Quick links

For press inquiries, please email jcappos@nyu.edu and I will respond promptly.


Video (English): TV, Webcasts, etc.

"Exploring the extremes of open-source code safety with Professor Justin Cappos"  Video
Dr. Mirman's Accelerometer, October 2024.

"What we know about the walkie-talkie explosions in Lebanon"  Video
DW News, September 2024.

"Today's Verdict: Everything You Need To Know About CrowdStrike"  Video
BronxNet, August 2024.

"Are we too dependent on Microsoft?"  Video
CBC, August 2024.

"What caused the CrowdStrike-Microsoft global tech outage?"  Video
CBS, July 2024.

"NYU professor talks impact of global technology outage"  Video
NY1, July 2024.

"Cybersecurity expert shocked by extent of CrowdStrike IT issue"  Video
ABC, July 2024.

"AT&T Pays Hacker To Delete Stolen Customer Data"  Video
Fox 5, July 2024.

"How Should AT&T Customers React To the Company's Data Breach"  Video
CBS, July 2024.

"Call and text records of 'nearly all' AT&T cell customers exposed in massive breach"  Video
Sinclair Media Group (over 100 local TV stations), July 2024.

"New York small businesses concerned over possible TikTok ban"  Video
NY1, April 2024.

"AT&T data leak from 73 million customers; what you need to do next"  Video
Fox 5, April 2024.

"EV Hacking: This Is How Easy It Is to Sabotage the Power Grid"  Video
Wall Street Journal, March 2024.

"Facebook's "Look Who Died" scam" 
Fox 5, January 2024.

"NYC joins wave of federal agencies in banning TikTok on government-owned devices"  Video
News 12, September 2023.

"Zelle scams on the rise"  Video
Fox 5, September 2023.

"Australia joins EU, US in kicking TikTok off govt phones"  Video
Money Talks (TRT World), April 2023.

"The Hacker Halter"  Video
YouTube (NYU marketed 10 professors as Marvel-style super heroes), December 2022.

"Voting machines in Harris County will be new for many, but officials say they are prepared to deal with any issues"  Video
Click 2 Houston (NBC), October 2022.

"Pro-Russia Killnet DDoS attacks target U.S. airports"  Video
Fox 5, October 2022.

"Experts share cybersecurity tips as remote learning resumes for some and work from home continues"  Video
PIX 11, September 2020.

"Are US systems ready to handle massive work-at-home traffic?"  Video
CNBC, March 2020.

"Iran's cyberwar threat following the death of Gen. Qassem Soleimani in US strike"  Video
Fox News, January 2020.

"Privacy And Power: Your Digital Fingerprint (Part 1) - NBC Nightly News"  Video
NBC News, December 2019.

"How to Open Locks When You Don't Have the Combination"  Video
Extended YouTube tutorial, March 2019.

"Expert: Hotel chain to blame for security breach"  Video
Dozens of TV stations (Associated Press), November 2018.

"Biggest Cyber Monday Sales Expected, But Beware Shopping From Work"  Video
CBS, November 2018.

"Is America's Next Election Safe From Hackers?"  Video
Facebook Live, YouTube Live, Hulu, Cheddar, etc. (over 6.5M views), October 2018.

"Millions of Facebook Accounts Breached"
NBC, September 2018.

"SciTech Now episode 420" (coverage of Uptane)  Video (7:50-12:16)
PBS / WLIW 21, March 2018.

"Is It Safe To Get Your DNA Tested?" Video
MinuteEarth YouTube Channel (430K+ views), February 2018.

"Charging your phone in ride-sharing services, airports could put your information at risk" Video
WBRC Fox 6, January 2018.

"Could charging your phone put your information at risk?" Video
KPRC Channel 6, December 2017.

"Channel 2 Investigates: Syncing into the unknown, 'Data is like gold'" Video
Channel 2 Houston, October 2017.

"Malware Uses Software Updates To Spread Worldwide"
Fox 5, June 2017.

"Can big data analysis swing a political election?" Video
Fox 5, May 2017.

"WannaCry malware exploited OS weakness to spread" Video
Fox 5, May 2017.

"You really should read an app's service terms" Video
Fox 5, April 2017.

"Selling Your Online Search History"  Video
Fox 5, March 2017.

"Is Privacy Real? The CIA Is Jeopardizing America's Digital Security, Experts Warn" Video
Business Insider, March 2017.

"What Should Consumers Know About the Wikileaks Dump" 
Fox 5, March 2017.

"WikiLeaks to Help Shield Tech Firms From CIA's Hacking Tools" Video
NBC, March 2017.

"WikiLeaks publishes 1000s of CIA cyber-espionage documents"  Video
Fox 5, March 2017.

"How Uptane Can Protect Your Car From Hackers"  (coverage of Uptane)  Video
Reuters (via Facebook Live), January 2017.

"Are smart devices worth the hacking risk?"  Video
Fox 5, November 2016.

"How you can stop your email from getting hacked"  Video
Fox 5, November 2016.

"Clinton email investigation intensifies"  Video
PIX-11, October 2016.

"Clinton email investigation intensifies"  Video
PIX-11, October 2016.

"Why you shouldn't confide in the Confide App" 
Fox 5, September 2016.

"Why hacking is so easy"  Video 
Fox 5, June 2016.

"Are credit cards with chips increasing online fraud?" 
Fox 5, May 2016.

"Ransomware attack takes down LA hospital for hours"  Video 
PBS Newshour, February 2016. 

"How Do Cyber Criminals Use the Darkweb?"  Video. 
Fox News, October 2015.

"China denies hacking of U.S. government computers" 
Fox 5, June 2015.

"The hack attack that takes your computer hostage till you pay"  Video 
PBS Newshour, April 2015. 

"How a password manager can help you stay more secure online"  Video 
CBS, August 2014. 

"Swatting"  Video 
VICE News, June 2014. 

"NYU Poly's Hacknight"  Video 
Al Jazeera America, February 2014. 

"Darknet: The anonymous underbelly of the internet"  Video 
PIX11, February 2014. 

"The NSA is Examining Call Records From World Leaders"  Video 
Al Jazeera America, October 2013. 

"Protecting Yourself Against the Miss Teen USA Hack and Why You Might Avoid Owning a Smartphone"  Video 
Al Jazeera America, September 2013. 

"The message behind the hack attack: What does the SEA want?"  Video 
Channel 11 news (PIX11), August 2013. 

