Security researcher Kristin Paget, known in the cybersecurity industry as Hacker Princess, has won the (ISC)² Diversity Award.

US resident Paget was among the 2020 Global Achievement Awards honorees named today by the world’s largest nonprofit association of certified cybersecurity professionals. The annual awards recognize and celebrate the most outstanding annual and lifetime achievements in the field of cybersecurity.  

Paget joined Apple in 2012 but was poached two years later by Tesla Motors. After a stint at Lyft designing security systems for self-driving cars, Paget took a position with Intel. 

A spokesperson for (ISC)² said: “The (ISC)² Diversity Award, which honors an individual who represents the core values of (ISC)² through significant contributions in driving a more diverse workforce in the cybersecurity community, is presented to Kristin Paget, who currently resides in the US.”

The organization said that Paget had earned the gong for being someone “who has continually promoted and represented diversity through her positions as ‘Hacker Princess’ in the security departments of several leading technology companies.”

Other award honorees included…

Read More…

Intel has suffered a breach that cost it twenty gigabytes of sensitive corporate intellectual property from “Intel exconfidential Lake.” CyberScoop says Intel is investigating, but that a corporate representative said, “We believe an individual with access downloaded and shared this data.”

At Black Hat yesterday, CyCraft researchers described a Chinese government threat group, Chimera, that’s successfully targeted Taiwan’s semiconductor industry. (Or “pillaged” the industry, as WIRED puts it: their goal was source code, chip designs, software development kits, and similar intellectual property.) CyCraft calls the action against chip manufacturers “Operation Skeleton Key” after its use of SkeletonKeyInjector, which implanted a skeleton key into domain controller servers for continuous lateral movement. Its ability to make direct syscalls enabled it to bypass security systems. Additionally, by making direct syscalls, the malware could bypass security systems dependent on API hooking. The operators’ principal remote access Trojan was Cobalt Strike.

The US State Department reward being offered for information concerning attempts to hack US elections has been communicated in…

Read More…