CyberWar RSA hack back Venafi

As the Cyber War Grows: Is It Time to Strike Back?

|
As the Cyber War Grows: Is It Time to Strike Back? Scott Carter Tue, 03/19/2019 - 20:23 Simply put, this is a very tense time for the cyber security industry. At this year’s RSA conference, Venafi wanted to see how security professionals are responding to cyber war threats and offensive ... Read More
63-bit certificate snafu

Google, Apple, GoDaddy Mis-issue Over 1 Million Faulty Certificates

|
Google, Apple, GoDaddy Mis-issue Over 1 Million Faulty Certificates Scott Carter Tue, 03/12/2019 - 18:30 The bottom line is that manual methods simply do not scale when you are forced to quickly replace larger numbers of certificates. Before you can revoke and reissue them, you need to find them. And ... Read More
Jing Xie, Venafi - Application Security Weekly #48

Video Interview: How Secure Are Your Code-Signing Certificates?

|
Video Interview: How Secure Are Your Code-Signing Certificates? Scott Carter Mon, 02/04/2019 - 19:53 Scott Carter It’s no secret that code-signing certificates are a valuable commodity on the dark web. Last year, researchers uncovered what they suspect are e-shops have been set up to sell Microsoft Authenticode certificates to anonymous ... Read More
compression side channel attack

What Are Compression Side Channel Attacks?

|
What Are Compression Side Channel Attacks? Scott Carter Fri, 02/01/2019 - 11:48 Compression side-channel attacks can be used to read some data by knowing only the size of the compressed data such as the CRIME, and BREACH attacks. To understand how compression side-channel attacks work, we must have a fair ... Read More
machine identity protection

An Interview with CISO Billy Spears: Making a Case for Machine Identity Protection

|
An Interview with CISO Billy Spears: Making a Case for Machine Identity Protection Scott Carter Mon, 01/28/2019 - 05:15 Robyn Weisman: What motivated you to invest in protecting machine identities? Did you experience any “Aha!” moment? Billy Spears: I didn’t have an “Aha!” moment per se. As the head of ... Read More
DNS hijack

U.S. Department of Homeland Security Issues Emergency Directive on DNS Hijacking Attacks

|
U.S. Department of Homeland Security Issues Emergency Directive on DNS Hijacking Attacks Scott Carter Wed, 01/23/2019 - 17:20 In the emergency directive, Krebs outlines in more detail how the DNS attacks are perpetrated: The attacker begins by compromising user credentials, or obtaining them through alternate means, of an account that ... Read More
government shutdown

Government Shutdown Impacts More than Security. It’s Taking a Toll on Federal Employees.

|
Government Shutdown Impacts More than Security. It’s Taking a Toll on Federal Employees. Scott Carter Wed, 01/23/2019 - 07:55 Notwithstanding these impacts, the shutdown has had an even more significant effect on the lives of those federal employees who aren’t allowed to go work or aren’t receiving timely payment for ... Read More
blackberry certificate system

BlackBerry Debuts Certificate System for AI-driven Cars

|
BlackBerry Debuts Certificate System for AI-driven Cars Scott Carter Thu, 12/27/2018 - 09:10 BMW have been testing their autonomous cars on the streets of Germany since 2005. Volkswagen has been testing their Temporary Auto Pilot system since 2012. Those vehicles aren’t fully autonomous, but can go into an AI-driven mode ... Read More
Machine Identity Protection

TCV Invests in Machine Identity Protection Provider Venafi – A Pioneer of a Vital New Category in Cybersecurity

|
TCV Invests in Machine Identity Protection Provider Venafi – A Pioneer of a Vital New Category in Cybersecurity Scott Carter Thu, 11/29/2018 - 18:25 At TCV, we’ve been watching the number of machines grow exponentially. It’s not just that IoT (Internet of Things) is connecting physical devices to the internet ... Read More
machine identity protection fund

Introducing the $12.5 Million Machine Identity Protection Development Fund

|
Introducing the $12.5 Million Machine Identity Protection Development Fund Scott Carter Thu, 11/29/2018 - 18:11 Venafi created the Fund to accelerate the integration of machine identity intelligence into a wide range of machines in the enterprise and further enhance and expand the machine identity ecosystem. The Fund will allow developers, ... Read More