Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Doug Britton
ATRP: celebrating the past, looking toward the future
ATLANTA — For the Georgia Tech Research Institute’s Agricultural Technology Research Program (ATRP), 2023 marks an incredible milestone as we celebrate 50 years of driving innovation in poultry, agribusiness, and food manufacturing. This past spring, more than 150 attendees gathered at the Historic Academy of Medicine at Georgia Tech to celebrate the people and projects that made the program’s first five decades a success.
Cyber Talent Shortage Remains A Top Problem For Sec Pros - CEO Perspective
Excellence as a cybersecurity practitioner, particularly in pen testing, draws on cognitive abilities such as visual-spatial working memory, anomaly detection, and rule induction. Our research has shown that these abilities flourish in a spectrum of the population that is more than large enough to satisfy the need. Until recently, the problem has been divining "who" can learn the trade. We can close the gap, economically, by looking at populations that aren't at the typical recruiting hot .....
Study - Most Online Shoppers Remain With Retailer After A Breach, Experts Weigh In
BACKGROUND: In “The State of Secure Online Holiday Shopping,” NTT Application Security reports that in a study 1,057 online shoppers over the age of 18, most will remain with a retailer after a data breach, even if it was of their own data. A full 94% said they understood the risks of shopping online, yet only 25% would change retailers after a breach.
Zelle Scams Increasing For The Holidays
BACKGROUND: This may be a good comment opp as the holiday shopping season kicks off. Although Regulation E* (part of the federal Electronic Fund Transfer Act) requires banks to refund consumers for fraudulent transactions on their accounts, banks are stating that Zelle, as a peer-to-peer app, does not have the same protection.
U.S. Charges Ukrainian For Kaseya Attack; Seizes $6mill In Ransom $
BACKGROUND: The US Dept. of Justice issued a news release: Ukrainian Arrested and Charged with Ransomware Attack on Kaseya – Justice Department Seizes $6.1 million Related to Alleged Ransomware Extortionists. Release excerpts: The Justice Department announced today recent actions taken against two foreign nationals charged with deploying Sodinokibi/REvil ransomware to attack businesses and government entities in the United States.
State Hackers Breach Nine After CISA Alert Warns Of Exploits
BACKGROUND: Palo Alto Networks reported Targeted Attack Campaign Against ManageEngine ADSelfService Plus Delivers Godzilla Webshells, NGLite Trojan and KdcSponge Stealer. The report details malicious actors using previously patched techniques discussed in a Sept. 16th CISA Alert and tracks attacks beginning one day after the Alert was released and continuing into October. The attacks targeted critical sectors, including defense, healthcare, energy, technology, and education.
FBI Warns Ransomware Actors Using Financial Events, Stock Valuation To Target Companies, Experts Weigh In
BACKGROUND: In its November 1st notification Ransomware Actors Use Significant Financial Events and Stock Valuation to Facilitate Targeting and Extortion of Victims, the FBI warns: “Ransomware actors are very likely using significant financial events, such as mergers and acquisitions, to target and leverage victim companies for ransomware infections.
CISA Alert – Critical Discourse Bug - Information Security Buzz
CISA is urging admins to patch a critical (Level 10) bug found in Discourse versions 2.7.8 and earlier. Discourse released a security advisory to address a critical RCE vulnerability (CVE-2021-41163). The vuln was fixed by the developer in an urgent update on Friday. Discourse had 405 million users as of Sept. 2021 viewing 3.5 million posts. Experts Comments
Sinclair TV Confirms Cyber Attack – Expert Comments - Information Security Buzz
BACKGROUND: Sinclair TV just confirmed a widespread data breach of their networks that took down many of their tv channels on Sunday and still continues as of 12pm EST. At first calling it a “technical issue”, stations across their networks resorted to posting news on Facebook, telling viewers they had lost access to their normal news services. Security Experts are commented below. Experts Comments
4 Experts - Atom Silo grp Attacks Confluence Servers
BACKGROUND: New research from Sophos Labs details how a new threat actor group called Atom Silo was found to have attacked Atlassian Confluence team workspace servers through a recently disclosed vulnerability.
4 Experts Comment - Deloitte Calls For Integration Of Cybersec And ERM Functions At Federal Agencies
BACKGROUND: The Partnership for Public Service and Deloitte released a report Thursday How Integrating Enterprise Risk Management Can Strengthen Federal Cybersecurity, based on working sessions with ERM and cybersecurity experts in spring of this year.
Malicious URLS Slipping Past Security Vendors, Experts Weigh In
It should come as no surprise that online virus checking services like VirusTotal don’t alert on every single malicious URL campaign that is submitted, despite running the gauntlet past over 70 security vendors. URLs are very easy to create, especially complex and confusing ones that take the human and the endpoint device somewhere very bad on the Internet, and they probably come back with something even worse for the whole network ‘family’. So, don’t rely on these sites as the single .....
Expert Comments - Travis CI Flaw Reveals *All* Keys, Credentials, And API Tokens, "Developers Furious"
BACKGROUND: Travis CI exposes private creds of thousands of open source projects that rely on the service. Twitter user @peter_szilagyi Tweeted on Tuesday that “Between the 3 Sept and 10 Sept, secure env vars of *all* public @travisci repositories were injected into PR builds. Signing keys, access creds, API tokens. Felix Lange found this on the 7th and we’ve notified @travisci within the hour. Their only response being “Oops, please rotate the keys”, ignoring that *all* their infra was leaking.
HiveNightmare Windows Zero-Day Vuln Allows Privilege Escalation
A new Microsoft “HiveNightmare” vuln has surfaced in the MS KB5004605 update that added AES encryption on OS versions from Windows 10 build 1809 and newer, as confirmed by Twitter user Jonas L and @GossiTheDog. Microsoft says in CVE-2021-36934 that the zero-day can enable users to escalate to SYSTEM privileges on windows 10 & newer systems. A Haystack Solutions expert offers thoughts. Experts Comments
NATO to Consider Military Response to Cyberattacks - 3 Defense & Cyber Experts Comment
In yesterday’s Brussels Summit Communiqué – Issued by the Heads of State and Government participating in the meeting of the North Atlantic Council in Brussels 14 June 2021, NATO alerts that it will consider on a case by case basis treating cyberattacks similar to physical attacks against allies. The communique indicates NATO may launch a military response against perpetrators.
The Poultry plant of the future
The first industrial revolution emerged through mechanization primarily of agricultural tools such as the combine harvester and the cotton gin, and more broadly of mass transportation such as rail. It also initiated the transition from agriculture to manufacturing as a primary economic engine.
Security Stack Vulnerabilities: Blame it on Insecure Open Source Code
The debate surrounding open source code is sure to continue for years to come, and we’ve previously detailed both the high-level pros and cons to utilizing it. But one thing for sure is that the usage of open source is nearly unavoidable today and it’s becoming an integral part of any software development effort. With this in mind, another critical element to consider is the variety of security stacks that exist and are based on open source code.
Open Source Software: Mitigating the Risks to Reap the Rewards
Initially developed by Richard Stallman in 1983 and popularized by Linus Torvalds in the early 1990s, open source software has evolved tremendously over the last 37 years. Although it started out as a niche practice, it became more mainstream in the 2000s. Its value was initially verified by Sun Microsystems’ $1 billion acquisition of MySQL in 2008, and more recently by IBM’s purchase of Red Hat for $34 billion last year.
3 reasons why moving target defense must be a priority
INDUSTRY INSIGHT 3 reasons why moving target defense must be a priority By Doug Britton Jun 10, 2019 In cybersecurity, the shifting advantage between attackers and defenders seems a never-ending cycle. Defenders develop and implement new tools to prevent, detect, monitor and remediate cyber threats while attackers simultaneously create new attack techniques to thwart defenses and give them the upper hand.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Doug
Contact Doug, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack