In this Spotlight episode of the Security Ledger podcast, I interview Richard Bird, the CSO of the firm Traceable AI about the challenge of securing application programming interfaces (APIs), which are increasingly being abused to steal sensitive data.

The post Spotlight: Traceable CSO Richard Bird on Securing the API Economy appeared first on The Security Ledger with Paul F. Roberts.

Paul talks with Chris Hoff the Chief Secure Technology Officer at LastPass about the CSTO role and the security implications of “software eating the world.”

The post Episode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPass appeared first on The Security Ledger with Paul F. Roberts.

Host Paul Roberts speaks with Marc Blackmer of ShardSecure about that company’s new approach to protecting data at rest, which relies on fragmenting and scattering data to make it impossible to steal.

The post Spotlight: ShardSecure on Protecting Data At Rest Without Encryption appeared first on The Security Ledger with Paul F. Roberts.

We’re joined by Nir Ohfeld of Wiz. Nir helped discover the recent CHAOS DB flaw in Azure COSMOS DB, the flagship database for Microsoft’s Azure cloud platform.

The post Episode 225: Unpacking the Azure CHAOS DB Flaw with Nir Ohfeld of Wiz appeared first on The Security Ledger with Paul F. Roberts.

In this week’s podcast episode, #152: we talk with Akamai researcher Larry Cashdollar about his discovery of Silex, a new example of IoT killing malware allegedly authored by a 14 year old. Also: Steve Mullaney, the CEO of the cloud security start up Aviatrix joins us to talk about Amazon's new cloud security conference: Re:Inforce.

The post Episode 152: What the Silex Malware says about IoT Insecurity and Cloud Security CEO Steve Mullaney on Amazon ReInforce appeared first on The Security Ledger with Paul F. Roberts.

In this week’s episode, #150: Microsoft cloud evangelist Tanya Janca joins us to talk about securing Azure and the challenges of pushing security left. Also: we continue our series on life after passwords as we speak with Nick Buchanan, CTO of Armor Scientific joins us to talk about the imminent demise of the password and what might replace it.

The post Episode 150: Microsoft’s Tanya Janca on securing Azure and Armor Scientific’s CTO on Life after Passwords appeared first on The Security Ledger with Paul F. Roberts.

In this Spotlight Podcast*, Philippe Courtot of the firm Qualys discusses being an early innovator in the software as a service space and how the market for cloud based security services has evolved since he launched his firm, Qualys, almost two decades ago.  If you walked the trade show floor at last week’s RSA Conference as I did, it is easy to forget that cloud-based security used to be considered so far out as to occupy the realm of science fiction. As recently as 10 years ago, many otherwise sophisticated firms were of the opinion that, no matter the benefits the cloud bestowed on= other business functions, security was a bridge too far. Philippe Courtot saw things differently. Just months after Mark Benioff stood up his hosted customer relationship management (CRM) platform, Salesforce.com, Courtot launched his firm Qualys, which took what was at that time relatively new security function – […]

The post Spotlight: Philippe Courtot, CEO of Qualys: We Need to Change How We Do Security appeared first on The Security Ledger with Paul F. Roberts.

The hack of Uber and the loss of information on 57 million customers is just the latest security incident stemming from what our guest Elizabeth Lawler calls “DevOps secrets” – valuable credentials, APIs and other sensitive information that often end up exposed to the public as a result of lax continuous development operations. In this Spotlight Edition* of The Security Ledger Podcast, sponsored by CyberArk, we talk with Elizabeth about how to contain DevOps secrets and secure the secret super user lurking in modern organizations: highly privileged application code.  When the ride hailing service Uber revealed that information on 57 million customers and 600,000 drivers had been stolen by hackers, media attention focused on the company’s apparent decision to cover up the breach for months. That decision now seems likely to deliver a wealth of lawsuits to Uber’s doorstep. Just as important, however, are the still-emerging details about how hackers were able […]

The post Podcast: Uber Breach Puts Focus on Securing DevOps Secrets appeared first on The Security Ledger with Paul F. Roberts.

With the New Year fast approaching, it’s (unofficially) ‘prediction season,’ when everyone worth their salt stares into the crystal ball and tries to imagine what the world will look like 12 months hence. To sort through our 2014 predictions, we called on Mark Stanislav, the chief Security Evangelist at Duo Security. Mark is a seasoned security researcher who has taken an interest in the security of the Internet of Things. Earlier this year, we wrote about research Mark did on the IZON Camera, an IP-enabled home surveillance camera that is sold by big-box retail stores like Best Buy, as well as by the Apple Store. Beneath the IZON’s polished exterior, the IZON was a mess of sloppy coding and poor security implementation, Stanislav discovered. Like many IoT devices, IZON cameras punted security to those responsible for the wireless network that it was deployed on – essentially trusting any connection from […]

The post Prediction: Rough Road Ahead in 2014 For Security and Internet of Things appeared first on The Security Ledger with Paul F. Roberts.