CSO Salted Hash

Jan 25, 2018

Hackers lure victims with fake cryptocurrency SpriteCoin

Beware of the SpriteCoin double whammy: The fake cryptocurrency installs ransomware and more malware if the ransom is paid. Read More ▶

Your Must-Read Stories

•	What is penetration testing? Ethical hacking basics and requirements

•	Amazon Is Offering a $40-Off Deal On Its Echo Spot Devices

•	How bad are Meltdown and Spectre?

•	Amazon Go grocery store: No checkout lines, 'just grab and go'

•	Anatomy of a well-run red-team exercise

•	Salted Hash Ep 15: The state of security now and the not too distant future

White Paper: Logicworks

5 Steps for a Cost-Efficient Migration to AWS Cloud

If you're ready to take the next steps in planning your migration, find out how CloudHealth and Logicworks can help simplify the process of migrating assets from your data center to the AWS cloud. Logicworks' Migration Services, powered by CloudHealth, enable you to efficiently assess and model workloads for migration and then manage and optimize your infrastructure for cost, usage, performance, and security once they are running on the cloud. Read More ▶

What is penetration testing? Ethical hacking basics and requirements

Penetration testing, or ethical hacking, is an in-demand skill for evaluating an organization's defenses. Here's what it entails and tips for breaking into the role. Read More ▶

DealPost

Amazon Is Offering a $40-Off Deal On Its Echo Spot Devices

For the first time, Amazon has discounted its Echo Spot device by $40 when you buy a pair of them. Read More ▶

How bad are Meltdown and Spectre?

Some people aren't taking hardware vulnerabilities like Meltdown and Spectre seriously. Here's a point-by-point rebuttal to their arguments. Read More ▶

Amazon Go grocery store: No checkout lines, 'just grab and go'

Amazon opened its first high-tech grocery store in Seattle. With no human or self-service checkouts, cameras and sensors track what you take off the shelves. Read More ▶

Anatomy of a well-run red-team exercise

Red team exercises – and particularly "assume compromise" or "assume breach" exercises – generally provide the most insight into your blue-team's readiness to face an attack. Read More ▶

Salted Hash Ep 15: The state of security now and the not too distant future

This week, Salted Hash is joined by Rob Lee, faculty fellow at the SANS Technology Institute, to talk about preventable IT security and the state of the industry as 2018 gets underway. Read More ▶

Video/Webcast: Logicworks

How Partylite Migrated to AWS in 30 Days with Logicworks

In this webinar, AWS, Logicworks, & Partylite, an international party planning company, discuss the launch of Partylite's PCI DSS compliant, 1000+ VM workloads on AWS in just 30 days. Logicworks takes a software-focused approach to their managed services model by leveraging a combination of AWS tools such as CloudFormation & CloudTrail with a proprietary automation framework to help you quickly design & deploy a dynamic cloud environment. Read More ▶

CSO Insider

1.	Top security certifications: Who they're for, what they cost, and which you need
2.	How to jumpstart your infosec career
3.	For strong API security, you need a program not a piecemeal approach
4.	Security platform or best of breed? There's only one answer
5.	Keeping pace with security automation

Editor's Picks

1.	What is SSL/TLS? (And why it's time to upgrade to TLS 1.3)
2.	Meltdown and Spectre patches: Where to start and what to expect
3.	The dirty dozen: 12 top cloud security threats for 2018
4.	Best Android antivirus? The top 10 tools
5.	The 6 best password managers