‘Shift Left’ Gets Pushback, Triggers Security Soul Searching

October 25, 2024 at 07:17AM The Cybersecurity and Infrastructure Security Agency (CISA) questions the claim that fixing software vulnerabilities is 100 times more expensive during production. Agile development may lessen this cost, suggesting that shifting security responsibilities to developers, while important, needs a balanced approach. The emphasis should be on integrating security throughout the development … Read more

Former IT employee gets 2.5 years for wiping 180 virtual servers

June 14, 2024 at 12:34PM Former NCS employee Nagaraju Kandula was given a 32-month prison sentence for deleting 180 virtual servers after being let go from his job due to poor performance. The IT giant, National Computer Systems (NCS), suffered $678,000 in damages, with Kandula reportedly accessing the system using his old credentials. This incident … Read more

Former IT staff gets 2.5 years for wiping 180 virtual servers

June 14, 2024 at 11:58AM Former NCS employee, Nagaraju Kandula, sentenced to 2 years and 8 months for deleting 180 virtual servers after being fired. His action caused $678,000 in damages. NCS overlooked invalidating his credentials, allowing continued access. Kandula used his credentials to access NCS systems and execute the damaging attack. This incident emphasizes … Read more