"Zuckerpunched! Facebook founder gets hacked"  Video 
Channel 11 news (PIX11), August 2013. 

"The NSA has been hacking Chinese systems for years: Snowden"  Video 
Channel 11 news (PIX11), June 2013. 

"NYU Poly Hack Nights Helping To Train Whitehat Hackers"  Video 
Channel 1 news (NY1), May 2013. 
Also shown on: It Ain't Rocket Science, Episode 11, Part 2, May 2013.  Video 

"Developers defend site that lets you "fake" tweets"  Video 
Channel 11 news (PIX11), April 2013. 

"Your Smartphone Is Tracking You In Ways You've Never Imagined"  Article w/ Video 
Business Insider, April 2013. 

"App attack? Developer says his software can hijack a cockpit during flight"  Article w/ Video  Channel 11 news (PIX11), April 2013. 

"Ask Asa: Breaking Down The LinkedIn Security-Breach Situation"  Video 
CBS, June 2012. 

"Ask Asa: Text Message Scammers Pose As Friends In Need"  Article w/ Video 
CBS, June 2012. 

"CyberSecurity Awareness Week on NY Channel 1"  Video 
Channel 1 News, November 2011. 

"CyberSecurity Awareness Week featured on News 12 Brooklyn"  Video 
Channel 12 News, November 2011. 

"Improving Mobility Infrastructure Security Standards"  Video 
AT&T Tech Channel, November 2011. 

Video (Foreign): TV, Webcasts, etc.

"Why Zuckerberg covers his laptop's camera"  Video 
Russian Television International (RTVi), October 2016.

"Suicide after the publication of a sextape. In Italy, Tiziana Cantone Buried" Video 
Russian Television International (RTVi), September 2016.

"`Crackas with attitude' hacked the CIA head's e-mail" Video 
Russian Television International (RTVi), September 2016.

"Russian hackers in the United States suspected of hacking into the voter registration system" Video 
Russian Television International (RTVi), August 2016.

"A new surge of Cyberwar between Moscow and Washington" Video 
Russian Television International (RTVi), August 2016.

"Security concerns with the Apple Watch"
NHK, April 2015.

"SWATting"
Russia Today, September 2014.

"Hacker's New Trends---Trojans in Home Appliances"  Video / Article 
NTDTV, November 2013. 

"US Congress Has Its First BitCoin Hearing: BitCoin's Value Increases"  Video / Article 
NTDTV, November 2013. 

"How Internet Filtering Works and What You Can Do About It"  Link to Tor   Link To Seattle
Nuestra Tele Noticias 24 Horas (NTN24), September 2013. 

"The Syrian Electronic Army's Latest Hack" 
Nuestra Tele Noticias 24 Horas (NTN24), August 2013. 

Audio: Radio, Podcasts, etc.

"How gamers can prevent being targets for cyber criminals" Article
KCBS Radio, October 2022.

"Is Cyberwar War? NYU security expert Justin Cappos and what can be done about state-sponsored hacking" Article
IEEE Spectrum, March 2021.

"SecureWorld's SolarWinds Data Breach Impact Podcast" (press coverage related to in-toto) Article
SecureWorld's SolarWinds Data Breach Impact, February 2021.

"AAA's Car Conversation with Justin Cappos" (press coverage related to Uptane) Article
AAA, September 2020.

"People are pretty reluctant to embrace self driving cars, survey says" (press coverage related to Uptane) Article
New Jersey 101.5, March 2020.

"Data Privacy And Consumer Protection" Article
Public Radio (WHSU), June 2019.

"Does Better Care At Hospitals Come With a Security Risk?" Article
MarketScale, May 2019.

"Now more than ever, cars are just rolling computers" Article
Marketplace, May 2018.

"Worries grow over privacy, security and tech: NYU Cyber Security Expert Justin Cappos" Article
Techstination, May 2018.

"Software Protecting Future Cars, Starting To Make Inroads" (press coverage related to Uptane) Article
Texas Public Radio, June 2017.

"Phishing, Hacks And Better Online Security" Article
NPR -- On Point, May 2017.

"Uptane on NPR's Here and Now" (press coverage related to Uptane) Article
NPR -- Here and Now, March 2017.

"The Update Framework -- Securing Your Software Updates with Justin Cappos -- Episode 99" (press coverage related to TUF, in-toto, and Uptane) Article
Podcast.__init__, March 2017.

"A Future Car May Be Protected From Hacking By Software Developed In San Antonio" (press coverage related to Uptane)  Article
Texas Public Radio, January 2017.

"How Did the Russian Hacks Happen?" Article
WWL AM 870 / FM 105.3, January 2017.

"The New WhatsApp Encryption Format" Article
WBAI 99.5 NYC / Uptown Radio, April 2016.

"Beaconsfield Teens Victims of Swatting" Article
CJAD 800 AM Montreal, September 2014.

"How Target hackers hit the bullseye" Audio / Article
Minnesota Public Radio News, January 2014.

"Obamacare Interview" Audio
KFWB News Talk 980, November 2013.

Print Media: Books

"Phippy's AI Friend: Story and Workshop for Kids and Parent" (includes TUF's mascot and information about TUF)
Book
by Cassandra Yuting Chin (Author) and Romain Therenty (Illustrator)
ASIN: B0CWYF8JT6 Publisher : Cassandra Chin, February 29, 2024

"Open and Secure: Mastering 'Threat Modeling' in Assessing the Security of Open Source Projects" Early Access PDF (free!)
by Justin Cappos with Andres Vega (and feedback and support of the CNCF Security Technical Advisory Group)
CC-BY 4.0, 2023

"Cyber Spy Hunters! (Scientists in Action)" (bio and content on the PolyPasswordHasher project) Book
by Mari Rich
Mason Crest Publishers, 2015

Print Media: Newspapers, Magazines, Tech Journals, Blogs, etc.

"How do video game companies like Game Freak keep getting hacked?" Article
Polygon, October 2024.

"Targeted by cyber crime? This study says you're probably about 40 or younger" Article
Newsday, October 2024.

"Steckt Israel hinter Vorfällen im Libanon?" Article (German)
ZDF, September 2024.

"We still don't know how the Lebanon pager attack happened. Here's what we do know about our own electronic devices" Article
CNN, September 2024.

"How a Routine CrowdStrike Update Crashed the World's Computers" Article
Bloomberg, July 2024.

