skip navigation

More signal. Less noise.

Daily briefing.

Threat analysts continue to track Russian-linked APT28 group and the Pawn Storm campaign.

Columbia University researchers demonstrate an "insidious" browser exploit.

Trend Micro reports finding fileless malware — Phasebot — active in the wild.

The Magneto payment platform (used by eBay) is patched, but unpatched sites remain at risk of exposing users to remote-code execution.

A Bloomberg outage affecting terminal availability for two hours Friday was not, Bloomberg says, due to hacking. It was, rather, a costly "combination of hardware and software failures" that delayed time-sensitive trading. Compare this incident with reviews of airliner vulnerabilities and the risk of cyber failure in offshore oil production, and consider the convergence of safety and security increased automation drives.

Reports suggest that Microsoft is "quietly" rolling out a revision to one of last Tuesday's patches.

In industry news, Raytheon will use its acquisition of Websense to form a cyber security joint venture Vista Equity Partners. It appears that the joint venture will target the civilian cyber market to the relative exclusion of Raytheon's traditional Defense customers.

Synopsys has announced its acquisition of Codenomicon (generally credited as co-discoverer of Heartbleed).

In the US, the Securities and Exchange Commission (SEC) discusses its emerging cyber security audit standards. The National Association of Insurance Commissioners issues standards for the insurance sector.

NSA Director Rogers unsurprisingly asserts that the laws of war apply in cyberspace, too. (One imagines laws that codify proportionality and discrimination will be most immediately applicable.)

Cyber security legislation continues its slow progress through the US Congress.

Notes.

Today's issue includes events affecting Bahrain, China, Ethiopia, Iran, Russia, Turkey, United States.

Dateline RSA

RSAC 2015: RSA Conference (Day 1) (Salted Hash) Today marks the start of the RSA Conference here in San Francisco, where Salted Hash will be providing ongoing coverage all week long

It's boom times for hackers as cyber sleuths gather (USA TODAY) Don't be surprised to get news of more cyber breaches and hacks this week

Hot Sessions at RSA 2015 (BankInfoSecurity) Threat intelligence, crypto among topics at must-see sessions

Computer-Security Industry Critiques Itself Following High-Profile Breaches (Wall Street Journal) As companies gather for RSA Conference this week, industry failures are in the spotlight

RSA® Conference 2015 Opens Today in San Francisco (BusinessWire) World's largest information security event frames industry discussion for 2015

Waratek Wins RSA Innovation Sandbox (Dark Reading) RSA: 10th annual event honors runtime application self protection solution for solving Java security problems

Contest Challenges Users to Bring Their Own Malware to RSA (eWeek) Security firm SentinelOne challenges RSA conference-goers to bring malware that will bypass the company's detection technology

Fortscale Delivers Visibility to User Activity in Proprietary Business-Critical Applications (BusinessWire) Company to showcase its user behavior analytics solution at RSA

ManageEngine Adds Security Device Configuration Management to EventLog Analyzer (ManageEngine) ManageEngine, the real-time IT management company, today announced the Firewall Analyzer add-on for EventLog Analyzer, the company's log analysis solution. The new add-on enhances EventLog Analyzer with multi-vendor security device and configuration management features to help IT security administrators monitor and analyze security incidents better. Admins can now seal security loopholes due to firewall misconfigurations, monitor network traffic and bandwidth usage, and propagate and analyze security incidents from log sources across the network - all from a single, central console

A10 Networks Works with RSA Security to Provide Enhanced Interoperable Threat Protection Capabilities (CNN Money) A10 Networks (NYSE: ATEN), a technology leader in application networking, announced today that it has collaborated with RSA, The Security Division of EMC, to help increase security capabilities for joint customers

Fox-IT launches cyberthreat management platform (Help Net Security) Fox-IT launched at RSA Conference 2015 in San Francisco its Cyberthreat Management Platform, a suite of solutions, integration tools and expert services designed to provide unified, overarching control of an organization's entire cyberthreat management operations

This machine catches stingrays: Pwnie Express demos cellular threat detector (Ars Technica) An exclusive first look at Pwnie's new tool for catching cellular network attacks

