A report that dropped this week by Lucija Valentić, a threat researcher at ReversingLabs described her discovery of malicious packages on npm and GitHub that abused Ethereum smart contracts to facilitate malicious command and control. securityledger.com/2025/09/ethe...

In our latest podcast we talked with Tanya Janca (@shehackspurple.bsky.social ) about her new book Alice and Bob Learn Secure Coding.

Props to Sam Curry (@zlz.bsky.social) and Shubham Shah for exposing severe security flaws in the web infrastructure used by #Subaru to manage and surveil...err... "monitor" smart vehicles. #autocyber #telematics #dataprivacy securityledger.com/2025/01/more...

In this clip from our latest #podcast, David Kellerman the Field #CTO at Cymulate explains how the company's attack simulation feature works - helping organizations test the effectiveness of security products in real life attack scenarios. Check out the full interview here: lnkd.in/efyEiJRe

🎙️ In this clip from our latest podcast, host @paulroberts.bsky.social asks David Kellerman, Field #CTO at #Cymulate about security tool overload and whether enterprises might already have all they need to protect themselves from major cyber risks. #podcast #sponsored

Our latest podcast is out (episode #259). Our guest: @sophossecurity.bsky.social #CISO Ross McKerchar who talks about Sophos' recent report Pacific Rim detailing a 6 year long cyber campaign by #China based #APT actors targeting Sophos customers. securityledger.com/2024/11/paci...

Check out our new Spotlight Podcast with Jim Broome, President and #CTO at DirectDefense, a leading MSSP. Jim and host @paulroberts.bsky.social chat about D2's latest Security Operations Threat Report and the evolution of threats and attacks driven by #AI. securityledger.com/2024/05/spot...

In our latest #podcast, @paulroberts.bsky.social speaks with renowned #IoT hacker Dennis Giese about his mission to liberate robot vacuums from OEM control, letting owners maintain their devices and control the data they collect. #cybersecurity #righttorepair securityledger.com/2023/12/epis...

Dragos Security on Wednesday unveiled a "Community Defense Program" to provide free cybersecurity software for small utilities providing water, electric, and natural gas in the United States. securityledger.com/2023/12/citi...

The slow motion #appsec car crash known as #MOVEit hit home, highlighting a sad fact of our modern life in the U.S.: the utter lack of online safety and security. securityledger.com/2023/11/apps...

How do we improve software quality and end the epidemic of shoddy, exploitable software harming consumers, communities and businesses? To start, we need to change the way we think and talk about software-based risks, writes @paulroberts.bsky.social. securityledger.com/2023/10/opin...

In this Security Ledger #Podcast @shehackspurple.bsky.social of the group We Hack Purple (now SemGrep), talks with Security Ledger host @paulroberts.bsky.social about the biggest security mistakes that #DevSecOps teams make, and the #OSS “tragedy of the commons.” securityledger.com/2023/10/epis...

Expert Insight, Derek Kernus, the Director of Cybersecurity Operations at DTS talks about the challenges facing small businesses that are under pressure to adopt #cybersecurity best practices without breaking their budget. #SME #opinion #riskmanagement securityledger.com/2023/10/what...

In this podcast, host Paul Roberts speaks with @colinoflynn.bsky.social of the firm NewAE about his work to patch shoddy software on his #Samsung electric oven – and big questions about our rights to fix, tinker with or replace the software that powers connected stuff. #BlackHat2023 #righttorepair

All eyes are on the AIVillage at @defcon.bsky.social but is a village the best format for assessing the #cyberrisks of #AI? Experts have their doubts…