The voice you know may not be the voice you know, thanks to artificial intelligence (AI). Which makes vishing — scam phone calls — more effective than ever. And which is why, for an Arizona mom, the fact that voice cloning is now “scary good” is not just a figure…

If you want to sell software products to the U.S. government, starting sometime later this year (maybe), you will not only have to follow a prescribed set of security standards in building it, you’ll also have to swear in writing that you did so. It’s called “attestation” — the feds’…

The software security industry is, by many measures, “mature.” It’s been around for decades — as long as software itself. There are now well-established methods to find and fix vulnerabilities before a software product hits the market. All of which is good. But none of which means there is no…

By some measures, it looks like the ransomware plague may be inching from pandemic to endemic — still bad, but not quite as bad and not getting worse. Which would be much better. How to tell? Follow the money. According to Chainalysis, which as the name suggests is a blockchain…

It’s a story that is by now familiar — too familiar. An organization gets breached by cyberattackers who exploit a vulnerability in a component of its software supply chain — a vulnerability for which a patch had been available for years. What makes this version of the story a bit…

Pretty much everything in life can be used for good or evil — from fire and water to machines, weapons, and yes, artificial intelligence (AI). Which should make the answer to the question, “Is AI good or bad?” obvious. It’s both. The version of AI getting most of the media…

Build better software. If President Joe Biden has his way, that will no longer be a request, a plea, or even an exhortation. It will be a mandate. Or at least a warning with a legal stick behind it. Among the five major “pillars” of the president’s much-anticipated National Cybersecurity…

Very small things can have very big consequences. That’s why the security of the software that runs much of the nation’s critical infrastructure (CI) is so important. A single vulnerability in often lengthy and labyrinthine software supply chains can lead to catastrophic damage. Recall the panic in December 2021 after…

Software may not be as universal as the air we breathe but it’s getting close. Everybody and every organization depends on it in multiple ways — for work, play, shopping, banking, travel, entertainment, communication, household appliances — the list goes on. And most of that software is what’s called open…