Cavium to Showcase Secure Cloud Data Center and Telco Infrastructure Solutions at the RSA Conference 2015 (CNN Money) Demonstrations include High Performance Security Modules (HSMs) and Secure Data Center Servers

Cavium Announces Collaboration with A10 Networks for LiquidSecurity™ Hardware Security Module Family (PRNewswire) Cavium, Inc. (NASDAQ: CAVM), a leading provider of products that enable secure and intelligent processing for enterprise, data center, wired and wireless networking, today announced a collaboration with A10 Networks for its LiquidSecurity™ Hardware Security Module (HSM) family for next generation transaction security for cloud applications. This partnership enables seamless integration of the LiquidSecurity HSM family with the A10 Thunder™ ADC product line of application delivery controllers

Cyber Attacks, Threats, and Vulnerabilities

Russian APT group actively exploiting Flash, Windows 0-day flaws (Help Net Security) APT28, believed to consist of Russian hackers, has been spotted wielding two zero-day exploits in the latest targeted attack aimed at an "international government entity in an industry vertical that aligns with known APT28 targeting"

Operation Pawn Storm on Continued Marathon, Attacking Targets Now with Advance Infrastructure (Security Affairs) Operation Pawn Storm allegedly run by hackers backed by the Russian Government still advancing their infrastructure a great deal, the group is believed to using advanced tactics to hit the targets

New Browser Hack Can Spy On Eight Out Of Ten PCs (Forbes) A group of Columbia University security researchers have uncovered a new and insidious way for a hacker to spy on a computer, Web app or virtual machine running in the cloud without being detected. Any computer running a late-model Intel microprocessor and a Web browser using HTML5 (i.e., 80% of all PCs in the world) is vulnerable to this attack

New fileless malware found in the wild (Help Net Security) Since the discovery of the Poweliks fileless Trojan in August 2014, researchers have been expecting other similar malware to pop up

Software flaw puts thousands of Magento sites at risk (ComputerWeekly) Online retailers that use eBay's e-commerce platform have been warned of a vulnerability that could enable hackers to steal credit card and customer details

Bloomberg rules out cyber attack after crash (IT Pro) A £3 billion auction of UK government debt was delayed

Just how hackable is your plane? (Washington Post) Chris Roberts knows a lot about hacking planes. But not because he's trying to make them fall out of the sky. In fact, his job as a security researcher is to figure out how bad guys could hack computer systems so that companies can fix them

A professional hacker explains how he dupes people into clicking on malicious links (Business Insider) When it comes to finding security holes in a company's information system, professional penetration testers start with what is often the company's biggest and clearest vulnerability

Minecraft learns the hard way: It's not good to ignore vulnerability reports (Lumension Blog) If a security researcher finds a vulnerability in your software, please don't ignore them

Bulletin (SB15-110) Vulnerability Summary for the Week of April 13, 2015 (US-CERT) The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information

Security Patches, Mitigations, and Software Updates

Remote Code Execution Hole Patched in Magneto eCommerce Platform (Threatpost) A nasty remote code execution vulnerability was recently patched in eBay's eCommerce platform Magento. The hole, disclosed Monday, could put upwards to 200,000 company's web stores, and their customers' information at risk of being compromised

Apple failed to fix Rootpipe security flaw in OS X 10.10.3, claims researcher (Graham Cluley) Bad news Mac users — even if you have kept your operating system up-to-date, it looks like your computer is still vulnerable to the Rootpipe flaw

Patch Tuesday: Microsoft Quietly Releases Fixed KB2553428? (WindowsITPro) Just a heads-up for those dealing with KB2553428. Reports are rolling in today that Microsoft may have supplied an updated version of KB2553428, a security update for Word 2010 that delivered during this month's Patch Tuesday

Microsoft preps PCs for Windows 10 with more auto updates (Computerworld) 'Don't think you can skip' these latest Windows Update updates, Microsoft manager tells skittish users

Valve tries to curb Steam scam accounts with new rule (Help Net Security) Gaming corporation Valve is trying to make spammers' and phishers' lives more difficult and, consequently, their own users' gaming experience more pleasant and safer by limiting the things account owners can do until they have spent a set amount of money

