Matthew Howard

More disclosures on UALink, the open alternative to NVLink. 1.0 spec available this year to “contributors,” general review Q1/25. Board members: -AMD -AWS -Astera Labs -Cisco -Google -HPE -Intel -Meta -Microsoft Expected board, but what’s interesting that Astera Labs is the only merchant networking-only focused silicon provider, and Broadcom isn’t on the list. Big deal for Astera. Broadcom extending UEC for fabrics?

56

7 Comments

Third-party software is a common threat vector in supply chain attacks. This is an important step to reduce the attack surface in IoT devices.

2

This blog by Virtru's own Danny Holloway offers a compelling look at modernizing cybersecurity through open technology, showing how combining open standards with commercial platforms can make zero trust architecture more achievable for government agencies. It's a must-read for anyone interested in practical approaches to data security, especially those working in government IT or cybersecurity roles. #leadingtheway #TrustedDataFormat #zerotrust

12

Safeguarding customers' PII is still not a priority for top major U.S. wireless carriers. AT&T, T-Mobile, and Verizon illegally shared access to customers' real-time location data without consent through one of the most notorious and dominant prison/jail telecom/communication corporations in a duopoly -- Securus. As of April 2024, Securus is now staving off what seems to be an imminent bankruptcy facing $1.3 Billion in debt to repay this year. The table below contextually shows their market share, Q1 2024 revenue, and fines imposed. Market share within communications services as of Q1 2024 (12-month ending) via CSIMarket | revenue in Q1 2024 | fines - Verizon = 38.50% | $33 Billion | $47 Million - AT&T = 34.38% | $30 Billion | $57 Million - Mobile/Sprint = 22.05% |$ 2.4 Billion | $92 Million It would be interesting to know how much money they made selling the data to third parties. What's even more alarming is that, despite being notified of the unauthorized access, all four carriers failed to take immediate action. They did not implement adequate safeguards to ensure third-party location-based service providers obtained customer consent before accessing their location information. "During the investigation, the FCC's Enforcement Bureau found that each of the four mobile carriers sold their customers' real-time location data to "aggregators," who then resold this information to dozens of third-party location-based service providers, revealing where the customers were going and who they were." Unauthorized sharing of user location data poses significant privacy risks to consumers. Third parties could misuse this information for various purposes without users' consent. Also, as they say, "you are only as secure as the weakest link in your supply chain." Now that it's "out there," it opens the data to a world of bad actors, potentially leading to stalking, identity theft, or other malicious activities. Meanwhile, both Verizon and AT&T are appealing the order. "It unfairly holds us responsible for another company’s violation of our contractual requirements to obtain consent, ignores the immediate steps we took to address that company’s failures, and perversely punishes us for supporting life-saving location services like emergency medical alerts and roadside assistance that the FCC itself previously encouraged," the AT&T spokesperson said." Do these fines commiserate with their mishandling of consumer data? If not, what would be appropriate? #dataprivacy #datasecurity https://lnkd.in/gDPX7KSR

12

1 Comment

Watch how you can monitor authorized and unauthorized lateral movement or #eastwesttraffic movements within your deployment using Uila #uObserve. https://lnkd.in/gcBpQmD9

1

1 Comment

Java licensing is no longer just a line item in the budget—it’s a strategic decision. This article in The Register explores why more CIOs are stepping into the conversation, and Simon Ritter from Azul offers some great perspectives. As someone who’s seen the impact of these decisions on mission-critical systems, I couldn’t agree more. Are you exploring alternatives to Oracle Java? Curious to hear how others are handling this.

3

Which comes first...information security or risk management? In this episode of The Bridgecast, Melanie Thomas, VP of Cybersecurity at Bridgepointe, joins Scott to explore that question including: The need for policy, governance, and centralized device control in cybersecurity. How vendors can improve by focusing on quality over speed. The surprising role of Hope Punk in tackling cybersecurity challenges. Listen now - https://bit.ly/4i0S65C #TheBridgecast #Cybersecurity #RiskManagement #HopePunk

6

In today's hyper-digital world, organizations grapple with overwhelming data volumes and escalating identity and risk vulnerabilities. Traditional tactics and limited resources struggle to keep pace with the amount of data that needs processing. Enter AI-driven identity matching and threat intelligence technology—a game-changer in closing this "risk-confidence gap," to empower organizations with the confidence and decision advantage to mitigate them. Babel Street CEO Michael Southworth discusses our company's expansion with ExecutiveBiz and how we're advancing identity intelligence and risk operations. From deep investigation and situational awareness to Know Your Customer and Anti-Money Laundering, we're transforming industries with expanded data, analytics, and AI expertise. #KYC #AML #OSINT #situationalawareness #identityrisk #threatintelligence

25

What blog article should James Freeman write first? Vote on our community poll! We are welcoming a new guest blogger at Cendio ThinLinc community! Meet James Freeman there! https://lnkd.in/dh9ktHy7 Vote on one of the options: - Setting ThinLinc on up an AWS EC2 instance and behind Traefik and Authelia - Use Tailscale VPN with Tailscale SSH to provide passwordless remote access to ThinLinc on a remote server - Adding LetsEncryptSSL and 2FA (Duo) to the Traefik/Authelia setup - Install ThinLinc server using the Ansible role that exists on Ansible Galaxy - Something else (reply in the thread) - “Saved sessions” for ThinLinc on Windows - “Saved sessions” for ThinLinc on macOS Amazon Web Services (AWS) Traefik Labs Tailscale Let's Encrypt Ansible by Red Hat Microsoft Apple

1

Utilities, pharmacies, other core components of the life we live are under attack daily and sustained predictable #MDR essential to keeping us safe and secure. CyberMaxx helping out clients here every day

4

FCC takes $200 million bite out of wireless carriers for sharing location data: The FCC said T-Mobile, Sprint, AT&T and Verizon sold customers’ location data and outsourced user consent requirements. The post FCC takes $200 million bite out of wireless carriers for sharing location data appeared first on CyberScoop. #cyber #cybersecurity #cybersecurityjobs #cyberjobs #Technology #Innovation #cloudsecurity #management

1

🔥 Tomorrow night at 6 pm PDT, join us at the OWASP Orange County #meetup where Mike Larkin, CTO and co-founder of Deepfactor will lead the 90-minute hands-on live #workshop "Vulnerability Reachability Analysis Using OSS Tools” and will dive into: ✅ What vulnerability reachability is and why it is important ✅ Two main ways of understanding reachability (static call graphs and runtime analysis) ✅ Two short exercises for the attendees to gain hands-on experience using both types of tools against real applications with real vulnerabilities We look forward to seeing you there. Check the link in the comments for sign-ups! #AppSec #Security #Deepfactor

13

2 Comments

For emergency responders, INRIX Incident Data quickly and safely enables road navigation. Whether delivering essential supplies, evacuating people, or coordinating rescue efforts, having reliable information on road conditions is critical for 911 teams. Our real-time data allows responders to focus on their mission without second-guessing their route. #publicsafety #traffic #transportation

7

As part of the Biden-Harris Administration’s comprehensive strategy for responsible innovation, the White House convened leaders from hyperscalers, artificial intelligence (AI) companies, datacenter operators, and utility companies to discuss steps to ensure the United States continues to lead the world in AI. Participants considered strategies to meet clean energy, permitting, and workforce requirements for developing large-scale AI datacenters and power infrastructure needed for advanced AI operations in the United States. https://lnkd.in/e-FTMnnv

2

Big things are on the horizon for ezJustice in 2025! 🌟 This year, we’re focused on expanding our reach, enhancing user experience, and bringing innovative solutions to more courts across the nation. Together, we’re modernizing justice, one system at a time. 🚀⚖️ ezjustice.us #ezJustice #2025Goals #ModernJustice #EfficiencyInAction

1

With ~60% adoption, Louisiana is the champion of digital driver’s licenses. Which use cases catalyzed adoption? How often do people use their mDL? I dove deep into the story of LA Wallet with Calvin Fabre, president of Envoc (the developers of LA Wallet). If you have an interest in mobile driver’s licenses, this is probably the single most impactful episode of the Future of Identity Podcast I’ve recorded. We cover: 📈 Specific adoption-related metrics which aren’t publicized, like the growth rate of mDL adoption after age verification laws rolled out, and the volume of verifications in 2024 so far 🤳 How ancillary features like “flashpass” and physical ID document authentication drove LA Wallet adoption 💨 Why they didn’t wait for the ISO standards to be fully baked before adding features like remote verification Obviously this is a must-listen for anybody working on things related to mobile driver’s licenses. But it’s also a masterclass for anybody working on reusable identity more broadly—as the lessons learned getting an IDtech product adopted are widely applicable. Big shoutout to Calvin for going so deep with us. And great that we could drop the episode right after Identity Week, where our booths were right next to each other! The reusable identity market is so fragmented that no one company can boil the ocean. Partners and collaborators are key to moving the industry forward and key to Trinsic, so shoutout to Calvin & the Envoc team! Catch the episode anywhere you listen to podcasts. I'll put a link below, too!

57

4 Comments