Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Red Curry
What Kind of People Do Cybersecurity for a Living?
6 minutes ago bankinfosecurity CISO Sam Curry, CMO Red Curry on Out-of-the-Box Thinkers, Alliance Builders, Rebels Steve King • July 9, 2024 77 Minutes This podcast was recorded on May 14, 2024. What kind of people do cybersecurity for a living? In the past, there was a formula potential practitioners followed, but today there are many ways to get into the field and having people from diverse backgrounds is valued.
Indonesian Street Food: Salad, Chicken Soup, and Chicken Rendang
About this Event Indonesia food is full of diverse cultures and traditions. The food is different in each region and incorporates a lot of spices, fresh herbs, and fresh ingredients. In this online interactive class, we’ll make popular Indonesian street food from scratch including the spice herb paste. We’ll make Sayur Urab, green bean salad with delicious homemade dressing and coconut toppings.
How to Win a Cyberwar: Use a Combined Intelligence Strategy
29 minutes ago bankinfosecurity CMO Red Curry, CISO Sam Curry on Sentiment Mapping, Ground Truth, Anti-Fragility Steve King (@sking1145) • February 6, 2024 47 Minutes In times of war, such as the Israel-Hamas war that began on Oct. 7, 2023, intelligence becomes even more important than it is in peacetime. Yet, cyber defenders often focus more on getting inside the adversary's system to listen to their attack plans than they do on using tabletop exercises to refine their response to those attacks.
Going Beyond DLP: A Better Approach to Data Security
Solutions Review’s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Red Curry of Reco.ai says it’s time to look beyond the veil of DLP and take a better approach to data security. The mass adoption of SaaS applications at a relatively quick speed has ushered in new ways of working in far more efficient and collaborative ways. But too often, these tools weren’t built with security in mind.
Cybersecurity and Infrastructure Security: The Road Ahead
When it comes to security, the physical affects the digital and vice versa. There's no longer a distinction; the two are intrinsically linked and converged. At the same time, our infrastructure is old — most of it was designed for far fewer people than it currently serves, whether we're talking about power lines or train crossings. We're already seeing how the physical can affect the digital.
Time to Take CyPhy Seriously
In light of today’s massive threats to critical infrastructure, organizations must prepare for significant upgrades. By Red Curry, chief marketing officer, Tautuk There’s no longer a clear distinction between cybersecurity and physical security; the boundary lines have been blurred thanks to factors such as the disappearance of the OT air gap, nation-state actors and attacks on infrastructure.
Security Boulevard
March Madness is one of the most watched—and anticipated—events each year. And each year as March Madness approaches, cybersecurity experts warn about hackers who want to take advantage of the tournament’s popularity with phishing schemes and bogus websites and videos heavy with malware. The NCAA basketball tournament isn’t the only major event that is targeted this way.
Security Boulevard
Home » Security Bloggers Network » Avast Named a CRN Coolest Endpoint Security Provider | Avast Business Avast Named a CRN Coolest Endpoint Security Provider | Avast Business Our new Avast Business endpoint security products are once again in the spotlight, highlighted in CRN’s 2018 Security 100 list of the 20 Coolest Endpoint Security Vendors. Related This is a Security Bloggers Network syndicated blog post authored by Avast Blog. Read the original post at: Blog | Avast EN
Cloud Directory Feature: Web App SSO
As the identity and access management (IAM) space continues to evolve, one area that is in transition is web application single sign-on (SSO). As a critical part of the overall identity management space, web app SSO features are being integrated into modern cloud directory implementations. In this post, we discuss the cloud directory feature: web app SSO. But first, we should outline the development of SSO and the cloud directory.
Security Boulevard
Home » Cybersecurity » Social Engineering » Mind The Shells, Windows PowerShell Credential Social Engineering Two-Step Mind The Shells, Windows PowerShell Credential Social Engineering Two-Step
Security Boulevard
Tax season is stressful enough without having to worry about becoming the victim of a cyber crime. Here are three different tax phishing scams targeting employers, individuals, and even tax preparers that are currently making the rounds. The W-2 phishing scams that have plagued employers for a couple of years are back with a vengeance. The IRS noticed a significant uptick in these tax phishing scams beginning in January and recently issued an official warning.
