Nothing made by humans is perfect. Even the stuff we create to protect and fix the imperfect stuff isn’t perfect. We all know that — why else would the process of crafting legislation that yields the laws we’re all supposed to live by be sardonically labeled “the sausage factory”? Same…

This isn’t one of those good-news, bad-news stories about cyber vulnerabilities. It’s more like bad news and a little less-bad news. Indeed, there isn’t much encouraging in a recent report from network monitoring firm SynSaber on vulnerabilities in industrial control systems (ICSs) other than that things could always be worse…

Apparently there’s at least one thing both parties in Congress can agree on — better cybersecurity. President Biden recently signed a couple of cybersecurity bills into law that reached his desk with overwhelming bipartisan support. Which is great, but keep in mind that support doesn’t guarantee success. Will these new…

“Predictions are hard, especially about the future,” the late, great Yogi Berra is said to have said. But apparently not all the time. Predictions about the patching of software ultra-vulnerability Log4Shell were easy. Which is not a good thing. It was December 2021 — the height of prediction season —…

Do the ends justify the means? Most of us would probably say it depends. The answers to that question tend to come with a host of qualifiers — the world isn’t all black and white, after all. But in general, those who agree with the ends are more likely to…

Cyberattacks against critical infrastructure (CI) — energy, water, transportation, food, healthcare, financial services, and more — are not a new thing. But there are increasing signs that they are becoming a more common and aggressive thing — perhaps even on the level of a “cyber Pearl Harbor” attack by a…

We don’t live in a perfect world. So, no surprise, there is no such thing as perfect software or perfect software security. But that doesn’t mean there’s no such thing as getting it closer to perfect. Most organizations can improve their software security — by a lot. That’s the message…

The software supply chain is, as most of us know by now, both a blessing and a curse. It’s an amazing, labyrinthine, complex (some would call it messy) network of components that, when it works as designed and intended, delivers the magical conveniences and advantages of modern life: Information and…

It’s become an annual thing. Every year there are stories or reports reminding us of the almost magical benefits provided by connected medical devices. …