News
  • "Around 18,000 Fraudulent Sites Are Created Daily"

    Researchers at Bolster have discovered that in Q2 of 2020, there was an alarming, rapid increase of new phishing and fraudulent sites being created.  The researchers detected 1.7 million phishing and scam websites, which is a 13.3% increase from Q1…

  • "Security Researchers Sound Alarm on Smart Doorbells"

    Researchers from the security company NCC Group and the UK consumer organization Which? analyzed 11 video doorbells sold on Amazon and eBay and discovered high-risk vulnerabilities in all of the devices. One of the vulnerabilities shared among them was…

  • "Organizations Should Use Psychology to Promote Secure Behavior Among Staff"

    The Information Security Forum (ISF) encourages organizations to improve employees' security behavior through the use of psychology. The group's report titled Human-Centered Security: Positively Influencing Security Behavior guides organizations on the…

  • "Baidu Apps in Google Play Leak Sensitive Data"

    Researchers at Palo Alto Unit 42 discovered that multiple Android mobile apps found in Google Play, including Baidu Search Box and Baidu Maps, leak data that could be used to track users, even if they switch devices. The apps in question expose a range…

  • SoS Musings #43 - Crowdsourcing Security with Bug Bounty Programs

    SoS Musings #43 - Crowdsourcing Security with Bug Bounty Programs  

  • Cybersecurity Snapshots #12 - Open Source Code: Is It Secure?

    Cybersecurity Snapshots #12 - Open Source Code: Is It Secure?  

  • Cyber Scene #50 - The Post-Election Cyber World

    Cyber Scene #50 - The Post-Election Cyber World  

  • CMU launches new privacy engineering options

    CMU launches new privacy engineering options Two new options make it easier for working professionals to receive privacy engineering training Daniel Tkacik NOV 23, 2020 As new privacy regulations like the General Data Protection Regulation and the…

  • Automated Security

    Automated Security

  • Pub Crawl #44

    ​Pub Crawl summarizes, by hard problems, sets of publications that have been peer reviewed and presented at SoS conferences or referenced in current work. The topics are chosen for their usefulness for current researchers.

  • "Good Heavens! 10M Impacted in Pray.com Data Exposure"

    Researchers at vpnMenotor found several open, publicly accessible cloud databases (Amazon Web Service S3 Buckets) belonging to Pray.com.  Pray.com is an application that has been downloaded by more than 1 million people on Google Play and ranks as…

  • "Cyber Criminals Leveraging AI to Carry Out Malicious Attacks, Warns Europol"

    A new report from Europol, the United Nations Interregional Crime and Justice Research Institute (UNICRI), and Trend Micro, brings further attention to cybercriminals' use of Artificial Intelligence (AI) in their attacks. AI-as-a-Service (AIaaS) will…