"Researcher says deleted GitHub data can be accessed 'forever'" Article
TechTarget, July 2024.

"Could the 'Blue Screen of Death' happen again? Some cyber experts think so." Article
Newsday, July 2024.

"CrowdStrike outages underscores importance of incident planning" Article
IT Ops Times, July 2024.

"Lessons learned from CrowdStrike outages on releasing software updates" Article
SD Times, July 2024.

"Lessons from CrowdStrike’s Buggy Update: The Critical Importance of Robust Release Processes" Article (press coverage related to in-toto)
CNCF Blog, July 2024.

"Artifact Attestations is generally available" Article (press coverage related to in-toto)
Github Blog, June 2024.

"How TikTok is Revolutionizing Small Business Success in the U.S." Article
MSN, June 2024.

"Apple alerted Amazon about a potential cloud security risk, prompting a change in AWS's data-deletion process" Article
Business Insider, June 2024.

"UnitedHealth Cyberattack Highlights Sprawling Third-Party Risk" Article Not Publicly Available
Agenda, May 2024.

"Securing Git repositories with gittuf" Article (press coverage related to gittuf)
LWN, May 2024.

"Not Our Problem" Article
CACM, April 2024.

"GitHub vulnerability leaks sensitive security reports" Article
Tech Target, April 2024.

"How games companies can protect themselves from cyber attacks" Article
GamesIndustry.biz, March 2024.

"Top.gg supply chain attack highlights subtle risks" Article (press coverage related to TUF)
TechTarget, March 2024.

"The case against the TikTok ban bill" Article
Engadget, Yahoo Finance, etc., March 2024.

"TikTok's fate in the U.S. hangs in the balance. What would the sale of the popular app mean?" Article
CBS News, March 2024.

"Introducing gittuf: A Security Layer for Git Repositories" Article (press coverage related to gittuf)
Linux Foundation, January 2024.

"OpenSSF Election Results for Technical Advisory Council and Representatives to the Governing Board" Article (My election to the Governing Board of the OpenSSF)
Linux Foundation, January 2024.

"Introducing SBOMit: Adding Verification to SBOMs" Article (press coverage related to SBOMit)
Linux Foundation, December 2023.

"How bad could the cyberattack on Long Beach be? Experts and other cities offer clues." Article
Long Beach Post, November 2023.

"Announcing our latest book release: a comprehensive security guide to assess and fortify open source security" Article
CNCF Blog, November 2023.

"US Tech Hubs (Chinese Language)" Article
Voice of America, November 2023.

"KubeCon NA 2023, Day 2: Hitting Our STRIDE" Article (press coverage related to in-toto)
Medium, October 2023.

"Gittuf - a security layer for Git" Article (press coverage related to gittuf)
Hacker News, October 2023.

"GitHub boosts secrets scanning: A necessary step, but supply chain security is key to managing risk" Article
Reversing Labs (and other outlets), October 2023.

"Signing Docker Official Images Using OpenPubkey" Article (press coverage related to TUF)
Docker Blog, October 2023.

"Using Psychology to Bolster Cybersecurity" Article
Communications of the ACM, September 2023.

"NIST supply chain security guidance for CI/CD environments: What you need to know" Article
Reversing Labs, September 2023.

"Over-The-Air (Ota) Updates Explained: What They Do And How They Impact Your EV" Article
SlashGear, September 2023.

"Public Wi-Fi Safety: 1 in 4 People Have Experienced a Security Issue From Browsing on Unsecured Networks" Article
All About Cookies, September 2023.

"Security of Software Update Systems in 2023" Article (press coverage related to TUF)
The New Stack, August 2023.

"$1.2M Grant To Help NYU Team Secure Digital Legal Material" Article
Law 360, August 2023.

"National Science Foundation funds NYU Tandon School of Engineering project to safeguard U.S. laws and legal information against cyberattacks and malicious actors" Article
NYU Tandon Press Release, August 2023.

"TikTok Bans - Top 3 Pros and Cons" Article
Brittanica ProCon, May 2023.

"New DDoS attacks on Israel's enterprises, infrastructure should be a wake-up call" Article
Tech Republic, April 2023.

"Introducing npm package provenance" Article (press coverage related to in-toto)
Github Blog, April 2023.

"TikTok's Disastrous Day (Chinese Language)" Article
Voice of America, March 2023.

"Hashtag Trending Mar.13- Google riles Canadian government committee; GitHub to improve security; real-life lawyer sues robot lawyer" Article
IT World Canada, March 2023.

"GitHub rolling out two-factor authentication to millions of users" Article
Tech Republic, March 2023.

"The Montana Senate advanced a total TikTok ban: Are bans like these realistic, or even unconstitutional?" Article
Deseret News, March 2023.

"TikTok is as dangerous as any social media app" Article
Yahoo Finance, March 2023.

"Why Countries Are Trying to Ban TikTok" Article
New York Times, March 2023.

"Lack of insurance may have signaled Suffolk's vulnerability to cyberattack" Article
Newsday, March 2023.

"What Twitter's outage says about (over) zealous downsizing" Article
Tech Republic, February 2023.

"The biggest risks in procrastinating on iPhone, Android software updates" Article
CNBC, February 2023.

"The Biggest Risks of Using Bluetooth Trackers Like Apple AirTag, Tile" Article
CNBC (and other outlets), January 2023.

"The benefits and risks of using a password manager to protect your online identity" Article
CNBC, December 2022.

"Open source code for commercial software applications is ubiquitous, but so is the risk" Article
Tech Republic, December 2022.

"A Cyberattack Shuts the Met Opera's Box Office, but the Show Goes On" Article
NY Times, December 2022.

"Healthcare systems face a 'royal' cybersecurity threat from new hacker group" Article
Tech Republic, December 2022.

"Despite word of 'radical malware attack,' it took hours to shut down Suffolk's computer network " Article
Newsday, December 2022.

"Top cybersecurity threats for 2023" Article (press coverage related to in-toto)
Tech Republic, November 2022.

"The new iPhone 14 and iOS upgrade include some big cybersecurity changes" Article
CNBC, November 2022.

"Microsoft's latest data on hacks and why you may need new login, passwords fast" Article
CNBC, November 2022.

"KubeCon NA 2022 Day 3: Who You Trust Matters" Article (press coverage related to in-toto)
Medium Blog, October 2022.

