This is episode No. 89 of Unsupervised Learning—a weekly show where I curate 3-5 hours of reading in infosec, technology, and humans into a ~30 minute summary. This week’s topics: Serious CANBUS issue, Cyber as a branch of the service?, iOS 11 Cop Mode, biometric wearables, Bill Joy battery, bitcoin forking again, ideas, discovery, aphorism, and more… Listen…

I was just watching some server logs and decided to pull some statistics on common attacks from Snort and Bro. This first one is SSH bruteforce attempts. Here are the most commonly attempted usernames: Here are the most common IDS alerts at Priority 2. These are the most common source countries for IDS attacks. And here are the…

This is Episode No. 88 of Unsupervised Learning—a weekly show where I curate 3-5 hours of reading in infosec, technology, and humans into a 15 to 30 minute summary. This week’s topics: Amazon Macie, APT28, Cuba sonic attacks, Palantir and police, DNA malware, confusing self-driving cars, ideas, discovery, aphorism, and more… Listen and subscribe via…

Many in the InfoSec community are currently making a major mistake by dismissing the ML/AI craze as hype. There are two main causes for this reaction. There are a ton of InfoSec vendors who are claiming to have AI when they really don’t. The InfoSec community loves to call bullshit on things. It’s like a sport or a…

If you’ve not seen it yet, there’s a meme going around saying DEFCON is cancelled. It seemed to be purely a good fun troll, but it’s been gaining in popularity over the last couple of weeks. Then this morning I found what appears to be the official meme manifesto, and it made me wince a bit. Kind of…

This week’s topics: The future of security testing, nuclear plant hacks, Android malware, satellite decryption, wildcard certs, military encryption, gsuite protections, WWE S3, tesla 3, jawbone, drone hacking, mental aging, millionare GPAs, discovery, recommendations, the weekly aphorism, and more… This is Episode No. 85 of Unsupervised Learning—a weekly show where I curate 3-5 hours of reading in infosec,…

There are three things that industries ravaged by ransomware tend to have in common. They have data that is sensitive enough to be protected. The industry lacks mature defenses. Someone in the victim ecosystem is willing and able to pay. Where we’ve seen this so far are places like: Hospitals Schools Small businesses Home users (to a lesser…

People are very confused about the bounty vs. penetration test debate. They see fundamental differences that don’t actually exist, and they’re blind to what’s actually coming. The reality of testing needs can be reduced to a few key variables, which exist on a spectrum. Good vs. bad testers Many testers vs. few testers High vs. low business context…

This week’s topics: Petya ransomware worm, RNC breach, Anthem settlement, Russians want source code, risk ratings, patching, ICOs, ideas, discovery, recommendation, aphorism, and more… This is Episode No. 83 of Unsupervised Learning—a weekly show where I curate 3-5 hours of reading in infosec, technology, and humans into a 15 to 30 minute summary. The goal is to catch…

With WannaCry and now with Petya we’re getting to see how and why some ransomware worms are more effective than others. [ Jul 3, 2017 — It’s now pretty well accepted that Petya wasn’t ransomware but a wiper instead. The post still applies to ransomware, though. ] I think there are 3 main factors: Propagation, Payload, and Payment….