSA07 May 2024 | 4
Ransomware crooks now SIM swap executives' kids to pressure their parents
RSAC Extortionists turning to 'psychological attacks', Mandiant CTO says
Spotlight on RSA07 May 2024 | 20
Fed-run LockBit site back from the dead and vows to really spill the beans on gang
Updated After very boring first reveal, this could be the real deal
Spotlight on RSA06 May 2024 | 8
Another RSA Conf under our belt, here's the stuff we didn't print
RSA Conference 2023 For the event itself, it's like the COVID-19 pandemic was all just a long-gone bad dream
Spotlight on RSA04 May 2023 |
Plugging the infosec holes before the bad guys can sneak in
RSA Conference 2023 Security posture management gets its due at RSA
Spotlight on RSA01 May 2023 | 2
RSA Conference or Black Mirror? Either way, we're doomed ... probably
RSA Conference Luckily CrowdStrike's CSO has a brighter outlook than we vultures
Spotlight on RSA30 Apr 2023 | 6
You don't have to wait for quantum computing to prepare for it
RSA Conference 2023 Rapid7 CSO Jaya Baloo on how to tackle this potential looming tech
Spotlight on RSA29 Apr 2023 |
Crooks don't need ChatGPT to social-engineer victims, as they're more than happy to demonstrate
RSA Conference 2023 Not today, AI
Spotlight on RSA29 Apr 2023 | 10
Keep calm and carry on when the supply chain goes up in flames
RSA Conference 2023 Lessons learned from the front-line responders
Spotlight on RSA28 Apr 2023 |
Eric Idle tells infosec world to always look on the bright side of life
RSA Conference 2023 Has harsh words for Python fan Musk after losing the blue tick
Spotlight on RSA27 Apr 2023 | 22
Future of warfare is AI, retired US Army general warns
RSA Conference 2023 Imagine fighting swarms – swarms – of autonomous planes
Spotlight on RSA27 Apr 2023 | 36
US National Cyber Director: Fending off cyber threats in space is 'urgent,' needs 'high level attention'
RSA Conference More public-private collab around this issue coming soon
Spotlight on RSA26 Apr 2023 | 5
You can cross 'Quantum computers to smash crypto' off your list of existential fears for 30 years
RSA Conference 2023 RSA's Adi Shamir thinks we're safe for a generation, but more gnarly keys are still a good idea
Spotlight on RSA26 Apr 2023 | 20
Is your AI hallucinating? Might be time to call in the red team
RSA Conference 2023 Plus: Bias bounties are the new bug bounties
Spotlight on RSA26 Apr 2023 | 5
Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here's one
RSA Conference 2023 OT firms construct handy early-warning info-sharing system
Spotlight on RSA25 Apr 2023 | 5
US to focus on stifling online attacks rather than snagging criminal convictions
RSA Conference 2023 Russia unlikely to give up its crooks, but American CSOs can go to the clink
Spotlight on RSA25 Apr 2023 | 1
Mandiant's 'most prevalent threat actor' may be living under your roof – the teenager
RSA Conference 2023 Plus they are cliquey as all hell
Spotlight on RSA25 Apr 2023 | 18
Google's here to boost your cloud security and the magic ingredient? AI, of course
RSA Conference 2023 Send in the LLMs
Spotlight on RSA25 Apr 2023 | 4
SentinelOne sticks generative AI into its stuff because 2023 gotta 2023
RSA Conference 2023 Look, anyone can build these things
Spotlight on RSA24 Apr 2023 | 5
From tiny acorns mighty oak trees grow – RSA is back in town
RSA Conference 2023 Security bods converge on the cool gray city of love
Spotlight on RSA24 Apr 2023 | 5
Microsoft uses carrot and stick with Exchange Online admins
If you need extra time to dump RPS, OK, but email from unsupported Exchange servers is blocked till they’re up to date
Spotlight on RSA30 Mar 2023 | 16
Warning: Your wireless networks may leak data thanks to Wi-Fi spec ambiguity
How someone can nab buffered info, by hook or by kr00k
Spotlight on RSA30 Mar 2023 | 15
Another year, another North Korean malware-spreading, crypto-stealing gang named
Mandiant identifies 'moderately sophisticated' but 'prolific' APT43 as global menace
Spotlight on RSA30 Mar 2023 | 2
Oh, really? Microsoft worries multicloud complicates security and identity
Coincidentally lays off techies in its identity team
Spotlight on RSA29 Mar 2023 | 8
Biting the hand that feeds IT