D-Link router user? Keep your ears and eyes open for the next firmware fixes! (Naked Security) If you're a D-Link router user, keep your eyes and ears open for the next round of firmware fixes

Cyber Trends

Next Deepwater Horizon-scale oil spill could be caused by cyber attack (Reuters) April 20th marks the fifth anniversary of the landmark Deepwater Horizon disaster that saw millions of gallons of crude oil leak into the Gulf of Mexico

Booz Allen Sees 'Active Cyber Defense' Trend Amid IoT Tech (ExecutiveBiz) Booz Allen Hamilton has indicated that companies are looking into active cyber defense capabilities and intelligence-driven technologies to counter future threats in the Internet of Things

Retail Breaches Now Cause 59 Percent of ID Exposures (PYMNTS) The year 2014 saw far-reaching vulnerabilities, faster attacks when those security holes became public, files held for ransom and far more malware than ever before — and retailers were among the hardest hit, according to Symantec's "2015 Internet Security Threat Report"

Six of 10 Health Data Breaches Due to 'Criminal Activity' (Medpage Today) Most records are compromised by theft, rather than computer system hacking

Marketplace

Warning: Cyberinsurance Policies Have Their Own Vulnerabilities (American Banker) Cyberinsurance policies are in hot demand thanks to the increasing sophistication of hackers, the mounting toll on executives and directors and regulators' dwindling patience

Raytheon Revs Up Growth With Bold Websense Cyber Venture (Forbes) Raytheon RTN -0.21% disclosed early Monday that it is acquiring cybersecurity firm Websense and will form a joint venture with Vista Equity Partners to greatly expand the defense company's global cyber offerings. The new venture, in which Massachusetts-based Raytheon will hold an 80% stake, would subsume its cyber-products business and the much larger Websense network-security enterprise that Vista took private in 2013. Company executives say the move will accelerate Raytheon's efforts to offer "defense-grade" cyber solutions to civil and commercial customers while generating growth rates and margins superior to those prevailing in its military hardware markets

What Raytheon's nearly $2 billion cyber play means to its defense business (Washington Business Journal) Raytheon Co.'s decision to make a $1.7 billion equity investment to stand up a cyber products company may be the boldest move made by any defense contractor to tap commercial opportunities. And it will mostly be at the exclusion of Pentagon business

Raytheon acquisition shows how hot cybersecurity is (USA TODAY) As this week's big RSA cybersecurity conference kicks off in San Francisco, companies are making announcements about moves in the increasingly crucial security arena

Synopsys to Acquire Software Security Company Codenomicon (PRNewswire) Acquisition of company that independently discovered Heartbleed bug will extend Coverity quality and security platform

Tanium Cybersecurity: How A Little-Known Startup Is Defending Corporate America From Hackers (International Business Times) Cybersecurity specialist Tanium is trying to redefine its trade by using a peer-to-peer system that shows the security status of every device on a corporate network — even phones — in real time

FireEye: A Leader In The Cybersecurity Industry (Seeking Alpha) FireEye is at the forefront of the immensely promising cybersecurity industry, which is becoming an increasingly vital sector in modern society. FireEye's proactive approach has made it one of the most effective cybersecurity firms. FireEye has an extremely innovative business model that covers a wide range of products/services. Despite FireEye's strong positioning within the cybersecurity industry, the company is still not completely immune from the fast-evolving nature of the cyber landscape

Israel's Check Point Software steps up expansion plans (Reuters) Network security provider Check Point Software Technologies (CHKP.O) plans to sharpen its focus on threat-prevention and mobile security, it said on Monday after posting better than expected first-quarter profit

This cybersecurity firm is moving to Natty Boh Tower (Technical.ly Baltimore) Contrast Security is opening an office in Canton

Feds struggle to recruit, keep cybersecurity talent, report says (Washington Post via Columbus Dispatch) Rigid hiring processes and low pay for specialized employees have kept the U.S. government from developing the type of cyber workforce it needs to keep up with growing attacks, according to an independent analysis