"Hackers Targeting Tech Supply Chains Spur Security Startup Boom. Article
Bloomberg, October 2022.

"Gaming Is Booming. That's Catnip for Cybercriminals. Article
The New York Times, October 2022.

"Justin Cappos Of New York University Tandon School of Engineering On What We Must Do To Create Nationally Secure And Resilient Supply Chains" Article (press coverage related to in-toto)
Authority Magazine, September 2022.

"Trusting Trust: Humans in the Software Supply Chain Loop" Article (press coverage related to in-toto)
IEEE Xplore, September 2022.

"Software Insecurity" Article (press coverage related to in-toto)
ACM News, September 2022.

"Security hero: celebrating software updaters" Article (press coverage related to TUF)
TechHQ, July 2022.

"Securing Automotive Over-the-Air Software Updates" Article (press coverage related to Uptane)
Renesas Blog, July 2022.

"The end of Internet Explorer has been a long time coming" Article
Yahoo Finance, June 2022.

"As tech world weighs options for software supply chain security, a call for urgency" Article (press coverage related to in-toto)
Silicon Angle, June 2022.

"Apple's big motive for fighting a new antitrust law" Article
Yahoo Finance, April 2022.

"Supply chain security project in-toto moves to the CNCF Incubator" Article (press coverage related to in-toto)
CNCF Blog, March 2022.

"What makes New York vulnerable to Russian cyberattacks?" Article
City and State New York, March 2022.

"Russia bares nuclear teeth" Article
The Hill, February 2022.

"Russia May Be Primed To Hack America's Infrastructure" Article
Yahoo Finance, February 2022.

"Sigstore: Bring-your-own sTUF with TUF" (press coverage related to TUF) Article
Sigstore Blog, January 2022.

"2022 is shaping up to be an epic fight to protect data" Article
CNET, January 2022.

"Log4j: Why this massive security flaw is impacting nearly all of the internet" Article
Yahoo News, December 2021.

"Car Hackers Could Drive You Off the Road (or They Might Settle for Money)" Article
Communications of the ACM Blog, December 2021.

"As Software Supply Chain Attacks Keep Coming, TUF Gets Easier to Use" (press coverage related to TUF) Article
VMware Blog, October 2021.

"Sorry, America. You've already been hacked." Article
Yahoo Finance, September 2021.

"Default Microsoft Privacy Settings Expose 38M User Records" Article
Law360, August 2021.

"Apple needs to guard free speech while it's protecting kids" Article
Yahoo Finance, August 2021.

"Schenectady NY Cybersecurity Design Principles -- Online Bachelors Program Launch" Article
Newswire, July 2021.

"Ransomware has surged -- Why the attacks are 'going crazy right now'" Article
Yahoo Finance, July 2021.

"How is New York protecting itself from cybercrime?" Article
City and State, July 2021.

"Brainiacs Episode 6: Defending Defenders, Boosting Ideas, and Blocking Hackers" (press coverage related to Uptane and in-toto) Article
Brainiacs, June 2021.

"John McAfee fundamentally changed the way we target computer viruses" Article
Yahoo Finance, June 2021.

"A New Kind of Trust Root" (press coverage related to TUF) Article
Sigstore Blog, June 2021.

"Now Your Car is a Cybersecurity Risk, Too" (press coverage related to Uptane) Article
EE Times, May 2021.

"Apple CEO Tim Cook is right -- A more open iPhone could carry a hidden cost for consumers" Article
Yahoo Finance, May 2021.

"How Uptane Meets the Key WP.29 Cybersecurity Management System Requirements" (press coverage related to Uptane) Article
Sibros, May 2021.

"How LF communities enable security measures required by the US Executive Order on Cybersecurity" (press coverage related to TUF, Uptane, and in-toto) Article
Linux Foundation Blog, May 2021.

"Crypto price surge invites a torrent of crypto crime" Article
Yahoo Finance, February 2021.

"EnGIS Technologies joins the Uptane project further strengthening its Over-The-Air (OTA) cybersecurity" (press coverage related to Uptane) Article
Yahoo Finance, February 2021.

"Top open-source CNCF security projects and why they matter -- part 2" (press coverage related to in-toto) Article
TechGenix Blog, February 2021.

"Top open-source CNCF security projects and why they matter -- part 1" (press coverage related to TUF) Article
TechGenix Blog, February 2021.

"Interview with Prof. Justin Cappos: Creating A Better Ecosystem!" (press coverage related to CacheCash) Article
Medium.com, February 2021.

"More SolarWinds News" (press coverage related to in-toto) Article
Schneier on Security Blog, February 2021.

"The U.S. Spent $2.2 Million on a Cybersecurity System That Wasn't Implemented -- and Might Have Stopped a Major Hack" (press coverage related to in-toto) Article
Pro Publica (and many other outlets), February 2021.

"Why Russia's massive cyberattack is especially insidious" Article
Yahoo Finance, December 2020.

"'No evidence' city was cyberhacked despite work with breached company" Article
Crains, December 2020.

"New, free tool adds layer of security for the software supply chain" (press coverage related to in-toto) Article
Tech Xplore, December 2020.

"How Zoom overcame security flaws that prompted an FBI warning and an FTC probe" Article
Yahoo Finance, December 2020.

"CISA, FBI Warn of 'Imminent' Cyberthreat to U.S. Hospitals" Article
GovTech, October 2020.

"Key generation and signing ceremony for PyPI" (press coverage related to TUF) Article
Python Software Foundation, October 2020.

"New Amazon Web Services Offering Could Reduce Vehicle Software-Related Recalls" (press coverage related to Uptane) Article
Forbes, October 2020.

"Will cyber crime kill the autonomous car?" (press coverage related to Uptane) Article
Automotive World, October 2020.

"Enhancing Software Update Security With TUF (The Update Framework)" (press coverage related to TUF) Article
VMware Blog, September 2020.

"16-year-old student arrested for allegedly crippling Miami school system with cyberattack" Article
Yahoo Finance, September 2020.

"Secure Software Updates via TUF -- Part 2" (press coverage related to TUF) Article
Medium, September 2020.

"Secure Software Updates via TUF -- Part 1" (press coverage related to TUF) Article
Medium, August 2020.

"Delivering Secure Automotive OTA Updates with Uptane and OTAmatic" (press coverage related to Uptane) Article
Airbiquity Blog, August 2020.

"Protecting Connected Cars' Over-the-Air Software Updates" (press coverage related to Uptane) Article
WardsAuto, July 2020.

