Does Apple’s proposed content scanning technology turn iPhones and Mac computers into “compliance assistants” that save us from data-hungry regulators? Or is it one of the most dangerous global surveillance systems the world has ever seen? A New Kind of Encryption The new class of encryption that would solve the privacy/compliance contradiction is called “homomorphic…

Does Apple’s proposed content scanning technology turn iPhones and Mac computers into “compliance assistants” that save us from data-hungry regulators? Or is it one of the most dangerous global surveillance systems the world has ever seen? Apple’s announcement in August 2021 of new features called “Expanded Protections for Children” has…

It has been a particularly bad quarter for cyber security; the first attack where a supply chain attack was combined with spreading ransomware was seen in the wild, affecting hundreds if not thousands of customers of the IT-management software Kaseya; The Microsoft Windows Print Spooler service was also attacked, allowing…

A terrible name for a bright idea In 2010, John Kindervag¹, a principal analyst on the ICT security and risk team at Forrester, introduced the term “Zero Trust.” His paper, “No More Chewy Centers: Introducing The Zero Trust Model Of Information Security,” outlines the idea that the concept of “trust”…

In February 2021, Apple quietly published two impressive documents that raise the bar for IT security strategies: the annual update to the Apple Platform Security and the new Security Certifications and Compliance Center. …

“Sunburst” was the most sophisticated hack the world has ever seen. One of the most urgent lessons so far learned from the attack: we need to enforce global software supply chain management now. ¹ The first details on the “Sunburst” attack were released in December 2020: a highly evasive attacker…