Federal PKI Security Challenges: Are You Doing Enough to Protect Machine Identities? Scott Carter Thu, 08/30/2018 - 12:17 Modernizing technology efforts are forcing machines to take a more central role in agency operations and decision making from cloud workloads, virtualization, Fast IT & containerization, and mobility and IoT. With faster ... Read More

Venafi Study: Do Enterprises Struggle with Machine Identities? Scott Carter Wed, 08/29/2018 - 09:29 Venafi wanted to see how enterprises are facing machine identity protection challenges. We’re pleased to announce the results of "Securing The Enterprise With Machine Identity Protection, a June 2018 commissioned study conducted by Forrester Consulting on ... Read More

Researchers Discovered Vulnerabilities that Allow Attackers to Control Pacemakers Remotely Scott Carter Tue, 08/28/2018 - 10:55 As Medtronic’s software delivery network consists of proprietary cloud infrastructure, the researchers recognized it would have been illegal for them to break into that system and verify their vulnerabilities. They therefore mapped the system ... Read More

Blockchain Is Only as Secure as Your Private Keys Scott Carter Mon, 08/27/2018 - 19:48 A properly secured private key is known by the person sending or communicating the Bitcoin and the person receiving or hearing the Bitcoin. Because Bitcoin is not a centralized currency, which is the entire point ... Read More

Financial Impact of Cyber Attacks on Banking Sector as a Result of Poor SSH Key Management Scott Carter Thu, 08/23/2018 - 15:22 In accordance with Christine Lagarde, an IMF staff modeling exercise estimated that annual losses to financial institutions from cyber-attacks could reach up to $350 billion, eroding bank profits ... Read More

HTTP vs HTTPS: Will the World Follow Google? Scott Carter Mon, 08/20/2018 - 12:53 Why HTTPS? Data sent via the HTTPS protocol is encrypted to keep it secure from commercial and private hackers. It can't be modified or corrupted while in transit and it authenticates by proving that your users ... Read More

The Pains of Encryption Key Management: Why Manual Processes Are So Hard Scott Carter Thu, 08/16/2018 - 18:53 In its 2018 Global Encryption Trends Study, Thales along with Venafi and Geobridge sponsored Ponemon Institute to survey 5,252 IT and security professionals in 12 different countries about their organizations' encryption use ... Read More

The Internet of Things: Getting Smarter about Securing Smart Technologies Scott Carter Wed, 08/15/2018 - 19:13 Machine identities are not being secured in the same way as human identities online, resulting in a lack of encryption across networks, among other things. When two machines can talk without encryption, or are ... Read More

How to Check for Revoked Certificates Scott Carter Tue, 07/31/2018 - 12:33 Many methods exist for publishing and querying these lists but few of them are widely used. This is largely because the methods are slow, prone to failure or are just plain complicated to understand and implement. So, what ... Read More

HTTPS Should be Implemented Everywhere…Including on Static Websites Scott Carter Thu, 07/26/2018 - 08:16 It makes sense for banks and tech firms to enable HTTPS on dynamic websites that are built on top of databases containing important information. But many don’t see the point when it comes to static websites ... Read More