Security Boulevard
On average, UK businesses lose around £30 billion every year as a result of cyber crime. Unfortunately, the risks are only getting greater and more prominent. Now is the time for you to act. Here are four vital tips for securing your SME in an online world. How secure are you systems? A cyber security audit is a good place to start. Explore all threats to your business, both internal and external.
Security Boulevard
Adrian Lamo, the hacker probably best known for breaking into The New York Times‘s network and for reporting Chelsea Manning‘s theft of classified documents to the FBI, was found dead in a Kansas apartment on Wednesday. Lamo was widely reviled and criticized for turning in Manning, but that chapter of his life eclipsed the profile of a complex individual who taught me quite a bit about security over the years.
Security Boulevard
Home » Cybersecurity » Events » BSides PDX, Joe Grand’s ‘Hacking A Tooth Tunes Toothbrush For A Positive Dental Outlook’ BSides PDX, Joe Grand’s ‘Hacking A Tooth Tunes Toothbrush For A Positive Dental Outlook’
Hawking, Oliver, Schooled
Click to email this to a friend (Opens in new window)
Security Boulevard
Home » Cybersecurity » Malware » Five endpoint threats affecting small businesses | Avast Business Five endpoint threats affecting small businesses | Avast Business Endpoints are an easy target for hackers, so it’s essential that small businesses protect themselves. Connected employees, vulnerable software and weak antivirus all contribute to this being a favorite target of hackers.
Security Boulevard
Healthcare data security is under attack from the inside. While insider threats – due to employee error, carelessness, or malicious intent – are a problem in every industry, they are a particular pox on healthcare data security. Two recent reports illustrate the gravity of the situation.
Cryptocurrencies: Last Week Tonight with John Oliver
Click to email this to a friend (Opens in new window)
Security Boulevard
Did you know that 3 out of 4 employees prefer to use Mac over Windows systems? Did you also know that allowing users to use the system of their choice increases productivity by 72%? With these stats in mind, it’s not a surprise that Macs are replacing Microsoft® Windows® in the workplace. However, new challenges have surfaced as a result. If Macs have recently come into your environment, you are more than well aware of the poor options that exist for managing Mac users.
Taking down Gooligan: part 2 — inner workings - Security Boulevard
This post provides an in-depth analysis of the inner workings of Gooligan, the infamous Android OAuth stealing botnet. This is the second post of a series dedicated to the hunt and takedown of Gooligan that we did at Google, in collaboration with Check Point, in November 2016. The first post recounts Gooligan’s origin story and provides an overview of how it works. The final post discusses Gooligan’s various monetization schemas and its take down.
Security Boulevard
On Thursday, the U.S. government imposed sanctions against five entities and 19 individuals for their role in “destabilizing activities” ranging from interfering in the 2016 U.S. presidential election to carrying out destructive cyber-attacks such as NotPetya, an event that the Treasury department said is the most destructive and costly cyber-attack in history.
Security Boulevard
An article by Denise Giusto Bilic for ESET: Tricks that cybercriminals use to hide in your phone (Very Android-oriented, not surprisingly…) And a couple of links borrowed from AVIEN’s resource page Cryptocurrency/Crypto-mining News and Resources
Security Boulevard
Home » Cybersecurity » Events » BSides PDX, Karl Fosaaen’s ‘Speaking To A City Of Amazon Echoes’ BSides PDX, Karl Fosaaen’s ‘Speaking To A City Of Amazon Echoes’
Security Boulevard
Home » Security Bloggers Network » The WHOIS Enfeeblement The WHOIS Enfeeblement Brian Krebs, writing at his eponymous KrebsOnSecurity, reiterates the debacle of the new EU data privacy regulations, and the affect on legitmate utility in the information security space. Today’s MustRead. Permalink Related This is a Security Bloggers Network syndicated blog post authored by Marc Handelman. Read the original post at: Infosecurity.US
Attackers Deliver Cryptominer to PostgreSQL Servers as Scarlett Johansson Pic
Security researchers have come across an attack against PostgreSQL servers that installs cryptominer malware that’s hidden in a picture of actress Scarlett Johansson. The unusual attack was captured in a honeypot by researchers from security firm Imperva, who intentionally left their database exposed. However, there are 710,000 PostgreSQL servers that are directly accessible from the internet—this is not recommended practice—and which could be susceptible to brute-force attacks.
Security Boulevard
If you’ve implemented, or are implementing, a DevSecOps program, we’ve come up with several questions to consider below. By posing these questions, we hope to help spur new ideas and help identify areas for improvement. We’re also hosting a webinar on implementing DevSecOps next Wednesday (3/21/18). While microservices have helped many organizations increase their development velocity and efficiency, they also make understanding data flows across an application more complex.
Microsoft Offers $250K Bounty for Meltdown-Like Bugs in CPUs
Microsoft has expanded its bug bounty programs to include monetary rewards for vulnerabilities that stem from speculative execution, a feature in modern processors that sits at the core of the Meltdown and Spectre vulnerabilities disclosed this year. Speculative execution is a performance mechanism based on various algorithms that allow CPUs to guess in advance the path programs will take when they reach conditional branches in their programming.
Security Boulevard
The rise of cloud computing has fundamentally changed the way network traffic flows within most organizations. Users in branch offices now typically access applications over public internet connections versus backhauling all network traffic through a secure data center.
Security Boulevard
Catalin Cimpanu writing at Bleepiing Computer tells the tale of the infamous single car problem within so-called smart intersections. The true nature of the flaws in the system may surprise you… Today’s Must Read. “In the US, the Department of Transportation (DOT) has started implementing a V2I system called Intelligent Traffic Signal System (I-SIG), already found on the streets of New York, Tampa (Florida), Cheyenne (Wyoming), Temple (Arizona), and Palo Alto (California).
Security Boulevard
Over the past few years, considerable attention has been given to the cybersecurity skills gap. In the post Enterprises Continue to Grapple with a Huge Cyber Security Skills Shortage we covered how the global cyber security workforce shortage is on pace to hit 1.8 million by 2022, a 20 percent increase since 2015, according to the Global Information Security Workforce Study. That study found 68 percent of workers in North America think the workforce gap is due to a lack of qualified personnel.
Security Boulevard
Home » Security Bloggers Network » CASP Domain 3: Research and Analysis CASP Domain 3: Research and Analysis Research and analysis makes up the third domain of CompTIA Advanced Security Practitioner (CASP, version CAS-002) exam objectives and contributes 18% to the overall exam. CASPs must learn the… Go on to the site to read the full article Related This is a Security Bloggers Network syndicated blog post authored by Chris Sienko. Read the original post at: InfoSec Resources
Security Boulevard
Fake news is running rampant across all media outlets. While you may not take them seriously, these untrue news stories are playing with your emotions and have serious security implications. With over half the world’s population online and using social media, news travels fast. And sometimes the wrong news gets spread. What happens when it’s by our most trusted news source? How are readers able to determine whether the information is true or not?
Security Boulevard
Home » Security Bloggers Network » Friday Squid Blogging: New Squid Species Discovered in Australia Friday Squid Blogging: New Squid Species Discovered in Australia A new species of pygmy squid was discovered in Western Australia. It’s pretty cute. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here. Related This is a Security Bloggers Network syndicated blog post authored by Bruce Schneier.
Security Boulevard
Home » Security Bloggers Network » CASP Domain 1: Enterprise Security CASP Domain 1: Enterprise Security Enterprise Security falls under the first domain of the CompTIA Advanced Security Practitioner (CASP) exam, version CAS-002, and contributes 30% to the overall percentage of the exam. Below is the… Go on to the site to read the full article Related This is a Security Bloggers Network syndicated blog post authored by Fakhar Imam. Read the original post at: InfoSec Resources
The Cost of GDPR Non-Compliance - Security Boulevard
General Data Protection Regulation (GDPR) requires additional steps that data processors and data controllers must take to protect personal data, and disclose any data security breach to the public, GDPR regulators can impose large, monetary fines for those in non-compliance. Additional penalties that can occur may not be monetary, but can carry a large consequence.
Cloud Security This Week – March 16, 2018 - Security Boulevard
Evident.io + Palo Alto Networks – Bolsters Palo Alto’s Comprehensive Security Offering Joining forces with Palo Alto Networks Evident.io founder and CEO Tim Predergast explains why Evident.io and Palo Alto Networks will create the most comprehensive engine for enterprise cloud security and compliance on the market.
Security Boulevard
Startups are aggressively leveraging technology to help keep their operations streamlined and their costs low. So it shouldn’t come as a surprise that startups are taking advantage of web-based applications and the predictable low costs that come with these subscription-based products. As these SaaS applications flood a startup’s IT environment, one area that often interests them is the web application single sign-on (SSO) market.
Security Boulevard
For the first time on record, the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) publicly blamed Russia for attempting to hack U.S. energy infrastructure. On 15 March, DHS and FBI published a joint Technical Alert (TA) via the United States Computer Emergency Readiness Team (US-CERT). In it, officials say Russian government digital actors are targeting American energy organizations along with government entities and other critical infrastructure sectors.
Security Boulevard
Since early 2018, FireEye (including our FireEye as a Service (FaaS), Mandiant Consulting, and iSIGHT Intelligence teams) has been tracking an ongoing wave of intrusions targeting engineering and maritime entities, especially those connected to South China Sea issues. The campaign is linked to a group of suspected Chinese cyber espionage actors we have tracked since 2013, dubbed TEMP.Periscope. The group has also been reported as “Leviathan” by other security firms.
Security Boulevard
It was about 20 years ago that the Y2K problem had firms scrambling to fix the issue. At its core, it was a rather simple problem to fix. Firms just had to change a 2-digit year field to a 4-digit field. But the devil, as always, was in the details and firms struggled to understand how many applications they had, and where the date fields resided in their massive code base. Many Fortune 500 firms took 6-months or more just to get a listing of the applications that were potentially problematic.
Security Boulevard
Home » Cybersecurity » Events » BSides PDX, Robert Sell’s ‘Exploits in Wetware: Defcon SE CTF Experience . . .’ BSides PDX, Robert Sell’s ‘Exploits in Wetware: Defcon SE CTF Experience . . .’
Top 6 Quickest Ways to Draw a GDPR Fine
Recent surveys reveal businesses around the world don’t know if they’re compliant with the EU’s General Data Protection Regulation (GDPR), regardless of the fact that the deadline is less than two months away. If this continues, there will be no shortage of GDPR compliance violations and fines. If your organization would like to avoid being on the GDPR naughty list, you must avoid these six pitfalls.
Security Boulevard
Shaun Nichols, for The Register, reports on yet another tool for unlocking the iPhone: FYI: There’s a cop tool called GrayKey that force unlocks iPhones. Let’s hope it doesn’t fall into the wrong hands! The article summarizes on by Thomas Reed, for Malwarebytes: GrayKey iPhone unlocker poses serious security concerns. While the company does seem to be careful about to whom it sells the device, Thomas makes a number of disquieting points about the implications of this tool.
Security Boulevard
Home » Cybersecurity » SBN News » Russia behind attacks on US critical industries Russia behind attacks on US critical industries In July 2017, The New York Times reported that hackers had been infiltrating the networks of nuclear power stations and energy facilities in the US and elsewhere by targeting employees, such as control engineers.Hackers used man-in-the-middle attacks and emails with fake resumes in Microsoft Word that deployed malicious code to steal a user’s credentials and get...
Security Boulevard
Mac® management has been a difficult topic for IT admins for many years now. It’s not for a lack of trying, though. With 3 in 4 employees choosing Macs over Windows machines, the growing need for a pain-free Mac management solution is clear. Regardless, for years now admins have been stuck with IT management tools that have been largely slanted towards Microsoft® Windows®.
Security Boulevard
Although organizations of all sizes are targeted by cyber criminals, small and medium-sized businesses (SMBs) have turned into a preferred target. In fact, according to Aberdeen research, the risk of a single data breach is 63 percent higher for SMBs than it is for larger organizations with over 1,000 employees.
Security Boulevard
Home » Security Bloggers Network » CASP Domain 2: Risk Management and Incident Response CASP Domain 2: Risk Management and Incident Response Risk Management and Incident Response falls under the second domain of the CompTIA Advanced Security Practitioner (CASP, edition CAS-002) exam and contributes 20% to the exam objectives. Before… Go on to the site to read the full article Related This is a Security Bloggers Network syndicated blog post authored by Fakhar Imam.
Security Boulevard
Added to the AMD section of the Meltdown/Spectre resource page, which for administrative reasons has now been moved here.
Security Boulevard
This is a good article on the complicated story of hacker Marcus Hutchins. This is a Security Bloggers Network syndicated blog post authored by Bruce Schneier. Read the original post at: Schneier on Security
Security Boulevard
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Researchers have recently discovered a vulnerability that would allow anyone to remotely access thousands of gas stations from around the world.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Red
Contact Red, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack