Federal government agencies are still fighting the last cybersecurity war, the one where computer networks had a strong, defensible perimeter, according to a new report by 451 Research.The battlefronts have moved, but federal security professionals …
Report: Federal agencies still fighting the last war Read More »
The FBI may have backed off from its demand that Apple build a backdoor to an iPhone security mechanism, for now at least, but experts say that a lasting legacy will remain in terms of the educational impact of the battle.John Oliver’s 18-minute seg…
FBI, Apple battle may leave lasting legacy Read More »
In a survey released today, 27 percent of of U.S. office workers at large companies would sell their work password to an outsider, compared to a global average of 20 percent.And despite all the recent media attention on data breaches, password hygie…
27% of US office workers would sell their passwords Read More »
A new report released by Shape Security yesterday details how the Sentry MBA tool makes credential stuffing attacks more widely available to cybercriminals.The traditional “brute force” method of breaking into a user account requires the attacker to…
Sentry MBA makes credential stuffing attacks easy and cheap Read More »
The email comes from a trusted source — the CEO, a regular vendor, the company attorney or accountant. It’s part of an ongoing conversation, the format and language is identical to previous emails of the same type.
There might even be phone calls….
Business email compromise fraud rising fast, hard to fight Read More »
The FTC is on a data breach enforcement roll. Last summer, the courts allowed it to fine companies with weak cybersecurity practices. Now, the FTC is taking a closer look at payments processing, checking to see how auditors measure compliance with i…
FTC orders nine PCI auditors to share assessment details Read More »
As little as four years ago, only about a third of companies considered cybersecurity when planning a merger. Today, that percentage has flipped.”When you look at mergers where one big company buys another big company, I’d estimate that the cybersec…
Cybersecurity no longer merger afterthought Read More »
The market for next-generation endpoint security tools has doubled each of the last two years, and will continue to grow at a compound annual growth rate of 67 percent for the next five years — but that growth could skyrocket if more vendors are ce…
Next-generation endpoint security tools ready to replace antivirus Read More »
In a recent study of a million client devices over the course of 10 months in 2015, every web gateway allowed outbound malicious communications — though some gateways did better than others.The report, released in mid-February by Seculert, showed t…
Report: Web gateways fail to stop malicious outbound communications Read More »
Cybercriminals and hacktivists face many of the same hiring problems as defending security organizations, but with their own particular twists, according to report released this morning.There is a lack of qualified candidates for jobs such as malwar…
Cybercriminals face hacker talent shortage Read More »
The U.S. Senate recently proposed a cybersecurity disclosure bill that would require public companies to describe what cybersecurity expertise their boards have, or, if they don’t have any, what steps the companies are taking to get some expertise o…
Firms expect greater government cybersecurity oversight Read More »
Verizon is known for its huge annual Data Breach Investigations Report, but this morning it released a less data-heavy digest organized by case study.
The digest tells the stories of 18 common scenarios that many attacks fall into, and is intended …
Verizon releases first-ever data breach digest with security case studies Read More »
The biggest driver of encryption technology is the need to comply with privacy or data security regulations, according to a new report.In a survey of more than 5,000 business and IT managers, 61 percent told the Ponemon Institute that compliance was…
Report: Compliance biggest driver of encryption Read More »
Firms are detecting breaches nearly 30 percent sooner than before, according to a new report from Mandiant, but attackers are also getting more aggressive in their methods by demanding millions for not releasing data, or erasing all systems around t…
Firms detect breaches sooner, but attackers have gotten nastier Read More »
Despite widespread public condemnation, Hong Kong toy maker VTech is not backing down from a change in its Terms and Conditions ducking its responsibilities in the event of a breach.
European customers now have to agree to a Terms of Service that includes the following sentence: “You acknowledge and agree that any information you send or receive during your use of the site may not be secure and may be intercepted or later acquired by unauthorized parties.”
This was in response to a data breach the previous fall which affected about 5 million parent accounts and more than 6 million children’s’ accounts. The children profiles included names, genders, birthdates, headshots and chat logs while the parent accounts included email addresses, passwords, secret questions and answers, IP addresses, and mailing addresses.
To read this article in full or to leave a comment, please click here
VTech not backing down on terms change after data breach Read More »
