Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Tim Woods
White Metallic Nike Shox R4 2024 Release
Prepare to step into the future of footwear fashion as Nike unveils its latest edition: the Nike Women’s Shox R4 ‘White Metallic’ edition. With a blend of cutting-edge technology and futuristic design, this release promises to captivate sneaker enthusiasts worldwide. Let’s explore the details of this highly anticipated drop while also tracing the rich history of the Nike Shox R4.
Jonathan Schechter
Jonathan Schechter Lives: Indian Trails subdivision (the wild western edge of town) Years in Jackson: 35 Occupation, and how it has prepared you to be a town councilor: I am a Jackson town councilor. I am also founder and executive director of the Charture Institute, a nonprofit think tank helping communities and ecosystems simultaneously thrive.
2021 Predictions: Holistic, Centralized, Software-Defined, and Automated Security that is Everywhere
The year that has been 2020 has been a cornucopia for cybercriminals who have been able to feast off an extended attack surface, a weakened edge, and networks under enormous strain. If this was the Hunger Games, it could be argued that these criminals are currently running with the advantage. Still, the truth is that 2020 has jolted a security reality that will have longstanding consequences in 2021 and beyond.
Town Council: 4 candidates, vote for 2
There are four candidates running for two seats on the Jackson Town Council. Read more about them and their positions here. You can vote for two candidates. Early voting is open now. — Billy Arnold Jessica Sell Chambers COURTESY PHOTO JESSICA SELL CHAMBERS Occupation: Political/educational consultant Years living in Jackson: 11 Age: 39 Lives in: Karns Meadow area Why are you running for Jackson Town Council? Talking to thousands of voters fuels me to run.
Early closures asked, mask order extended
Teton District Health Officer Dr. Travis Riddell on Wednesday afternoon issued a recommendation that restaurants and bars close at 10 p.m. in an effort to discourage crowding and the resultant community spread of coronavirus. The recommendation comes on the heels of a spike in COVID-19 cases in the county, which had 134 positive cases between July 14 and July 27.
Australia’s Catastrophic Wildfires are Unprecedented
Share Australia’s current forest fires are unprecedented in several respects: They are unparalleled in scale and extent, ferocity and behaviour, damage and devastation without doubt. These fires are also unprecedented in part because their likelihood was predicted, and the extent of their impact was inevitable. Australia is in the midst of a deep drought, with much of the nation at its driest on record. Moreover, 2019 was the hottest year on record in Australia.
GDPR, one year on: an impact on incident response
Without a pre-defined incident response plan in place, meeting GDPR's requirement for reporting a breach within 72-hours is impossible. Weeks, months, or even years might be a more accurate timeframe.
DevSecOps Enables Security to Finally Move at the Speed of the Business
Until recently, security was a "bolt-on" or an afterthought -- if a thought at all -- in the DevOps process. It's easy to understand why. Application development has dramatically improved in speed and quality through the adoption of DevOps, agile development and continuous deployment initiatives, while security still relies on manual processes that just can't keep up with the pace of deployment and change.
Three ways GDPR benefits US companies
It’s hard to believe we’ve almost reached the one-year anniversary of the date the General Data Protection Regulation (GDPR) went into effect. Leading up to that May 25, 2018 date, news headlines were dominated by fear, uncertainty and doubt over whether organizations would successfully comply in time. Over the past year, we saw an endless stream of stories about companies getting slapped with fines for violating various regulations within GDPR.
Why securing info in the cloud loomed large at RSA 2019
As I traveled home looking back on a very productive week at the 2019 edition of the RSA Conference, I’m already wondering what next year will hold. But there's plenty to consider about what was presented at this year's show in San Francisco. Let’s shift gears and take a look at the themes I saw this year as I engaged in great conversations and listened to what others had to say. First off, there was no denying that people continue to be concerned about the cloud.
Lessons from RSA 2019: The year of man/machine symbiosis
As I traveled home looking back on a very productive week at RSA, I’m already wondering what next year will hold. It’s easy to see how some folks might feel a bit overwhelmed at a conference like RSA… the show reconfirms what I said last year: “There is no shortage of technology!” The best advice I can offer new attendees is to create a “show plan” in advance, and then work your plan.
How does innovation management help in digital transformation?
The power of digital disruption is so immense that it now sits on the top priority list for almost every executive. Whether the threat comes from new digital natives entering the market, traditional competitors upping their digital quotient, or other markets using a digital channel to launch a competitive offering. On the flip side, as GE is demonstrating, the opportunity for growth is equally immense.
Managing Firewalls in the Cloud: do Companies Know Enough about Security Intent?
How businesses are building firewalls is changing. We’re seeing a continued trend toward smaller firewall boundaries and micro-segmentation to support zero-trust strategies, although it can be very piecemeal. As businesses think less about centralized firewalls, and more about cloud, they are “dipping their toes” into cloudy waters that can easily cause configuration problems.
With cloud security, the enemy is in the mirror
You can register for free here, for unlimited access to SC Magazine UK.
Remote Code Execution
Erlang is a programming language that I have tried to learn a few times in the past but never really dug in, that is, until recently. Erlange is an interesting language because it has “built-in concurrency, distribution, and fault tolerence”. To me, this means that it does job queing and distributed tasks right out of the gate. I first started digging into Erlang again from an attackers point of view at BSides Philadelphia 2016, where I talked about SolarWinds ORION.
Security Boulevard
There are some inherent risks associated with using any online service, but nowhere are the stakes higher than in the world of Internet banking. Make a simple security slip up and there’s a chance that the wrong person could get their hands on your login details – or worse, your transaction authentication number (TAN) – and potentially empty your account from anywhere in the world.
Security Boulevard
In March 2018, the city of Atlanta fell victim to a ransomware attack that shut down its computer network. City agencies were unable to collect payment. Police departments had to handwrite reports. Years of data disappeared. The attack also brought cybersecurity to the local level. It’s easy to think of it as a problem the federal government must address or something that enterprises deal with, but cybersecurity has to be addressed closer to home, as well.
Security Boulevard
Synopsys is well-known for our software integrity portfolio: integrated testing tools, managed services, professional services, and developer education. But products, services, and training aren’t all we offer. We also perform hundreds of Black Duck On-Demand open source audits every year. And all that audit data fuels the open source security research and vulnerability analysis we perform through our Center of Open Source Research & Innovation (COSRI).
Security Boulevard
Memory-based, fileless, or living-off-the-land attacks were one of the most prevalent types of attacks in 2017 and are only growing. But how do they happen and why are they on the rise? The short answer is that they work because they are less detectable by traditional and many ‘next gen’ antivirus solutions. For example, Word documents are often used because the file itself is not considered malware.
Security Boulevard
“Practice what you preach” was clearly not a part of the Swiss-based Veeam’s policy as someone left almost 200GB of data available to anyone online. The unsecured MongoDB server was open from August 31st, 2018 to September 9th, 2018. The leak was discovered after an investigation by Bob Diachenko and TechCrunch who found 445 million Marketo-based records sitting unguarded.
Security Boulevard
VMworld 2018 started off with a lot of fanfare. VMware CEO Pat Gelsinger kicked the conference off with some mind-boggling statistics: With more than 7,500 customers, VMware NSX has achieved a substantial market leadership position in the software-defined network category – ten times larger than its closest customer.
Security Boulevard
By now, you should be familiar with that sudden bout of uncertainty as you are gearing up to install a new application. How do you check if an Android app is safe to install? Does it have a virus? What does a malware app even look like? If you have ever felt threatened at the prospect of installing a fake app masquerading as a fan-favorite, then this guide is for you. From malware to overheating and more, smartphones today suffer from the same issues PCs do.
Security Boulevard
In July 2018, FireEye devices detected and blocked what appears to be APT10 (Menupass) activity targeting the Japanese media sector. APT10 is a Chinese cyber espionage group that FireEye has tracked since 2009, and they have a history of targeting Japanese entities. In this campaign, the group sent spear phishing emails containing malicious documents that led to the installation of the UPPERCUT backdoor.
Security Boulevard
We’ve been in the application security business for more than 10 years, and we’ve learned a lot in that time about what works, and what doesn’t. This is the fifth in a blog series that takes a look at some of the most common mistakes we see that lead to failed AppSec initiatives. Use our experience to make sure you avoid these mistakes and set yourself up for application security success. Application security is about more than tools and technology. It is just as much, if not more so, about people.
MY TAKE: Here’s how diversity can strengthen cybersecurity — at many levels - Security Boulevard
Of the many cybersecurity executives I’ve interviewed, Keenan Skelly’s career path may be the most distinctive. Skelly started out as a U.S. Army Explosive Ordnance Disposal (EOD) Technician. “I was on the EOD team that was actually assigned to the White House during 9/11, so I got to see our national response framework from a very high level,” she says. Today, Skelly is Vice President of Global Partnerships and Security Evangelist at Circadence®, a distinctive security vendor, in its own right.
Security Boulevard
It shouldn’t come as a surprise to anyone reading this article that there has been a major shift towards businesses hosting their critical applications in the cloud. Software-as-a-Service (SaaS), as well as cloud-based servers from Amazon or Microsoft, have changed the way we build networked business systems for any size organization. Cloud-hosted solutions can (but not always) simplify local management, save money, provide flexibility, and generally simplify the planning for a system life cycle.
Security Boulevard
Bolting on security after the fact. It’s been a common approach to software security for decades. We architect, build code, deploy it and then figure out how to secure it. From the parade of application-related breaches and data thefts over the last few years, we pretty much know this approach does not work. Fortunately, the evolution of continuous deployment and DevOps, when coupled with the use of containers, offers great potential to improve application security.
Security Boulevard
You’d think that life would be pretty hard for threat actors these days, given the plethora of security companies out there feeding insatiable, ever-growing blacklists of malware that track millions upon millions of payload fingerprints. You’d think getting malware past antivirus products would be a Herculean task, requiring the development of new, never before seen custom malware. If you thought either of those things, you’d be wrong.
Security Boulevard
The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device.
Data breach — 380,000 British Airways transactions compromised | Avast - Security Boulevard
Continuing the seemingly unending parade of data breaches marching through the headlines over the past year, including the Reddit breach, the Atlas Quantum breach, the Huazhu hotel chain breach, and the Air Canada breach — and those were all just in August — a targeted attack on British Airways made off with the full payment info of 380,000 transactions.
Security Boulevard
I was chatting with some cyber-mates at a recent event and the topic of cyber attacks on the U.S. power-grid came up (as it often does these days).
Security Boulevard
As part of our continued efforts to tackle entire classes of threats, Office 365 client applications now integrate with Antimalware Scan Interface (AMSI), enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior. Macro-based threats have always been a prevalent entry point for malware, but we have observed a resurgence in recent years.
Security Boulevard
Managed security services provide a great way to deliver the protection that today’s small and medium businesses (SMBs) require while providing an opportunity to differentiate and grow your business through new revenue and services. Done right, managed security services can be a valuable extension to your existing service portfolio and provide a cost-effective and efficient way to provide security solutions suitable for SMB budgets.
Security Boulevard
You’ve seen that movie, the one where humans fabricate robots that are so human-like they end up taking over the world. What was once the plot line for every other sci-fi film is now leaking into the reality of our everyday lives. The future of artificial intelligence isn’t so distant with voice-powered personal assistants like Siri and Alexa, and autonomously-powered self-driving vehicles already on the market.
Security Boulevard
Another VMworld has come and gone, but the latest one was distinctly different from its predecessors—and I’m not talking about the presence of “The Mountain” from “Game of Thrones” in the Druva booth. I’m talking about security finally taking its rightful place alongside the “speed, agility, flexibility” messages that typically surround the show. The prevailing theme communicated to the 20,000-plus show attendees was enabling digital transformation through the adoption of cloud and hybrid cloud.
The State of the Firewall: 2018
For the 2018 “State Of The Firewall” report (the fifth annual), we surveyed 300+ security professionals and executives on the state of their operations around firewall deployment, change management approaches, and perceived future challenges. As the full report is released, we wanted to break the findings into two blog posts -- one (this one) will focus on 35,000-foot view takeaways and key numbers.
5 Ways to Reduce Your Attack Surface
In the simplest terms, the “attack surface” is the sum total of resources exposed to exploit within your enterprise. Defending the attack surface was a lot less complicated when a defined corporate “perimeter” existed, neatly separating a company’s assets from the outside world. But, next-gen technologies (e.g., cloud computing and software-defined networking) have dissolved the perimeter, causing the attack surface to grow exponentially.
Rules automation puts the "Sec" in DevSecOps
Imagine if safety were an afterthought in automobiles: Manufacturers would create a pristine new car and then hand it off to the safety team…which would bolt airbags onto the dashboard, seatbelts onto the side panels, and bumpers onto both ends.
Zero Trust: Method or Madness?
First coined as a concept by Forrester Research in 2010, Zero Trust security commands intense interest from IT and security executives everywhere. While there are many piecemeal Zero Trust implementations in enterprises today, there has yet to emerge a single solution that will deliver the world to a halcyon state of Zero Trust, where all attackers are pacified, all resources are impenetrable, and users never do absurd things.
The Time for Intent-Based Security is Here
Sign Up Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources that will keep you current and informed.
Security spring cleaning: Tidying up messy firewall rules to reduce complexity
Most security teams are waging a daily battle against complex IT infrastructures, advanced malware and a severe skills shortage – a trifecta that has forced them to tackle select “priorities,” while letting other important initiatives fall by the wayside. One such task that usually falls to the bottom of the security “to-do” list is firewall rule cleanup.
Countdown to GDPR - No need to panic; you’re already a pro
We’ve been hearing about the General Data Protection Regulation and its impending May 25 compliance deadline for months now, and most of the discussions have provoked fear, uncertainty and doubt (FUD) around the new data protection law. It’s easy to see why many organizations are panicking; the GDPR imposes the most serious financial consequences of any privacy law to date (the most severe infringements will cost 20 million EUR or four percent of global revenue, whichever is greater).
Just when you thought the Tory media's coverage of Corbyn could sink no lower, they've gone and outdone themselves | The Canary
The pro-Tory press have once again used any excuse to discredit Jeremy Corbyn. This time, in response to his very reasonable statement on the current crisis in Venezuela. But by doing so, they’ve only exposed their own uselessness. Asked about Venezuela’s crisis, the Labour leader said: Corbyn’s response comes in stark contrast to that of the international corporate media, which has preferred to suggest that the government of President Nicolás Maduro is responsible for all or most of the violence.
Crimes against democracy - The Hill Times
PUBLISHED : Monday, March 6, 2017 12:00 AMIf you are already a subscriber Subscribe to The Hill TimesSubscribe to the digital and/or print editions and get instant access to The Hill Times online.
Tim Woods - The Hill Times - The Hill Times
Tim Woods worked on Parliament Hill as a House leader’s assistant and press secretary to NDP Leader Ed Broadbent. He is based in Victoria and is a partner of the Deliberation Network. He holds a certificate in dialogue and deliberation from the Fielding Graduate University in California.
Peter Thiel’s 7 Questions for Product Innovation
In his book Zero to One, Peter Thiel looks at why the cleantech industry crashed, and believes that most cleantech companies failed to adequately answer one or more of seven fundamental questions about their business. Although these questions are primarily for businesses as a whole - and in particular technology startups - they are equally applicable for new product innovations. It’s worth asking if your pipeline of innovations can adequately respond to them.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Tim
Contact Tim, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack