Security UX

information, research, articles and conversations around experience design for cybersecurity

[ATT&CK @MITREattack]

Virtual registration is open for ATT&CKcon 5.0!

While we'd love to see you in person in McLean, VA October 22-23 (and still have a few tickets left at https://t.co/fnTIn2eUDg), you can catch talks online for free by registering at https://t.co/TwtHq5woOS

[Daniel D. Gutierrez @ddgutierrez73]

Nasuni Integrates Microsoft 365 Copilot Bringing AI Transformation to Unstructured Data https://t.co/hEFt5Ou89V

#AI @Nasuni

[NETSCOUT @NETSCOUT]

☁️ More and more businesses are making the move to the cloud in 2024—58% to be exact! But let’s face it, migrations aren’t easy. They come with a whole set of challenges, and the stakes are high for IT teams and leadership alike. The key to success?

[Security Innovation @SecInnovation]

BUREAU VERITAS ACQUIRES SECURITY INNOVATION INC. TO REINFORCE ITS CYBERSECURITY EXPERTISE IN THE SOFTWARE DOMAIN
Security Innovation will establish a new cybersecurity hub for its clients in the US

Learn more: https://t.co/8ri0R8N7aU

[BlackRoomSec @blackroomsec]

No, go into cybersecurity. We need red hot passionate people to defend against the onslaught of bad stuff out there. It used to be viruses would display dumb messages on the screen or rain down alphabet letters. Now they're taking over kids hospital networks and holding municipalities hostage, crippling everyday life for lots of unwary people who just want to pay their water bill or register a car.

What was first done in jest has now gotten mean.

Sign up. This is All Hands on Deck.

The work is grueling.
The hours are long.
You see the moon more than you do the sun and your doctor crams Vitamin D down your throat like you're an uncooperative dog taking their medicine.
Your family doesn't remember what you look like.
Your non tech coworkers think you're a zombie.
You start confusing Thursday with Monday like it's the pandemic.

But when you find that vuln,
and you close that hole,
and you sign that report
and your scan comes back clean
and your sensors don't trip
and your logs all jive
and your eyes start to close
because you're dead dog tired

You wake up the next day and you wouldn't trade this life for anything else.

Because you'd rather it be you fighting the good fight than someone unprepared.

Welcome to the Thunderdome, baby. 😊

[vx-underground @vxunderground]

Some controversy today as YouTube tech reviewer Marques Brownlee 'Panels' app is getting pretty substantial backlash.

tl;dr Marques Brownlee app, 'Panels', offers high-definition wallpapers from Digital Artists for $49.99/year. People criticized the app for an array of reasons, beside the idea of paying $49.99/year for wallpapers on your cell phone, the app requests tracking information, and contains ads.

Unsurprisingly, and as is tradition, internet nerds quickly began inspecting the app under the metaphorical microscope. Security researcher @I_Am_Jakoby discovered the apps API is wildly insecure. He wrote a simple script which programmatically scrapes every high-definition wallpaper.

Attached image is the script he shared. If you want to experiment with it, just OCR it or something.

[Security UX @SecurityUX]

With #cloud security threats on the rise, do organizations truly understand their security vulnerabilities? @DarkReading https://t.co/8GngvLcMdq

[Security UX @SecurityUX]

The #metaverse has the potential to generate up to $5 trillion in value by 2030, an opportunity called "too big" for companies to simply ignore. What’s your thoughts? @InformationWeek https://t.co/Wrb3rLbwxq

[Security UX @SecurityUX]

Even your best network assurance team might not be fastest enough for #5G. Help your team and please your customers with automated network assurance. @NETSCOUT https://t.co/PnWzdJ7pA5

[Security UX @SecurityUX]

UK councils have been on the receiving end of over 2.3 million cyber attacks so far this year. Did you know that you can block as much as 90% of DDoS attacks by implementing robust and modern cybersecurity tools? Learn more. @NETSCOUT https://t.co/yPjFzZayD5

[Security UX @SecurityUX]

In a time when giving back and helping one another is more important than ever—as an employee of @NETSCOUT, honored to be selected by @Bosbizjournal as one of the most charitable companies in Massachusetts. Great job to all the companies! #BBJCCA https://t.co/Lxv7BP6FUB

[Security UX @SecurityUX]

The #metaverse has the potential to generate up to $5 trillion in value by 2030, an opportunity called "too big" for companies to simply ignore. What’s your thoughts? @InformationWeek https://t.co/Wrb3rLbwxq

[Security UX @SecurityUX]

In a time when giving back and helping one another is more important than ever—as an employee of @NETSCOUT, honored to be selected by @Bosbizjournal as one of the most charitable companies in Massachusetts. Great job to all the companies! #BBJCCA https://t.co/Lxv7BP6FUB

[Security UX @SecurityUX]

Many healthcare initiatives during the last couple of years are directly related to improving patients' experience & access to medical support. @NETSCOUT dives into how Telemedicine, Patient portals, and UCaaS have skyrocketed and how to maintain quality. https://t.co/UHLRJQZs0q

[Security UX @SecurityUX]

The CISA moved to add a smuggling vulnerability with the highest possible risk score, & 6 others, to its Known Exploited Vulnerabilities Catalog. FCEB agencies will apply relevant patches to mitigate these potential threats on September 8th @TheHackersNews https://t.co/E3iSVTYViw

[Security UX @SecurityUX]

TFTP is a simple lockstep File Transfer Protocol that allows a client to get a file from/ put a file onto a remote host and can be exploited to launch DDoS attacks. Not being protected could be catastrophic. @NETSCOUT #NETSCOUTSecurity #Attackvectors #DDoS https://t.co/ZKNd1A77Hx

[Security UX @SecurityUX]

Contrary to conventional packet filters—which only check the packet headers for information — #DPI examines the header and the data/payload the packet is carrying. So, why DPI for #cybersecurity? @NETSCOUT https://t.co/bWbEIyWBtv

[Security UX @SecurityUX]

Did you know you can block as much as 90% of #DDoS attacks? Richard Hummel, senior threat intelligence manager at @NETSCOUT, offers advice to councils and public sector organizations when defending themselves from DDoS attacks.
https://t.co/UWlSyB2SCd

[Security UX @SecurityUX]

Almost like magic, predictive network technology can automatically remediate performance issues & reduce service outages, reducing management burden. However, it doesn't eliminate the need for human monitoring & oversight. @NetworkComputin https://t.co/iu891scl7S

[Security UX @SecurityUX]

Innovation must be guided by global, synchronized #security standards that will clarify the future of #IoT security. Testing and third-party validation is the way to go, giving peace of mind to organizations, partners, and customers. @DarkReading https://t.co/TgkaharKsz