Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Larry Lunetta
Voltando a atenção dos líderes ao potencial da rede corporativa
Quanto maior for o entendimento de executivos C-Level sobre a natureza e o papel da rede, melhores serão os resultados nos negócios. Isso ocorre porque uma rede segura e ágil ajuda as empresas a atingirem as metas estratégicas dos negócios. Vejo esse tipo de rede como um caminho que leva à transformação digital. Uma via que vai da nuvem até a borda, onde as pessoas, seus dispositivos e a Internet das Coisas se conectam à rede.
Trabajo híbrido requiere balancear la seguridad de la red con la EX
Los últimos tres años han impulsado un cambio de mentalidad sobre cómo se puede hacer el trabajo. A pesar del regreso gradual a la oficina, para muchos todavía estamos en medio de una revolución del trabajo remoto. De hecho, Gartner predice que, para finales de 2023, el 39 % de los empleados serán híbridos, frente al 37 % de 2022.
Helping the C-Suite leverage their network as a business-enhancing asset
By: Larry Lunetta, VP Portfolio Solutions Marketing at Aruba, a Hewlett Packard Enterprise company. As customer-focused innovators, we’re constantly looking at how we can leverage technology to better help businesses reach their goals. That’s why hearing from them firsthand is so valuable. This year, we began our search for insights with a survey run by Sapio Research.
2021: The Year 5G and Wi-Fi 6 Get Friendly
2021 marks the beginning of a new kind of relationship between private enterprises who manage open or guest network access and Mobile Network Operators (MNOs). What were once considered competing technologies have now become complimentary, and both are crucial to creating a secure and pleasant user experience virtually anywhere - indoors or outdoors.
WiFi and Cellular are Key Partners in a Secure Hybrid Workplace
WiFi and Cellular are Key Partners in a Secure Hybrid Workplace By Larry Lunetta Dec 07, 2020 COVID-19 has been with us long enough that organizations are acknowledging that home and office will combine to create the new workplace. Commonly referred to as the “Hybrid Workplace,” the expectation is that while employees may work predominantly in one place or another, over time, both the remote and office locations will play a role in enabling a productive, engaged workforce.
Protecting Mobile Users: Why Wi-Fi 6 Offers Robust Security and Enhanced Usability
For nearly two decades, public Wi-Fi hotspots have become nearly as ubiquitous as electricity and running water in public settings from education campuses to airports to the local coffee shop. Despite that growth and the convenience public Wi-Fi provides, many of these hotspots remain insecure, if they even require a password at all. Businesses should ensure that anyone who log onto its Wi-Fi network are protected from the onset, rather than put the responsibility of connecting securely on users.
What's Better Than a Two-fer? Two Two-fers! | Aruba Blogs
About the Author Larry LunettaBlog Contributor Larry Lunetta is vice president of security product marketing at Aruba, a Hewlett Packard Enterprise company. Larry is also a guest lecturer for entrepreneur studies at Arizona State University. Full bio It’s award season, marked by the Oscars and other entertainment extravaganzas. With the RSA Conference this week in San Francisco, it’s a chance for the security industry to also strut its stuff.
Overcoming Human Error to Secure the Smart Workplaces Transformation
It’s no secret that the workplace is getting smarter every day. Through an increasingly connected world, new capabilities such as location-based services and “smart” buildings are becoming more commonplace to create today’s experience-based economy. In the not-so-distant-future, digitally-driven interactions that are personalized for employees, customers and partners will become the norm.
Security Boulevard
Cyberattacks hit record highs last year, with nearly 160,000 cyber incidents reported and seven billion records exposed in the first three quarters of 2017, according to Online Trust Alliance’s Cyber Incidents and Breaches Trends Report. With the ubiquity of cyberattacks comes a need for more professionals. However, skilled individuals who are not already in the field and who have an interest in cybersecurity careers remain scarce.
Security Boulevard
Iron Bastion’s cybersecurity expert Gabor Szathmari, recently published novel research on abandoned internet domains, and how they are a significant cyber risk which threatens businesses and in particular the Australian legal profession. This article was first published on Iron Bastion’s security blog and was written by Nicholas Kavadias and Emily Williams. A domain name is a name you can register to identify your business on the internet.
Security Boulevard
The package has had an update to more efficiently retrieve mementos and added support for working with the Internet Archive’s advanced search+scrape API. The search/scrape interface lets you examine the IA collections and download what you are after (programmatically). The main function is but you can also paginate through results with the helper functions provided. To demonstrate, let’s peruse the IA NASA collection and then grab one of the images.
Security Boulevard
Government Payment Service Inc. — a company used by thousands of U.S. state and local governments to accept online payments for everything from traffic citations and licensing fees to bail payments and court-ordered fines — has leaked more than 14 million customer records dating back at least six years, including names, addresses, phone numbers and the last four digits of the payer’s credit card.
Security Boulevard
Juniper Research predicts that by 2022 more than half the homes in the U.S. will contain smart speakers like today’s popular Amazon Alexa and Google Home, and it’s easy to see why. Providing the answer to any question we can dream up, producing music and other entertainment on demand, handling our online shopping, they are one giant step towards the personal droid assistants we’ve all been craving since meeting C-3PO and R2-D2.
Q&A: The troubling implications of normalizing encryption backdoors — for government use - Security Boulevard
Should law enforcement and military officials have access to a digital backdoor enabling them to bypass any and all types of encryption that exist today? We know how Vladmir Putin, Xi Jinping and Kim Jung-un would answer: “Of course!” The disturbing thing is that in North America and Europe more and more arguments are being raised in support of creating and maintaining encryption backdoors for government use.
Security Boulevard
In November 2017, Google Chrome began rolling out an experimental feature to warn users about apps that might be causing instability in the browser. These alerts are designed to help you identify and remove software on your computer that is injecting code into Chrome, with the aim of making your browser more stable.As the name implies, injecting code is the act of introducing code to an application.
Security Boulevard
At Shape we come across many sketchy pieces of JavaScript. As part of our everyday routine, we dive into them head first to understand what they’re doing and how. The scripts might be maliciously injected into pages, they might be sent by a customer for advice, or our security teams might find a resource on the web that seems to specifically reference some aspects of our service.
Security Boulevard
The pace of innovation in emerging Cloud technologies is making it more and more challenging for IT practitioners to keep up. It’s time to get ahead! .NEXT On Tour is specifically designed to provide you with insights on the latest in emerging Hybrid-Cloud technologies and how real-world customers are transforming their organizations. Join Bitdefender at .NEXT On Tour for a straightforward, actionable roadmap to navigating your journey to the enterprise cloud.
Security Boulevard
It shouldn’t be news to anyone that cyber threats are on the increase, and the requirement to have an effective security solution has never been more pressing as advanced hacking techniques continue to proliferate in the wild. With the market awash with vendors making bold claims and news stories making even bolder headlines, it can be hard to separate the fact from the fiction.
Security Boulevard
It’s not a secret that modern apps often become a target of cyberattacks. Gartner reports that 95% of web applications experience attacks because of stolen user passwords. This means a set of symbols is no longer a reliable way of… Read more The post Modern Authentication Methods and How They Enhance User Security appeared first on How to, Technology and PC Security Forum | SensorsTechForum.com.
Security Boulevard
Recently, the FIDO Alliance (Fast Identity Online) announced the availability of its FIDO2 protocol. What is this, how does it impact the traditional login password, and why should financial institutions (FIs) pay attention? Improving the overall user experience and removing friction is key for financial institutions deploying online and mobile applications. User experience has a direct impact on customer retention, ROI of online services, and operational costs.
Security Boulevard
The cyber security field is booming, with demand for cyber security professionals far outpacing supply. This talent shortage has created an industry where pay is high and the options for job seekers are plentiful. Yet there is also a shortage of cyber talent caused by a confluence of factors, including employers demanding too many required skills for job applicants.
Security Boulevard
Governments, businesses and societies as a whole benefit enormously from Artificial Intelligence (AI). AI assists organisations in reducing operational costs, boosting user experience, elevating efficiency and cultivating revenue. But it also creates a number of security challenges for personal data and forms many ethical dilemmas for organisations. Such challenges for information security professionals mean re-calibration of approaches to data security, data classification and privacy.
Security Boulevard
According to a cybersecurity resilience study, 77 percent of organizations surveyed lack proper incident response plans, while 69 percent report insufficient funding for cyber resiliency. Where does your organization stand on this critical issue? It’s best to accept that it’s not a matter of if your SaaS organization will encounter a security incident at some point in its lifetime but rather when. Operating within today’s security landscape, the time to “when” is shrinking daily.
Security Boulevard
One of the things I do from time to time is throw out an open ended question on Twitter. Sometimes I’m making a point, sometimes I just want to amuse myself, but mostly I’m honestly curious about what other people think. The answers almost always surprise me. What piece of luck had the biggest effect on your career? What did you have to do to be prepared to take advantage of that piece of luck?
Security Boulevard
As coverage of Hurricane Florence unfolded last week, one word kept coming up on Thursday and Friday as everyone prepared for the storm. Beginning midweek, long before we knew where Florence would make landfall in the Carolinas, weather forecasters told us, “This storm appears different.” And, “We’ll be seeing the impacts from Florence for days.” They warned that Florence would likely slow down and meander along the coast.
Remote Code Execution
Erlang is a programming language that I have tried to learn a few times in the past but never really dug in, that is, until recently. Erlange is an interesting language because it has “built-in concurrency, distribution, and fault tolerence”. To me, this means that it does job queing and distributed tasks right out of the gate. I first started digging into Erlang again from an attackers point of view at BSides Philadelphia 2016, where I talked about SolarWinds ORION.
Security Boulevard
There are some inherent risks associated with using any online service, but nowhere are the stakes higher than in the world of Internet banking. Make a simple security slip up and there’s a chance that the wrong person could get their hands on your login details – or worse, your transaction authentication number (TAN) – and potentially empty your account from anywhere in the world.
Security Boulevard
In March 2018, the city of Atlanta fell victim to a ransomware attack that shut down its computer network. City agencies were unable to collect payment. Police departments had to handwrite reports. Years of data disappeared. The attack also brought cybersecurity to the local level. It’s easy to think of it as a problem the federal government must address or something that enterprises deal with, but cybersecurity has to be addressed closer to home, as well.
Security Boulevard
Synopsys is well-known for our software integrity portfolio: integrated testing tools, managed services, professional services, and developer education. But products, services, and training aren’t all we offer. We also perform hundreds of Black Duck On-Demand open source audits every year. And all that audit data fuels the open source security research and vulnerability analysis we perform through our Center of Open Source Research & Innovation (COSRI).
Security Boulevard
Memory-based, fileless, or living-off-the-land attacks were one of the most prevalent types of attacks in 2017 and are only growing. But how do they happen and why are they on the rise? The short answer is that they work because they are less detectable by traditional and many ‘next gen’ antivirus solutions. For example, Word documents are often used because the file itself is not considered malware.
Security Boulevard
“Practice what you preach” was clearly not a part of the Swiss-based Veeam’s policy as someone left almost 200GB of data available to anyone online. The unsecured MongoDB server was open from August 31st, 2018 to September 9th, 2018. The leak was discovered after an investigation by Bob Diachenko and TechCrunch who found 445 million Marketo-based records sitting unguarded.
Security Boulevard
VMworld 2018 started off with a lot of fanfare. VMware CEO Pat Gelsinger kicked the conference off with some mind-boggling statistics: With more than 7,500 customers, VMware NSX has achieved a substantial market leadership position in the software-defined network category – ten times larger than its closest customer.
Security Boulevard
By now, you should be familiar with that sudden bout of uncertainty as you are gearing up to install a new application. How do you check if an Android app is safe to install? Does it have a virus? What does a malware app even look like? If you have ever felt threatened at the prospect of installing a fake app masquerading as a fan-favorite, then this guide is for you. From malware to overheating and more, smartphones today suffer from the same issues PCs do.
Security Boulevard
In July 2018, FireEye devices detected and blocked what appears to be APT10 (Menupass) activity targeting the Japanese media sector. APT10 is a Chinese cyber espionage group that FireEye has tracked since 2009, and they have a history of targeting Japanese entities. In this campaign, the group sent spear phishing emails containing malicious documents that led to the installation of the UPPERCUT backdoor.
Security Boulevard
We’ve been in the application security business for more than 10 years, and we’ve learned a lot in that time about what works, and what doesn’t. This is the fifth in a blog series that takes a look at some of the most common mistakes we see that lead to failed AppSec initiatives. Use our experience to make sure you avoid these mistakes and set yourself up for application security success. Application security is about more than tools and technology. It is just as much, if not more so, about people.
MY TAKE: Here’s how diversity can strengthen cybersecurity — at many levels - Security Boulevard
Of the many cybersecurity executives I’ve interviewed, Keenan Skelly’s career path may be the most distinctive. Skelly started out as a U.S. Army Explosive Ordnance Disposal (EOD) Technician. “I was on the EOD team that was actually assigned to the White House during 9/11, so I got to see our national response framework from a very high level,” she says. Today, Skelly is Vice President of Global Partnerships and Security Evangelist at Circadence®, a distinctive security vendor, in its own right.
Security Boulevard
It shouldn’t come as a surprise to anyone reading this article that there has been a major shift towards businesses hosting their critical applications in the cloud. Software-as-a-Service (SaaS), as well as cloud-based servers from Amazon or Microsoft, have changed the way we build networked business systems for any size organization. Cloud-hosted solutions can (but not always) simplify local management, save money, provide flexibility, and generally simplify the planning for a system life cycle.
Security Boulevard
Bolting on security after the fact. It’s been a common approach to software security for decades. We architect, build code, deploy it and then figure out how to secure it. From the parade of application-related breaches and data thefts over the last few years, we pretty much know this approach does not work. Fortunately, the evolution of continuous deployment and DevOps, when coupled with the use of containers, offers great potential to improve application security.
Security Boulevard
You’d think that life would be pretty hard for threat actors these days, given the plethora of security companies out there feeding insatiable, ever-growing blacklists of malware that track millions upon millions of payload fingerprints. You’d think getting malware past antivirus products would be a Herculean task, requiring the development of new, never before seen custom malware. If you thought either of those things, you’d be wrong.
Security Boulevard
The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device.
Data breach — 380,000 British Airways transactions compromised | Avast - Security Boulevard
Continuing the seemingly unending parade of data breaches marching through the headlines over the past year, including the Reddit breach, the Atlas Quantum breach, the Huazhu hotel chain breach, and the Air Canada breach — and those were all just in August — a targeted attack on British Airways made off with the full payment info of 380,000 transactions.
Security Boulevard
I was chatting with some cyber-mates at a recent event and the topic of cyber attacks on the U.S. power-grid came up (as it often does these days).
Security Boulevard
As part of our continued efforts to tackle entire classes of threats, Office 365 client applications now integrate with Antimalware Scan Interface (AMSI), enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior. Macro-based threats have always been a prevalent entry point for malware, but we have observed a resurgence in recent years.
Security Boulevard
Managed security services provide a great way to deliver the protection that today’s small and medium businesses (SMBs) require while providing an opportunity to differentiate and grow your business through new revenue and services. Done right, managed security services can be a valuable extension to your existing service portfolio and provide a cost-effective and efficient way to provide security solutions suitable for SMB budgets.
Security Boulevard
You’ve seen that movie, the one where humans fabricate robots that are so human-like they end up taking over the world. What was once the plot line for every other sci-fi film is now leaking into the reality of our everyday lives. The future of artificial intelligence isn’t so distant with voice-powered personal assistants like Siri and Alexa, and autonomously-powered self-driving vehicles already on the market.
Security Boulevard
“Worldwide spending on information security products and services will reach more than $114 billion in 2018, an increase of 12.4 percent from last year, according to the latest forecast from Gartner, Inc. In 2019, the market is forecast to grow 8.7 percent to $124 billion.” That’s good, right? Well maybe-not-so-much.
Security Boulevard
Adobe and Microsoft today each released patches to fix serious security holes in their software. Adobe pushed out a new version of its beleaguered Flash Player browser plugin. Redmond issued updates to address at least 61 distinct vulnerabilities in Microsoft Windows and related programs, including several flaws that were publicly detailed prior to today and one “zero-day” bug in Windows that is already being actively exploited by attackers.
Is it Safe? Realizing the Benefits for Digital Workplace Transformations
Don’t look now, but each day your work surroundings are getting smarter and more connected. But as advancements in mobility, IoT, cloud and artificial intelligence are increasingly adopted by facilities, manufacturing, IT and other departments, creating a digital workplace, proportionate levels of risk are also introduced. For you on the front lines battling increasingly sophisticated cyberattacks, these new network-connected devices mean only more attack vectors to identify and protect against.
Security Boulevard
I am happy to unveil our newest series, “Shimmytoons.” This first one is titled, “Multi-Factor Authentication.” For those who follow DevOps.com, you may know that one of our most popular features is our RoelBob series of cartoons. For Security Boulevard, we wanted to take cartoons to the next level. Working with Bob Reselman (who is a genius) and his merry band of talented folks, we came up with Shimmytoons. What is better than a cartoon? An animation, of course.
Security Boulevard
The 2018 IEEE Security & Privacy Conference is in May but they’ve posted their full proceedings and it’s better to grab them early than to wait for it to become part of a paid journal offering. There are alot of papers. Not all match my interests but (fortunately?) many did and I’ve filtered down a list of the more interesting (to me) ones. It’s encouraging to see academic cybersecurity researchers branching out across a whole host of areas.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Larry
Contact Larry, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack