securityledger

Independent cybersecurity news and opinion since 2012. Open DMs. Subscribe: | Mastodon

[securityledger @securityledger]

Find us at: https://t.co/azXc0Y7tWu

[securityledger @securityledger]

Hackers are targeting developers...and the AI that writes their code. A malicious campaign by North Korea's Famous Chollima #APT saw a malicious npm package dependency slipped into a crypto trading agent by @claudeai Opus AI coding agent. https://t.co/JjkXiJ8hCb @ReversingLabs

[securityledger @securityledger]

The @Stranger_Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on. A new report from @ReversingLabs shines a light into that dark world. https://t.co/LemZglAdew #appsec #cybersecurity

[securityledger @securityledger]

Report: Epidemic of Flaws in Commercial and Open Source Code Fuels Attacks @ReversingLabs #OSS #softwaresupplychain #cybersecurity #appsec #report https://t.co/C1t2riWmhE via @securityledger

[securityledger @securityledger]

In this clip from our latest #podcast, David Kellerman the Field #CTO at Cymulate explains how the company's attack simulation feature works - helping organizations test security products in real life attack scenarios. Check out the full interview here: https://t.co/Kbh8LYZXih

[securityledger @securityledger]

In this clip from our latest podcast, host @paulfroberts
asks David Kellerman, Field #CTO @Cymulateltd about security tool overload and the need for optimization. Check out the full interview here: https://t.co/GiekXlXSE7 #podcast #sponsored

[securityledger @securityledger]

Your Cyber News Roundup from The Security Ledger - https://t.co/0azQEmzc0R

[securityledger @securityledger]

Researcher @samwcyo and others found a flaw in a @Kia_Worldwide website giving hackers access to the vehicle's location & driver data, remote start, locking, horn, etc. with just a license plate number! #InternetOfThings https://t.co/wA8CqDuVas

[securityledger @securityledger]

Check out @ElisityInc virtual event on securing the IoMT😷 today at 4PM ET - https://t.co/ZuAiSbCQX0

[securityledger @securityledger]

At #RSAC2024 ? Check Bricked and Abandoned tomorrow (TUE 5/7) at 9:00 AM. EIC @paulfroberts talks with @allanfriedman of @CISACyber, @tarah, @WeldPond, @window and @MalwareJake on the security implications of OEM #EOL decisions. https://t.co/oUc7F0YY6x

[securityledger @securityledger]

Check out our latest Spotlight #Podcast with Jim Broome, President and #CTO at @Direct_Defense. Jim and host @paulfroberts chat about D2's latest Security Operations Threat Report and changes in the threat landscape driven by the use of #AI. https://t.co/Y5xZAfzLIw

[securityledger @securityledger]

Data stolen? Get used to it kid. That's the reality for young people coming of age today in the app sec shanty town that is the 21st century U.S. economy: a sprawling, unregulated, ad-hoc ecosystem prone to shocking breakdowns and failures. https://t.co/YCej2Ep3sY

[securityledger @securityledger]

And – as with food safety – we all will benefit in the end. 🙏 #cybersecurity #DevSecOps #software #supplychain #opinion

[securityledger @securityledger]

How do we improve software quality and end the epidemic of shoddy, exploitable software harming consumers, communities and businesses? To start, we need to change the way we think and talk about software-based risks, writes @paulfroberts. Read on...
https://t.co/Lq1Tg31LKs

[securityledger @securityledger]

avenues of attack. Ultimately, cyber attacks are no more inevitable than food poisonings. Both are preventable with the application and enforcement of standards and rules based on an objective understanding of risks and threats.