"How TUF can secure software systems from update vulnerabilities" (press coverage related to TUF) Article
The Server Side, July 2020.

"Is TikTok a security threat? It's complicated." Article (Also available in Portuguese)
Yahoo Finance, July 2020.

"How to avoid the worst coronavirus scams: Tech Support" Article
Yahoo Finance, May 2020.

"Tips to Staying Secure While Online Shopping: Q&A With Professor Justin Cappos, NYU Tandon School of Engineering" Article
CompareCards, May 2020.

"NordVPN Review: Worth the Price?" Article
Credit Donkey, May 2020.

"Zoom is facing heat over privacy - here are 4 more secure alternatives" Article
Yahoo Finance, April 2020.

"Will the state Legislature actually go virtual?" Article
City and State New York, April 2020.

"Can the Internet Break? And if it does, who the hell is going to fix it?" Article
MEL Magazine, April 2020.

"Open Source Framework Helps Automakers Secure OTA Updates" (press coverage related to Uptane) Article
Design2Part Magazine, April 2020.

"NYU Experts Weigh In on the Coronavirus" Article
NYU Press Release, March 2020.

"Beware of hackers: Working from home requires ramped-up cybersecurity" Article
Crain's, March 2020.

"AWS launches Bottlerocket, a Linux-based OS for container hosting" (press coverage related to TUF) Article
TechCrunch, March 2020.

"An Update PyPI Funded Work" (press coverage related to TUF) Article
The Python Software Foundation Blog, March 2020.

"How to maintain safe cybersecurity practices while transitioning workers from the office to remote workstations" Article
TechRepublic, March 2020.

"Smartphone hacks: How companies can protect executives" Article
ZDNet, March 2020.

"What the Hack Is a Dead Man's Switch?" Article
DashLane Blog, February 2020.

"Emails of Jeffrey Epstein madam Ghislaine Maxwell were hacked, her lawyer says" Article
MSN, January 2020.

"Trump's Apple threat would put every iPhone on Earth at risk" Article
Yahoo Finance, January 2020.

"Wireless vehicle updates pose big cybersecurity risk for automakers, consumers" (press coverage related to Uptane) Article
SP Global, January 2020.

"Security Vulnerabilities in Solution Deployment" (press coverage related to TUF) Article
MP3Monster's Blog, January 2020.

"Cloud Native Computing Foundation Announces TUF Graduation" (press coverage related to TUF) Article
AV Network, December 2019.

"The Update Framework graduates from the Linux Foundation's Cloud Native Computing Foundation" (press coverage related to TUF) Article
HelpNet Security, December 2019.

"Cloud Native Computing Foundation announces TUF graduation" (press coverage related to TUF) Article
Linux Weekly News, December 2019.

"Open-source system securing software updates graduates to protect leading cloud services" (press coverage related to TUF) Article
TechXplore, December 2019.

"The Update Framework becomes ninth project to graduate CNCF" (press coverage related to TUF) Article
DevClass, December 2019.

"CNCF Graduates TUF Project to Secure Software Updates" (press coverage related to TUF) Article
DevOps, December 2019.

"Cloud-native project The Update Framework hits top-level CNCF status" (press coverage related to TUF) Article
Silicon Angle, December 2019.

"Open-source system to secure software updates graduates to protect leading cloud services" (press coverage related to TUF) Article
NYU Tandon Press Release, December 2019.

"Cloud Native Computing Foundation Announces TUF Graduation" (press coverage related to TUF) Article
CNCF, December 2019.

"Pence used personal email for state business and was hacked" Article
Livingston Ledger, December 2019.

"The Linux Foundation's Automated Compliance Work Garners New Funding, Advances Tools Development" (press coverage related to in-toto's integration into SPDX and the ACT release) Article
Linux Foundation Press Release, December 2019.

"Facebook Creates Pages for Businesses Whether They Like It or Not" Article
Medium, November 2019.

"Python Announces 400K in Grants to Implement Backtracking Dependency Resolution" (press coverage related to Stork) Article
NYU Tandon PR, November 2019.

"Software giants Tor and Python head to Downtown Brooklyn" Article
Brooklyn Daily Eagle, November 2019.

"Terrorists 'could kill millions' by remotely hacking cars: experts" Article
Stock Daily Dish, November 2019.

"NYU donates office space for first Python, Tor hubs in New York" Article
Tech Republic, November 2019.

"Why governments, hospitals and, yes, schools are being held up for ransom." Article
City and State, November 2019.

"In-toto: providing farm-to-table guarantees for bits and bytes" (press coverage related to in-toto) Article
The Morning Paper, October 2019.

"What Would It Take to Shut Down the Entire Internet?" Article
Gizmodo, September 2019.

"What to do if you're a victim of the Capital One hack" Article
Yahoo Finance, July 2019.

"33(+) Kubernetes security tools" (press coverage related to in-toto and TUF/Notary) Article
Sysdig Blog, July 2019.

"Protecting update systems from nation-state attackers" (press coverage related to Uptane and TUF) Article
Linux Weekly News, July 2019.

"Top OTA Expert Shows How State Actors Hack into Your Car and What Happens Next: 'People Will Die'" (press coverage related to Uptane) Article
The Drive, July 2019.

"What is Project JEDI? Amazon and Microsoft are competing for a $10 billion Pentagon cloud program" Article
Yahoo Entertainment, July 2019.

"HERE Technologies entra na Uptane Alliance" (press coverage related to Uptane) Article
Segs.com.br, May 2019.

"Here and Uptane team on automotive/IoT security" (press coverage related to Uptane) Article
Just Auto, May 2019.

"Here Technologies joins Uptane Alliance for secure OTA for cars and IoT devices" (press coverage related to Uptane) Article
Autocar Professional, May 2019.

"Here Technologies joins the Uptane Alliance for highly-secure software updates" (press coverage related to Uptane) Article
Traffic Technology Today, May 2019.

"HERE Technologies joins the Uptane Alliance" (press coverage related to Uptane) Article
TMC.net, May 2019.

"The Risks of Marrying `Smart' Technology With `Dumb' Machines" Article
Wall Street Journal, March 2019.

"Government shutdown poses cybersecurity threat" Article
Crain's New York Business, January 2019.

"Airbiquity Bolsters OTAmatic Security" (press coverage related to Uptane) Article
Airbiquity, December 2018.

"How Cybersecurity Company Grimm Combats Car Hacking" Article
In CyberDefense, November 2018.

"This personal server lets you keep your emails entirely in your control" Article
Fast Company, October 2018.

"Who wears a white hat? To beef up vehicles' cyberattack defenses, differentiating friends from foes is key" Article
Automotive News, October 2018.

"Automotive Cybersecurity: Open Source OTA, Crypto and Market" (press coverage related to Uptane) Article
Auto Connected Car News, August 2018.

"NYU Tandon Joins Top Open-Source Initiative for Automotive Software and Cybersecurity" (press coverage related to our lab and NYU joining the Linux Foundation) Article
Business Insider, August 2018.

"Twenty-Two Organizations From AI, Automotive, Blockchain, Cloud and More Join The Linux Foundation and Invest in Open Source Technology." (press coverage related to our lab and NYU joining the Linux Foundation) Article
Business Insider, August 2018.

"How The Update Framework Improves Software Distribution Security." (press coverage related to TUF Uptane, and in-toto) Article
eWeek, July 2018.

"Container and Kubernetes Security: It's Complicated." Article
eSecurity Planet, June 2018.

"Tandon Grad Student Wins Awards for His Computer Science Research." (press coverage related to Atoms of Confusion) Article
NYU School of Engineering, June 2018.

"Securing the container image supply chain." (press coverage related to in-toto) Article
Linux Weekly News, May 2018.

"Automotive Cybersecurity." (press coverage related to Uptane) Article
Auto Connected Car News, May 2018.

"Trump's decision to eliminate role of cybersecurity czar rattles experts. Here's why." Article
NBC News, May 2018.

"Uber's self-driving cars to return to testing tracks" Article
Teiss.co.uk, May 2018.

"Security in Kubernetes -- A Look at Different Projects" (press coverage related to TUF and in-toto) Article
The New Stack, May 2018.

"Your smart speaker records you more often than you think" Article
Science Line, April 2018.

"As cities get high-tech, hackers become more dangerous" Article
Curbed, April 2018.

"A new package index for Python" (press coverage related to TUF) Article
Linux Weekly News, April 2018.

"Exploring container security: Digging into Grafeas container image metadata" (press coverage related to in-toto) Article
Google Cloud Platform Blog, April 2018.

"Urban Bungle: Atlanta Cyber Attack Puts Other Cities on Notice" Article
Scientific American, April 2018.

"Marketing, Cyber Security Professors Weigh in on Cambridge Analytica Scandal" Article
Washington Square News, March 2018.

"Lock-in-Pop: Securing Privileged Operating System Kernels by Keeping on the Beaten Path" (press coverage related to Lind) Article
Lobste.rs, March 2018.

"Chryslers over-the-air update fiasco is limited to the Northeast, but customers are still waiting for a fix" Article
The Verge, February 2018.

"Tisch Alumni Used Fake Bots to Boost Celebrity Status" Article
Washington Square News, February 2018.

"Americans Concerned About Cybersecurity of Self-Driving Cars" Article
Morning Consult, January 2018.

"Is Your Tech Spying On You?" Article
The Sun, January 2018.

"Car hacking remains a very real threat as autos become ever more loaded with tech" Article
USA Today (and dozens of others), January 2018.

"The Worst Healthcare Cybersecurity Breaches of 2017" Article
Healthcare Analytics News, December 2017.

"An overview of KubeCon + CloudNativeCon" (press coverage related to TUF) Article
LWN (Linux Weekly News), December 2017.

"Let's talk about the latest godawful cybersecurity plan" Article
Science Line, December 2017.

"Terrorists 'could kill millions' by remotely hacking cars: experts" Article
The New York Post, November 2017.

"Hackers can take control of cars with internet connectivity, warn experts" Article
Moneycontrol, November 2017.

"Hackers can cause car accidents" Article
Gears of Biz, November 2017.

"Hackers Now Able to Take Control of Cars to Cause Deliberate Accidents, Scientists Warn" Article
Independent, November 2017.

"Cyber criminals working for enemy states could 'kill millions' by remotely hacking cars, warns expert" Article
Daily Mail, November 2017.

"Hackers could take control of cars and kill millions, ministers warned" Article
The Times, November 2017.

"Linux Foundation Taps Researcher's Security Framework as Standard for the Cloud" (press coverage related to TUF) Article
NYU Tandon Press Release, November 2017.

"CNCF Adds Security, Service Mesh and Tracing Projects: Docker Notary, Lyft Envoy and Uber Jaeger" (press coverage related to TUF) Article
InfoQ, October 2017.

"Two new open-source security projects are joining the Cloud Native Computing Foundation" (press coverage related to TUF) Article
GeekWire, October 2017.

"The Cloud Native Computing Foundation adds two security projects to its open source stable" (press coverage related to TUF) Article
TechCrunch, October 2017.

"Cloud Native Computing Foundation Adopts 2 Security Projects" (press coverage related to TUF) Article
Enterprise Cloud News, October 2017.

"Japanese text" (press coverage related to TUF) Article
Tech Crunch Japan, October 2017.

"Russian text" (press coverage related to TUF) Article
NIXP, October 2017.

"La Cloud Native Computing Foundation cuenta ya con 14 proyectos" (press coverage related to TUF) Article
Silicon, October 2017.

"SD Times news digest: CNCF's two new security projects" (press coverage related to TUF) Article
SD Times, October 2017.

"Two new open-source security projects are joining the Cloud Native Computing Foundation" (press coverage related to TUF) Article
World News, October 2017.

"Linux Foundation Messages to the Media: The Cloud Native Computing Foundation adds two security projects to its open source stable" (press coverage related to TUF) Article
Tux Machines, October 2017.

"Two new open-source security projects are joining the Cloud Native Computing Foundation" (press coverage related to TUF) Article
Tech Rights, October 2017.

"The Cloud Native Computing Foundation adds two security projects to its open source stable" (press coverage related to TUF) Article
First World News Channel, October 2017.

"CNCF Brings in Notary, The Update Framework to Boost Container Security" (press coverage related to TUF) Article
eWeek, October 2017.

"CNCF's Latest Projects TUF and Notary Aimed at Security" (press coverage related to TUF) Article
SDxCentral, October, 2017.

"CNCF Brings Security to the Cloud Native Stack with Notary, TUF Adoption" (press coverage related to TUF) Article
The New Stack, October 2017.

"Popular Science names two Brooklyn technologies among top 100 inventions of 2017" (press coverage related to Uptane) Article
Technical.ly Brooklyn, October 2017.

"Cybersecurity Protocol that Fends off Automobile Hacks Named to Popular Science Magazine's List of Top 100 Technologies of the Year" (press coverage related to Uptane) Article
Sys-Con, October 2017.

"The year's most important innovations in security" (Uptane named one of the top security innovations of 2017!) Article
Popular Science, October 2017.

"The Quick Guide to Simple and Secure Automatic Updates" (press coverage related to TUF) Article
Paragon, August 2017.

"If online, beware: fraudsters proliferate" Article
The Beacon, August 2017.

"Google rolls out important update for Gmail on iOS - here's why you should download it" Article
Thai Tech, August 2017.

"Trump Hotels Hacked -- Again" Article
JetSet, August 2017.

"Hackers have been stealing credit card numbers from Trump's hotels for months" Article
The Washington Post (and dozens of other outlets), July 2017.

"Justin Cappos on Why Cars Are Not Like Computers When It Comes to Cybersecurity" Article
IEEE CyberSecurity, July 2017.

"Beware Fraudsters When You Go Online" Article
NASDAQ (and other outlets), June 2017.

"A further update on the threat situation surrounding the Petya cyber attack" Article
The Project Counsel Group, June 2017.

"Everything you need to know about the Petya, er, NotPetya nasty trashing PCs worldwide" Article
The Register, June 2017.

"Pay Up Or Lose Everything: What Madison Avenue Should Know About The WPP Ransom Hack" Article
AdAge, June 2017.

"Today's global ransomware attack weaponized software updates" Article
The Verge, June 2017.

"Three US bank chiefs fall victim to email prankster" Article
Financial Times, June 2017.

"Who's Watching You On Your Webcam" Article
Grazia, June 2017.

"WanaCrypt0r ransomware follow-up attacks likely, new variants spotted" Article
SC Media, May 2017.

"Google warns users about malicious Docs email" Article
VentureBeat, May 2017.

"'WannaCry' cyberattack: Who could be held liable for the spread of ransomware?" Article
Los Angeles Times, May 2017.

"Gmail users warned of phishing email with malicious link" Article
CBC, May 2017.

"New WanaCrypt0r variants spotted, but 'poor', version one worst over" Article
SC Media, May 2017.

"Europol teme nueva oleada de ciberataque a partir de hoy" Article
El Mercurio, May 2017.

"Cyber Security R&D Showcase Coming in July" (press coverage related to Uptane) Article
Newswise, May 2017.

"Google Docs users hit by phishing scam" Article
BBC, May 2017.

"Google Users Being Targeted With Google Doc Phishing Email" Article
Huffington Post, May 2017.

"Spam campaign targets Google users with malicious link" Article
Reuters (and dozens of others), May 2017.

"How The Update Framework Improves Security of Software Updates" (press coverage related to TUF) Article
eWeek, April 2017.

"The 42 words you can never say in emails to the D.C. government" Article
The Washington Post, March 2017.

"WikiLeaks says it will work with tech firms to defeat CIA hacking" Article
Los Angeles Times, March 2017.

"Call Issued to White Hat Hackers: Find the Flaws in New Automotive Software Updater" (press coverage related to Uptane) Article
True Viral News, March 2017.

"WikiLeaks revela el `arsenal de espionaje informatico' que habria implementado la CIA" Article
El Mercurio, March 2017.

"Mike Pence Email Hack: How the VP's private email debacle compares to Hillary Clinton's" Article
Mic, March 2017.

"Pence used personal email for state business -- and was hacked"  Article
Indianapolis Star, USA Today, and hundreds of other outlets, March 2017.

"Tandon Provides Crash Course in Computer Science"  Article
Washington Square News, February 2017.

"Automotive cyber security: Keeping hackers out of cars" (press coverage related to Uptane)  Article
Lowell Sun, February 2017.

"Wanted: White hat hackers to break new automotive software updater code" (press coverage related to Uptane)  Article
Tech Republic, February 2017.

"Automotive ECU Updates: Keeping the Hackers Out" (press coverage related to Uptane)  Article
EE Times, January 2017.

"Uptane Will Protect Your Connected Car From Hackers" (press coverage related to Uptane)  Article
Forbes, January 2017.

"Framework open source de cibersegurança para indústria automotiva é criado" (press coverage related to Uptane)  Article
iMasters, January 2017.

"Automotive software developers call on hackers to find its flaws" (press coverage related to Uptane)  Article
ITS International, January 2017.

"White hackers to seek errors in open-source cybersecurity framework for cars" (press coverage related to Uptane)  Article
BitDefender, January 2017.

"Open source cybersecurity framework for the automotive industry" (press coverage related to Uptane)  Article
HelpNetSecurity, January 2017.

"Uptane wil je 'connected car' beschermen tegen hackers" (press coverage related to Uptane)  Article
Knack, January 2017.

"Call issued to white hat hackers -- find the flaws in new automotive software updater" (press coverage related to Uptane)  Article
Phys.org, January 2017.

"White hat hackers called to poke holes in open source connected car security platform" (press coverage related to Uptane)  Article
SC Media, January 2017.

"NYU Tandon prof unveils Homeland Security-funded framework for software security in cars" (press coverage related to Uptane)  Article
Technical.ly, January 2017.

"Are software updates key to stopping criminal car hacks?" (press coverage related to Uptane)  Article
Christian Science Monitor, January 2017.

"Call Issued to White Hat Hackers: Find the Flaws in New Automotive Software Updater" (press coverage related to Uptane)  Article
Yahoo News, January 2017.

"WhatsApp's privacy woes show how messaging app tries to balance security and ease of use" Article
Los Angeles Times, January 2017.

"How Scared Should I Be of the Internet of Things?" Article
VICE, January 2017.

"Self-driving cars are prone to hacks -- and automakers are barely talking about it" Article
Business Insider, December 2016.

"Online banking privacy hack: Use 2 browsers to increase your security" Article
Tech.Mic, December 2016.

"How John Podesta's email got hacked, and how to not let it happen to you" Article
Vox, October 2016.

"A massive cyberattack blocked your favorite websites; FBI and Homeland Security are investigating" Article
Los Angeles Times, October 2016.

"11 Signs Your Computer Is at Risk of Being Hacked" Article
Good Housekeeping, September 2016.