NERC Names Verizon's Marcus Sachs Chief Security Officer (Wall Street Journal) The North American Electric Reliability Corp., the non-profit organization that acts as a watchdog and standards-bearer for North America's power grid, has named Marcus Sachs as its new chief security officer. He starts May 4

Lockheed taps leader of commercial cyber business (Washington Technology) Lockheed Martin has named Angie Heise vice president of commercial markets for the company's Information Systems & Global Solutions business area

Guidance Software Appoints New Chief Marketing Officer to Drive Market Awareness and Customer Growth (BusinessWire) Guidance Software, Inc. (NASDAQ:GUID), the World Leader in Digital Investigations™, today announced Michael Harris, a veteran technology leader with more than 25 years' experience helping companies achieve significant growth, has joined the company as its Chief Marketing Officer

Products, Services, and Solutions

LifeJourney, Cyber Innovation Center Partner on Cyber-Infused Teacher PD (THE Journal) LifeJourney and The Cyber Innovation Center have partnered to release The Cyber Teacher, a cloud-based professional development and certification program designed to include cybersecurity material and IT skills in high school teacher training

Centripetal Networks Announces the Latest Release of RuleGate® Network Protection System (Benzinga) The RuleGate® Network Protection System, in its latest release now offers enterprises with a new set of cyber defense capabilities

Cylance Releases Results From Unprecedented Public Tests of Next-Generation Antivirus (MarketWired) CylancePROTECT blocks 99 percent of threats, while AV vendors miss half or more

Akamai introduces two new managed security service offerings (Networks Asia) Akamai Technologies, Inc. has introduced two new managed security service offerings available as part of the company's cloud security solutions

Catbird Releases First Tool For Real-Time Traffic Analysis and Instant Perfect Inventory of All Virtualized Assets (BusinessWire) Catbird Insight visualizes asset relationships, interactions and east-west traffic flows for improved analytics

Hawk Defense Partners with FireHost to Provide Advanced Threat Detection Services (The Hosting News) HAWK Network Defense, the software manufacturer of eyeCon, a revolutionary new Big Data Security Analytics Platform, today announced a partnership with secure cloud leader FireHost providing a superior level of security to their cloud customers

CrowdStrike Launches Business Vertical Offerings as Part of Its Intelligence Exchange Program (Blackbird PR News) CrowdStrike Inc., a leading provider of next-generation endpoint protection, threat intelligence, and 24x7 monitoring and incident response services, today announced the availability of CrowdStrike Intelligence Exchange (CSIX) for industry verticals. Under the CSIX initiative, partners and end-users are able to take advantage of the full spectrum of intelligence capabilities delivered by CrowdStrike Falcon Intelligence to gain deep insight into adversaries' identity, motives, and techniques

FireMon Reinvents Security Monitoring via Automated Root Cause Prevention of Network Compromise (MarketWired) Release of Security Manager 8.0 enables continuous visibility Into emerging gaps in network defense

BT to start hacking connected cars, as cyberattack risks increase (ZDNet) The UK phone and telecoms giant's new "ethical hacking" service aims to fix security vulnerabilities in cars long before they roll off the production line

Technologies, Techniques, and Standards

Investment Advisers: Six Areas of Focus for SEC Cybersecurity Exams (Wall Street Journal) The U.S. Securities and Exchange Commission (SEC), in an effort to consistently reinforce its expectations in the area of cyber risk management, last year issued a cybersecurity-dedicated Risk Alert, as well as other communications to address the growing number and complexity of cybersecurity risks facing investment advisers (IAs). The alert, issued by the Office of Compliance Inspections and Examinations (OCIE), highlights the SEC's cybersecurity initiative, including a sweep of more than 50 registered IAs and broker-dealers focusing on cybersecurity

Insurance regulators set goals for cyber security rules (Business Insurance) Cyber security regulatory guidance for insurers and insurance producers must be flexible, according to principles issued by the National Association of Insurance Commissioners

Scaling the firewall: Ways around government censorship online (+video) (Christian Science Monitor Passcode) As countries such as Turkey, China, Ethiopia, and Bahrain block online content, people are discovering ways to get around Internet censors. Their methods depend on the kind of censorship they face and what they are doing online

Anthem breach highlights need for dynamic access control, says KuppingerCole (ComputerWeekly) The exposure of the personal data of up to 80 million customers and employees of US health insurer Anthem shows the need for better access control, said Dave Kearns, analyst at KuppingerCole

Hacker Demonstrates iOS 8.4 Jailbreak (Hacker News) Quite surprising but the just released Apple's iOS 8.4 beta has been jailbroken by a well-known hacker

Research and Development

Algorithmic Cyber Attacks are Coming (Forensic Magazine) The next generation of cyber attacks will be more sophisticated, more difficult to detect and more capable of wreaking untold damage on the nation's computer systems

Plan X: DARPA's Revolutionary Cyber Security Platform (InformationWeek) DARPA's Plan X aims to make active cyber defense more accessible to the masses through agility, training, and intuitive interfaces

DARPA developing self-updating software (C4ISR & Networks) DARPA is trying to develop a new approach to software design that will result in software able to update itself without human intervention

Office of Naval Research eyes PaaS as big-data solution (C4ISR & Networks) Platform-as-a-Service is a subset of cloud computing that simplifies life-cycle management

Academia

University of Southern California Takes Top Honors at Deloitte Foundation Cyber Threat Competition (PRNewswire) Deloitte Cyber Risk Services and the Deloitte Foundation sponsor event to address the rising cyber skills gap

Southeast Schools Hoping to Fill Need for Insurance Cybersecurity Experts (Insurance Journal) The insurance industry, like other businesses, has come to realize it needs to do more to protect its companies, customers, employees and portfolios from cyber threats. Cyber-savvy professionals are in high-demand and are being scooped up by companies needing to protect their important information and business systems

Legislation, Policy, and Regulation

NSA Chief: Rules of War Apply to Cyberwar, Too (Defense One) In the tightly controlled discussion about cyber weapons, this counts as a step toward transparency

Info-Sharing Bills: What Happens Next? (GovInfoSecurity) Obama's stand on two measures could affect their fate

House Negotiators Nearing Deal to Curb NSA Data Collection Powers (Wall Street Journal) House negotiators are close to a deal that would effectively end the National Security Agency's controversial bulk data collection program, and congressional aides believe the bill is likely to win the endorsement of Sen. Patrick Leahy (D., Vt.), who opposed the legislation last year

More Senate Dems raise privacy concerns with cybersecurity bill (The Hill) More Democrats are signaling they will try to amend a major cybersecurity bill when it hits the Senate floor in the coming weeks

Senator Wyden: Congress may block government access to encrypted consumer devices (+video) (Christian Science Monitor Passcode) It is going to be hard for members of Congress to defend the federal government's position on this issue, particularly after the NSA 'overreach' on surveillance, said the Senate Intelligence Committee member

Navy Rolls Out CYBERSAFE: 'Our Operational Network Is Under Fire' (Breaking Defense) A high-level cybersecurity task force will present its plan to the Chief of Naval Operations sometime tomorrow. Called CYBERSAFE (one word, all caps), the initiative is intended to overhaul information technology in the comprehensive way the SUBSAFE instruction overhauled all submarine safety after the USS Thresher disaster. Fixing up IT procurement, though, is just one step towards a larger cultural revolution: treating military networks not as tech support but as weapons

Governor McAuliffe announces state action to protect against cybersecurity threats (Augusta Free Press) Governor Terry McAuliffe announced today that the Commonwealth of Virginia is establishing the nation's first state-level Information Sharing and Analysis Organization (ISAO)

Litigation, Investigation, and Law Enforcement

Iran charges Washington Post journalist with espionage, other crimes (Al Jazeera America) Jason Rezaian has been held by Iranian authorities since July 22 of last year

TSP Participants Could Be Vulnerable to Hackers, Auditors Say (Government Executive) The agency running the Thrift Savings Plan has not implemented the proper controls to prevent hackers from accessing its systems and potentially compromising the personal data of federal employee and retiree participants, federal auditors said on Monday

SwaggSec Hacker Sentenced to Prison for Attacks (Dark Matters) Mario Patrick Chuisano, a member of the SwaggSec hacking group, was sentenced to three years in federal prison and ordered to pay $2,662,438.80 in restitution for participating in a series of attacks that that targeted at DirecTV, Farmers Insurance and the Los Angeles Department of Public Works

For a complete running list of events, please visit the Event Tracker on the CyberWire website.

Upcoming Events

RSA Conference 2015 (San Francisco, California, USA, April 20 - 24, 2015) Don't miss this opportunity to join thousands of industry professionals at the premier information security event of 2015

Australian Cyber Security Centre Conference (Canberra, Australia, April 22 - 23, 2015) The Australian Cyber Security Centre (ACSC) will be hosting its first cyber security conference in 2015. We are bringing leading cyber security experts from Australia and abroad to share their expertise.

Security Forum 2015 (Hagenberg im Mühlkreis, Austria, April 22 - 23, 2015) The Security Forum is the annual IT security conference in Hagenberg that addresses current issues in this domain. Visitors are offered technical as well as management-oriented talks by representatives...

CyberTexas / CyberIOT (San Antonio, Texas, USA, April 23 - 24, 2015) CyberIOT — Securing the Internet of Things. As more everyday devices become connected to the internet, the need for securing those items becomes critical. CyberTexas will explore the intersection...

Defensive Cyberspace Operations & Intelligence Conference & Exhibition (Washington, DC, USA, April 27 - 28, 2015) The 5th Annual Defensive Cyberspace Operations & Intelligence (DCOI) conference & exhibition is an Israeli-American partnership promoting the extraordinary developments in the technological, intelligence...

INTEROP Las Vegas (Las Vegas, Nevada, USA, April 27 - May 1, 2015) Attend Interop Las Vegas, the leading independent technology conference and expo designed to inspire, inform, and connect the world's IT community. In 2015, look for all new programs, networking opportunities,...

INFWARCON (Nashville, Tennessee, USA, April 28 - 30, 2015) INFWARCON takes a look at how the balance has flipped in the past 20 years in the cyber security industry. Back then, governments had the upper hand, and could not imagine that cyber criminals could ever...

Southern Africa Banking and ICT Summit (Lusaka, Zambia, April 30, 2015) The South Africa Banking and ICT Summit is the exclusive platform to meet industry thought leaders and decision makers, discover leading edge products and services and discuss innovative strategies to...

2015 Synergy Forum (Tysons Corner, Virginia, USA, April 30, 2015) The 2015 Synergy Forum brings together government and industry practitioners driving our collective technology futures. This event is multi-disciplinary, examining the emerging fusion of physical and digital...

WAHCKon Perth 2015 (Perth, Western Australia, Australia, May 2 - 3, 2015) WAHCKon is a Perth based hacker conference that launched in 2013. We cover a wide range of topics focusing on Information security and Hacker subculture as well as locksports, activism and related areas...

Cloud Security Alliance Federal Summit (Washington, DC, USA, May 5, 2015) The Cloud Security Alliance Federal Summit, is a one day free-for-government event taking place at the Ronald Reagan Building and International Trade Center and is expected to draw 250 information security...

Amsterdam 2015 FIRST Technical Colloquium (Amsterdam, the Netherlands, May 5 - 6, 2015) FIRST Technical Colloquia & Symposia provide a discussion forum for FIRST member teams and invited guests to share information about vulnerabilities, incidents, tools and all other issues that affect the...

AFCEA Defensive Cyber Operations Symposium (Baltimore, Maryland, USA, May 5 - 7, 2015) The U.S. Defense Information Systems Agency's new operational role in the cyber domain as network defender creates a formal relationship between DISA, U.S. Cyber Command and the command's military service...

California Cybersecurity Task Force Quarterly Meeting (Walnut Creek, California, USA, January 20, 2015) The California Cyber Security Task Force serves as an advisory body to California's senior government administration in matters pertaining to Cyber Security. Quarterly Cybersecurity Task Force meetings...

