Tag: Computer Security
Everyone using CERN’s IT infrastructure is responsible for the security and protection of the computers they use, the operating systems they run, the applications they install, the programs they write and the data they store, with the assistance of the IT Department and the Computer Security Team.
-
Computer Security: Password evolutions
Following the successful deployment of two-factor authentication (2FA) to more than 42 000 CERN accounts, one final step to ensure full compliance with the recommendations of the 2023 audit on CERN’s cybersecurity remains
-
Computer Security: 20 years of securing controls (or trying to): mitigations
We’ve seen in the past two Bulletins that control system cybersecurity is the black sheep of IT, a hard-to-change tanker’s course. Still, with significant daily damage of 250 000 USD for ALMA, the costs of falling to a cyberattack can no longer be ignored
-
Computer Security: 20 years of securing controls (or trying to): black swans and convergence
While eagerly expected by experts, the first dominant incident on control systems reported by the media was the Stuxnet attack of 2010 against the Iranian nuclear programme allegedly conducted by some secret services
-
Computer Security: 20 years of securing controls (or trying to): nothing has changed?
20 years ago, control systems used to be stand-alone systems, usually decoupled from the larger enterprise networks, using their own network cabling infrastructures and programming languages dedicated to control systems. But no more…
-
Computer Security: CERN, beautified
The Computer Security Office is planning to improve the security posture of CERN’s web presence, making it a bit more beautiful than before
-
Computer Security: “ClickFix”, a nasty copy & paste
“ClickFixing”, or the art of luring you into executing a very simple string of copy/paste-like tasks to install malware on your computer
-
Computer Security: Block ads, stay clean
The main ways to get your computer infected these days are clicking on the wrong link, accessing the wrong website and/or installing the wrong software…
-
Computer Security: easily applied
To make your life easier, the Computer Security Office has compiled four shortlists of “Security Principles”
-
Computer Security: Spam protection for phone calls
Unsolicited marketing and fraudulent calls are unfortunately very common nowadays. Although total protection is impossible, the CERN Telephony Service has implemented several mechanisms to reduce such annoying calls to all CERN telephone numbers
-
Computer Security: Internet of Damn Insecure Stupid Things
Here are some examples of the Internet of Damn Insecure Stupid Things that were deployed (or intended to be) at CERN. Be prepared to shake your head