Tag: Computer Security

  • Computer Security: [Pen|Pan|Pant]testing

    Computer Security: [Pen|Pan|Pant]testing

    Following the successful conclusion of the 2023 cybersecurity audit, 2026 will see another series of vulnerability assessments, penetration tests (“pentests”) and cybersecurity reviews

    Explore →

  • Computer Security: Privacy vs security

    Computer Security: Privacy vs security

    In CERN’s academic environment, cutting-edge research relies on an open yet to-be-protected digital ecosystem

    Explore →

  • Computer Security: Phished

    Computer Security: Phished

    In mid-November, CERN was subjected to another phishing attack that tried to lure people to open a malicious link and provide their CERN credentials on a fake CERN Single Sign-On page

    Explore →

  • Computer Security: A final spurt for improved networking

    Computer Security: A final spurt for improved networking

    2026 will bring improved and more granular network filtering to the Technical Network (TN) and, later, between the Campus and data centre networks, introducing a pair of redundant firewalls for each

    Explore →

  • Computer Security: A final dash to protect your account

    Computer Security: A final dash to protect your account

    We already discussed mandatory requirements for IT service managers in a past issue of the Bulletin. This time we present upcoming changes to passwords and improvements to two-factor authentication

    Explore →

  • Computer Security: A final marathon for service managers

    Computer Security: A final marathon for service managers

    The past two years have brought a lot of new computer-security deployments at CERN: 2-factor authentication, new spam filtering, email quarantining, anti-spoofing protection, 2FA protection for LXPLUS and the CERN Windows Terminal Servers, among others

    Explore →

  • Computer Security: Your ticket to improvement

    Computer Security: Your ticket to improvement

    The past two years have brought a lot of new computer-security deployments at CERN. Some of these were not the most user-friendly for the CERN community, as this is not in the inherent nature of “security”, but we tried our best

    Explore →

  • Computer Security: Password evolutions

    Computer Security: Password evolutions

    Following the successful deployment of two-factor authentication (2FA) to more than 42 000 CERN accounts, one final step to ensure full compliance with the recommendations of the 2023 audit on CERN’s cybersecurity remains

    Explore →

  • Computer Security: 20 years of securing controls (or trying to): mitigations

    Computer Security: 20 years of securing controls (or trying to): mitigations

    We’ve seen in the past two Bulletins that control system cybersecurity is the black sheep of IT, a hard-to-change tanker’s course. Still, with significant daily damage of 250 000 USD for ALMA, the costs of falling to a cyberattack can no longer be ignored

    Explore →

  • Computer Security: 20 years of securing controls (or trying to): black swans and convergence

    Computer Security: 20 years of securing controls (or trying to): black swans and convergence

    While eagerly expected by experts, the first dominant incident on control systems reported by the media was the Stuxnet attack of 2010 against the Iranian nuclear programme allegedly conducted by some secret services

    Explore →