Stuck in Traffic – No Trust for Insider Threats

Applying zero-trust thinking to the insider threat problem.

Pakistani Man Bribed AT&T Employees to Unlock Phones, Plant Malware
https://ift.tt/2M3ifF9

Watch more videos on my YouTube channel.

Why do new grads make old mistakes? What can we do to improve the coding and configuring of security controls, specifically by developers?

Watch more videos on my YouTube channel.

We’ve said it for some time. But we say a lot of things in InfoSec. Finally, there is data to back up the saying. Block access to new DNS domains to significantly reduce risk.

https://ift.tt/2NmuE74

Watch more videos on my YouTube channel.

Upside: business-to-business clients spend more with secure organizations. Downside: B2B clients sue non-secure organizations. Now to use this in building a security program.

Watch more videos on my YouTube channel.

Tips for building security roadmaps, or alternatively, what having a deck party taught me about planning.

Watch more videos on my YouTube channel.

Apple iPhones and iPads running iOS 12.4 are once again open to jailbreaking. I say once again because the vulnerability was closed in 12.3, but is back in 12.4. This is a good time to think about our AppSec regression testing process.

More here:
https://ift.tt/2NfQwkt

Watch more videos on my YouTube channel.

Another look at 3fun’s mistakes, and three lessons we can take back to our mobile AppDev teams.

See the original article here: https://ift.tt/2JHdCyg

Watch more videos on my YouTube channel.

Credential theft from dating websites can lead to credential reuse, social engineering, or extortion. Take the press on 3Fun, which exposed business and governmental leaders. So what can these third-party websites do to protect their users and our organizations?

Watch more videos on my YouTube channel.

When designing security tool UIs, it is crucial we design for people on their worst day. People stressed, hurried, and distracted. Bad example: hotel same-unit washer dryers. Good example: airports.

Watch more videos on my YouTube channel.