CSO Salted Hash

May 15, 2018

A quick tour of the Dark Web

The Dark Web has an interesting persona, and much of it is fueled by hype. This week on Salted Hash we speak to Alon Arvatz, co-founder at IntSights, who gives us a basic overview of some of the things people do in this somewhat hidden environment. Read More ▶

Your Must-Read Stories

•	Theft of North Korean secrets may have pushed Kim Jong Un into talks

•	Get a 299-Piece All-Purpose First Aid Kit For $12 Today

•	What's new in Windows 10 security features: The privacy edition

•	Researchers warn PGP and S/MIME users of serious vulnerabilities

•	2018 – the year of the targeted attack?

•	Katie Moussouris: It's dangerous to conflate bug bounties and vulnerability disclosure

eBook: RiskSense, Inc

7 Experts on Threat and Vulnerability Management

Download our eBook to learn valuable lessons from cyber risk experts who actively face challenges in threat and vulnerability management. Discover how to foster collaboration between security and IT ops to prioritize remediation, and apply next-generation tools. Read More ▶

Theft of North Korean secrets may have pushed Kim Jong Un into talks

The ultimate insider has made off with North Korea's cyber intelligence, counterintelligence and nuclear secrets, causing people to think that's why Kim Jong Un met with South Korea's leader. Read More ▶

DealPost

Get a 299-Piece All-Purpose First Aid Kit For $12 Today

The highly rated kit includes a first aid guide, vinyl gloves, bandages, cold compress, gauze pads, trauma pad, cotton-tipped applicators, first aid tape roll, antiseptics and all three common OTC pain medications. Neatly organized in a soft zippered pouch. Read More ▶

What's new in Windows 10 security features: The privacy edition

Here's what you need to know about each security update to Windows 10 as they roll out from Microsoft. Now updated for the 1803 feature release. Read More ▶

Researchers warn PGP and S/MIME users of serious vulnerabilities

A professor at Münster University issued a warning on Sunday about serious vulnerabilities in PGP and S/MIME – two widely-used methods for encrypting email – which, if exploited, could reveal plain text communications. The issue also impacts emails from the past. Read More ▶

2018 – the year of the targeted attack?

There is a definite increase in sophisticated bad actor groups focusing on specific, high value targets. Read More ▶

Katie Moussouris: It's dangerous to conflate bug bounties and vulnerability disclosure

"There are two extremes right now: no idea where to start or do a bug bounty," says Moussouris, who built Microsoft's vulnerability disclosure program. Read More ▶

White Paper: Comodo

Beware: phishing attacks using SSL are on the rise

With the decrease in cost of SSL certificates, there has been an increase in the number of phishing websites using SSL certificates. The different levels of SSL certificates (DV, OV, EV) each provide unique visual identifiers and levels of trust. Learn more about the steps that companies can take to ensure their customers are protected, and the methods that are used across the industry. Read More ▶

CSO Insider

1.	Evaluating patch management software: 6 key considerations
2.	Review: Protecting clouds with Cloud Defender from Alert Logic
3.	How safe are your passwords? Real life rules for businesses to live by
4.	Credit card fraud: What you need to know now
5.	What's new in ransomware?

Editor's Picks

1.	Online voting is impossible to secure. So why are some governments using it?
2.	Why securing containers and microservices is a challenge
3.	RSA roundup: 5 security vendors CISOs need to be aware of
4.	Data and privacy breach notification plans: What you need to know
5.	How lean development improved software security at Fannie Mae