DaytonDefense Ohio Cyber Dialogue with Industry Conference (Dayton, Ohio, USA, May 6 - 7, 2015) Our Cyber Security conference presents how Cyber Security affects you as an individual, your company, and your nation, along with business opportunities in this growing area. You will walk away with an...

Suits and Spooks London (London, England, UK, September 12, 2014) On September 12th, in London's South bank neighborhood of Southwork, approximately 50 former intelligence officials, corporate executives, and security practitioners from the U.S. and the EU will gather...

Fraud Summit London (London, England, UK, May 7, 2015) ISMG's Fraud Summit is a one-day event focused exclusively on the top fraud trends impacting organizations and the mitigation strategies to overcome those challenges. Highlights of the London event include...

Apple Security Talks & Craft Beer (Laurel, Maryland, USA, May 8, 2015) The world's first security summit held at a production brewery. Join some of the world's best Apple security researchers as they talk about iOS, OS X, Apple hardware and other Apple-related security topics...

DzHack Event 2015 (Ben Aknoun, Algiers, Algeria, May 9, 2015) DzHackEvent is a security event will contain conferences, workshops, and a challenge (CTF). Aiming to bring together security professionals, students, searcher, ethical hacker enthusiasts or simply technology...

12th CISO Summit & Roundtable Geneva 2015 (Geneva, Switzerland, May 11 - 13, 2015) The 12th CISO Summit will give you direct insights from Europe's most experienced CISOs, you will get the latest top hot buttons and focuses from other CISOs for the coming 5 years — shared predictions...

NG Security Summit (San Antoino, Texas, USA, May 11 - 13, 2015) The NG Security Summit bringx together more than sixty-five relevant CISOs from the private and public sector for a high level summit where they will workshop to benchmark, identify, and tackle key challenges.

Cybergamut Tech Tuesday: An Hour in the Life of a Cyber Analyst (Hanover, Maryland, USA, May 12, 2015) This hands-on workshop will demonstrate how easy it is for a breach to occur by analyzing a virtualized web server environment. Participants will use open source tools such as port scanners and protocol...

MCRCon (Ypsilanti, Michigan, USA, May 12, 2015) Please join the Michigan Cyber Range for the third annual MCRCon cybersecurity conference. MCRCon 2015 will focus on hacking prevention, incident handling, forensics and post-event public relations. MCRCon...

Houston Secure World (Houston, Texas, USA, May 13, 2015) Join your fellow security professional for affordable, high-quality cybersecurity training and education at a regional conference near you. Earn CPE credits while learning from nationally recognized industry...

QuBit 2015 Cybersecurity Conference (Prague, Czech Republic, May 13 - 15, 2015) QuBit brings together top experts and leaders in the field, from the private sector, to academia, to government. The main topics this year are APTs, the Internet of Things, and Digital Forensics, which...

Michgan InfraGard 2015 Great Lakes Regional Conference: Securing Our Critical Infrastructures (Novi, Michigan, USA, May 14, 2015) Learn all about the risks to critical infrastructures and key resources and the efforts underway to protect them. Private and public sectors will be represented. The conference will include four breakout...

THOTCON 0x6 (Chicago, Illinois, USA, May 14 - 15, 2015) THOTCON (pronounced \ˈthȯt\ and taken from THree - One - Two) is a hacking conference based in Chicago IL, USA. This is a non profit non-commercial event looking to provide the best conference possible...

International Conference on Cyber Security (ICCS) 2015 (Redlands, California, USA, May 16 - 17, 2015) The ICCS 2015 serves as a platform for researchers and practitioners from academia, industry, and government to present, discuss, and exchange ideas that address real-world problems with CYBER SECURITY.

FS-ISAC & BITS Annual Summit (Miami Beach, Florida, USA, May 17 - 20, 2015) The Financial Services Information Sharing and Analysis Center (FS-ISAC), is a non-profit association comprised of financial institution members, that is dedicated to protecting the global financial services...

2015 Cyber Risk Insights Conference — Chicago (Chicago, Illinois, USA, May 18, 2015) Advisen again brings its acclaimed Cyber Risk Insights Conference series to Chicago with a full-day event addressing the critical privacy, network security and cyber insurance issues confronting risk professionals...

