Dear Reader, 

It’s August and that means Black Hat and DefCon are here.  As usual that means Cyber Protection Magazine will not attend because, to paraphrase the late Joe Cocker, only mad dogs and Englishmen go to Las Vegas in August.  Our chief editor says he never goes to Las Vegas willingly, especially since most of the news we might cover comes to us anyway. And all other news we can catch at Europe's biggest cybersecurity conference and exhibition in Nürnberg, German, in October, it-sa365.  We've mentioned it before, we're not only going, but we will print a special issue for the occasion. Scroll down for more details.

Enjoy reading our newsletter.

Lou Covey, Joe Basques and Patrick Boch

Physical beats Online

If you ever held a magazine or book with your name in your hand, you know that it feels different than seeing your name online. A lot. And for it-sa, you can have the chance to experience this feeling. We're printing a special issue and will distribute it amongst the visitors of both the exhibition and the conference. Trust me, you don't want to miss that.

Defense against the AI arts.  

This is an ongoing subject of coverage. We’ve had several articles and interviews already and we are still planning a live panel on the subject that has been delayed until September because of scheduling conflicts with participants.

Ethics in engineering is arising as a key factor in securing systems. If they are employed in development it makes it easier to protect users and systems. If they are ignored you can find yourself in trouble down the road, as evidenced by the recurring problems with Microsoft.

Ransomware recovery is a growing niche.  We get pitches about once a week from companies promising to be able to counteract ransomware attacks before they happen by securing data.  It’s enough information to look into the claims and see if they are valid.

Lies, damn lies and research reports. 

We also get pitches about company sponsored studies. Most of the time the what is “revealed” is nothing new.  Some of the time their methodology is flawed and the results are laughable.  Every once in a while they say something interesting.  We are going to take a handful of all of them and provide a guide for effective research.

Legislating security.

It would be nice if companies made an effort to self-regulate, but governments are getting tired of waiting.  Every major government is considering new security laws. Some of them make sense, but many are counterproductive.  We will take a look at the most effective and most egregious.

Cybersecurity training trends.

There are lots of opportunities to get free training.  There are lots of opportunities follow cost training. Are they worth what you pay for.  We will be talking to experts about that.