"The lesson about email safety we can learn from Hillary Clinton and Colin Powell" Article
Vox, September 2016.

"Automotive Cybersecurity: Connected & Self-Driving Vehicles" (Bio and coverage of our Uptane project) Article
Online Engineering Programs Blog, September 2016.

"Hacker claims to be selling stolen NSA spy tools" Article
CNN Money, August 2016.

"The Update Framework" (about the TUF project) Article
Hacker News, August 2016.

"A Cybersecurity Expert Told Us What the DNC Hack Means for the Future of Democracy" Article
VICE, July 2016.

"We Asked a Cybersecurity Expert if Clinton's Email System Could Have Jeopardized National Security" Article
VICE, July 2016.

"Tandon Tech in Service to Society" Article
NYU Press Release, June 2016.

"Tandon Faculty Honored with Teaching Awards" (awarded the Jacobs Excellence in Education Award) Article
NYU Press Release, June 2016.

"How Scared Should I Be of Getting Hacked?" Article
VICE, May 2016.

"The Most Vulnerable Ransomware Targets Are the Institutions We Rely On Most" Article
Scientific American, March 2016.

"Apple Plans to Step Up Security as Congress Debates Encryption" Article
Scientific American, March 2016.

"Working in Tandem at Tandon" Article
NYU Press Release, January 2016.

"S&T Awards New York University $1.4M for Automotive Cyber Security Research" Article
DHS Science and Technology Blog, October 2015.

"A password hash storage scheme that prevents efficient password cracking" (about the PolyPasswordHasher project) Article
Hacker News, September 2015.

"The growing need for more women cybersleuths" (my students Ghada and Chandrika talking about the need for women in cybersecurity) Article
CNBC, August 2015.

"Docker: With Content Trust, You Can Run Containers on Untrusted Networks" (about the use of TUF in Docker) Article
The New Stack, August 2015.

"Introducing Docker Content Trust" (about integration of the TUF project into Docker) Article
Hacker News, August 2015.

"Why you should NEVER put your phone number on Facebook: Setting means anyone can find you using your digits" Article
Daily Mail, August 2015.

"Improving Hackage security" (about integration of the TUF project into Haskell) Article
Well-Typed, April 2015.

"Bomb Threats Shared Electronically Close Schools"
Associated Press, New York Times, (and hundreds of others), April 2015.

"Is it safe to check your personal email at work?" Article
New York Daily News, March 2015.

"Protecting Python package downloads" (related to the TUF project's integration into Python) Article
LWN (Linux Weekly News), January 2015.

"Interview with NYU-Poly's Professor Justin Cappos: Security Lessons from Retail Breaches" Article
Technoverse, Varonis Blog, January 2015.

"5 counterintuitive ways to protect against hackers" Article
CBS News, December 2014.

"Incremental Plans to Improve Python Packaging" (related to the TUF project's integration with Python) Article
Hacker News, December 2014.

"Merchants are wary of holiday hacking" Article
Crain's New York Business, November 2014.

"Brooklyn Produces More Brilliants" Article
NYU Engineering, October 2014.

"NSF Supports NYU WIRELESS Researchers Use of Psychology to Detect Software Vulnerabilities" Article
NYU WIRELESS Newsletter, October 2014.
Also featured on NYU's Engineering Newsletter Article, January 2015

"Docker Image Insecurity" (related to the TUF project's integration with Docker) Article
Titanous Blog, December 2014.

"Gamers use police hoax `swatting' to attack opponents" Article
The New York Post, September 2014.

"Repeating password raises hacking risk" Article
The Columbus Dispatch, August 2014.

"New Protection Scheme Makes Weak Passwords Virtually Uncrackable" (about the PolyPasswordHasher project) Article
Security Week, July 2014.
Also included on ACM TechNews and ASEE

"Diagnostic Tool Reveals Unexpected Errors In Complex Networked Applications" Article
Geeks World, May 2014.

"NYU Group Says Its Scheme Makes Cracking Individual Passwords Impossible" (about the PolyPasswordHasher project) Article
Slashdot, April 2014.

"TUF Love" (about the TUF project) Article
Linux Magazine, March 2014.

"Dropbox to open office in NYC" Article
Washington Square News, March 2014.

"Target's Woes May Be a Boon for Security Firms" Article
New York Times, January 2014.

"Target Breach Shows You Can Be a Victim of Cybercrime at a Brick-and-Mortar Store" Article
Time Magazine, December 2013.

"Hackers can't get much from the Obamacare site" Article
CNN Money, November 2013.

"NYU WIRELESS Professor Joins the Ranks of the 'Brilliant'" Article
NYU WIRELESS Newsletter, October 2013.

"Cybersecurity researcher joins the ranks of the 'brilliant'" Article
Crime Research, October 2013.

"TWC-funded study gauges bandwidth consumption of smart refrigerators, light bulbs" Article
Fierce Cable, September 2013.

"TWC Partners with NYC Media Lab to Further Technological Innovation" Article w/ Video Time Warner Cable Untangled, September 2013.

"How Justin Cappos Created A New Way To Cloud Compute" Article    Press Release
Popular Science (Brilliant 10 selection!), September 2013.

"Time Warner Cable partners with NYC Media Lab" Article   Press Release
CED Magazine, August 2013.

"Using Smartphones to Cure Diseases While You Sleep" Article
Bloomberg Businessweek, August 2013.

"Your mobile will tell a spy almost anything he wants to know about you" Article
The Sunday Times, June 2013.

"13 Security and Privacy Tips for the Truly Paranoid"  Article
Tech News Daily, May 2013.

"Startup Offers to Protect Printers, Phones, and Other Devices from Hackers"  Article 
MIT Technology Review, February 2013. 

"The dangers of too much Java"  Article 
PhysOrg, January 2013. 

"NYU WIRELESS faculty member receives four NSF grants"  Article 
NYU WIRELESS Pulse, October 2012. 

"Millions of iPhoners 'at risk'"  Article 
NY Post, September 2012. 

"Cappos Adds Computer Savvy"  Article 
Cable, July 2012. 

"How Cloud Computing & Web Services Are Changing the IT Job Market" Article
Mashable, February 2011.

"Attacks on Package Managers"  Article 
Linux Weekly News (LWN), April 2009. 

"Safely Using Package Managers"  Article 
Slashdot, July 2008.
(and many other venues including CERT)

Quick Links

Contact