Black Hat

Three months after the Biden administration mandated formation of a national cybersecurity safety board, staffing by DHS and the attorney general is about complete. Indiana University's Scott Shackelford and former NTSB chairman Christopher Hart detailed the potential during a Black Hat virtual session, but also its complications.

Joe Uchill, sporting a mask that just might inspire people to shove their fingers into his face, caught up with Doug White on Offensive Security to share his take on the show, and what seems to be capturing the attention of attendees  – from hacking laws and machine learning to the surprising lack of ransomware discussion.

Attackers have traditionally shied away from attempts to compromise huge numbers of targets in a single attack. The incentives for doing so may be changing.

Most network defenders have come to terms with the laws that govern tampering with computers. But as more and more computer processes move to machine learning, they may be surprised to find out that the legal protections will not follow.

IIS malware most recently appeared in the Halfnium Exchange Server attacks. Zuzana Hromcová created what may be the first systematic overview of the wide world of IIS malware.

Interos CEO Jennifer Bisceglie is quick to point out that recent cash infusions aside, Interos has been around since 2005, bootstrapped for more than a decade. SC Media caught up with Bisceglie at Black Hat in Vegas to learn more about the technology, and the significance of the world waking up to the threat.

Cisco's Matt Olney and Wendy Nather spoke to SC Media ahead of their virtual session at Black Hat, which dug into the sometimes complex relationship between enterprise security chiefs and the responders that come in following an incident to help piece together what went wrong.