We’ve been saying that InfoSec isn’t about one person working alone in a basement. Today takes people skills. Likewise, InfoSec isn’t about one person with mad people skills and technical skills. It takes team work.
Ever since Neuromancer, hackers have dreamed about Artificial Intelligence in hacking tools. A team just announced one such AI for guessing password. (Too bad they didn’t name it ICE or Intrusion Countermeasures Electronics.) It works twice as fast as brute force crackers. Meanwhile, some claim AI is the next religion. Whelp, at least they can save us from forgotten passwords.
PassGAN: A Deep Learning Approach for Password Guessing
God is a Bot, and Anthony Levandowski is His Messenger
When we’re building a program to protect the organization? Follow the money. When we’re deploying controls to prevent crime? Follow the money. So today, three stories of hacks leading to money from the stock market.
Equifax posted: “We know that criminals exploited a US website application vulnerability. The vulnerability was Apache Struts CVE-2017-5638. We continue to work with law enforcement as part of our criminal investigation, and have shared indicators of compromise with law enforcement.” Ouch. So. What’s Struts?