IEEE Symposium on Security and Privacy (San Francisco, California, USA, May 19 - 22, 2013) Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for the presentation of developments in computer security and electronic privacy, and for bringing together researchers...

Fraud Summit Chicago (Chicago, Illinois, USA, May 19, 2015) ISMG's Fraud Summit is a one-day event focused exclusively on the top fraud trends impacting organizations and the mitigation strategies to overcome those challenges. Highlights of the Chicago event include...

NCCOE Speaker Series: The Cyber Danger: Problems of Strategic Adaptation (Rockville, Maryland, USA, May 20, 2015) Lucas Kello (Senior Lecturer in International Relations / Director of Cyber Studies Program, Oxford University, and Associate of the Science, Technology & Public Policy Program, Belfer Center for Science...

3rd Annual Georgetown Cybersecurity Law Institute (Washington, DC, USA, May 20 - 21, 2015) In 2015, it is more important than ever that in-house and outside counsel stay abreast of the most current developments and best practices in cybersecurity. Those lawyers who ignore cyber threats are risking...

AFCEA Spring Intelligence Symposium 2015 (Springfield, Virginia, USA, May 20 - 21, 2015) The Symposium will be a one-of-a-kind event designed to set the tone and agenda for billions of dollars in IC investment. Leaders from all major IC agencies, from the ODNI, IARPA, and the National Intelligence...

SOURCE Conference (Boston, Massachusetts, USA, May 25 - 28, 2015) SOURCE is a computer security conference happening in Boston, Seattle, and Dublin that is focused on offering education in both the business and technical aspects of the security industry. The event's...

7th International Conference on Cyber Conflict (Tallinn, Estonia, May 26 - 29, 2015) CyCon is the annual NATO Cooperative Cyber Defence Centre of Excellence conference where topics vary from technical to legal, strategy and policy. The pre-conference workshop day, 26 May, features a variety...

HITBSecConf2015 Amsterdam (De Beurs van Berlage, Amsterdam, The Netherlands, May 26 - 29, 2015) This year's event will feature a new training courses. Keynote speakers include Marcia Hofmann and John Matherly. To encourage the spirit of inquisitiveness and innovation, Haxpo will showcase cutting...

1st Annual Billington Corporate Cybersecurity Summit (New York, New York, USA, May 27, 2015) Join Billington CyberSecurity's unparalleled network of cybersecurity professionals as they provide hard-earned insights and education to a high level and exclusive group of attendees from the corporate...

Atlanta Secure World (Atlanta, Georgia, USA, May 27 - 28, 2015) Join your fellow security professional for affordable, high-quality cybersecurity training and education at a regional conference near you. Earn CPE credits while learning from nationally recognized industry...

Techno Security & Forensics Investigations Conference (Myrtle Beach, South Carolina, USA, May 31 - June 3, 2015) The Seventeenth Annual International Techno Security & Forensics Investigations Conference will be held May 31 ? June 3 in sunny Myrtle Beach at the Myrtle Beach Marriott Resort. This conference promises...

Mobile Forensics World (Myrtle Beach, South Carolina, USA, May 31 - June 3, 2015) The Eighth Annual Mobile Forensics World will also be held May 31 ? June 3 in sunny Myrtle Beach at the Myrtle Beach Marriott Resort. The Mobile Forensics World is specifically dedicated to Federal, State...

Grow your brand and reach new customers.

Grow your brand and increase your customer base by educating our audience about your products, services, and events by advertising on The CyberWire. We’ve built trust with an influential (and often hard to reach) audience of CISOs, CSOs, and other senior execs in the security space, across a wide array of industry verticals. Learn more.

Be a part of the CyberWire story.

People ask us (a lot) how they can support what we do. We have our sponsorships and services, of course, but those are not always within every supporter's financial reach, or it might just not be the right time for you to do those things. That's why we launched our new Patreon site, where we've created a wider variety of support levels, each with some new benefits. Our patrons are important to our future, and we hope you'll consider becoming one. We invite you to become part of the CyberWire story. Become a patron today.