Schneier on Security

APRIL 9, 2024

US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials. From the executive summary: The Board finds that this intrusion was preventable and should never have occurred.

Government 102

Government Cloud Access Security 102

The Last Watchdog

NOVEMBER 14, 2023

Tasks like code review, test case generation, systematically generating, storing, and managing configuration files, and infrastructure provisioning are prime candidates for automation. The AI model can then review new code changes automatically. Responding in real-time But AI-powered issue-spotting goes beyond simple code review.

Artificial Intelligence 262

Artificial Intelligence Cybersecurity Analytics Authentication 262

eSecurity Planet

SEPTEMBER 8, 2023

Technology reviews can be a temptingly easy way to gain insight into the often impenetrable world of enterprise cybersecurity products, but you need to know how to use them. To help, we’ll cover the pros, built-in biases, and suitability of each type of technology review and how to use each review type as a buyer.

Cybersecurity 104

Cybersecurity Marketing Energy and Utilities Access 104

The Last Watchdog

JANUARY 2, 2024

Organizations need to invest in cybersecurity training programs to educate their employees about security best practices. By incorporating automated security testing tools and conducting regular code reviews, organizations can identify and remediate vulnerabilities in a timely manner. Conduct regular security testing and code reviews.

Risk 202

Risk Security awareness Education Compliance 202

Krebs on Security

APRIL 27, 2023

Vermont’s Chief Information Security Officer Scott Carbee said his security teams have been conducting a full review of their Salesforce Community sites, and already found one additional Salesforce site operated by the state that was also misconfigured to allow guest access to sensitive information. ”

Access 285

Access Authentication Information Security Communications 285

Schneier on Security

FEBRUARY 1, 2024

Consumer Reports is reporting that Facebook has built a massive surveillance network: Using a panel of 709 volunteers who shared archives of their Facebook data, Consumer Reports found that a total of 186,892 companies sent data about them to the social network. This isn’t data about your use of Facebook.

Archiving 127

Archiving Privacy IT Data Privacy 127

The Guardian Data Protection

NOVEMBER 29, 2023

Four groups claim no legal basis exists for setting up the Federated Data Platform which facilitates information sharing The NHS has been accused of “breaking the law” by creating a massive data platform that will share information about patients. They plan to seek a judicial review of its decision. Continue reading.

Privacy 101

Privacy IT 101

The Last Watchdog

SEPTEMBER 7, 2022

In general, contractors must be prepared to divulge details about the people, technology, facilities and external providers — just about anything that intersects with their position in the supply chain. Auditable reviews. as a kick-starter to stop procrastinating about cyber hygiene basics should reap greater benefits.

Cybersecurity 289

Cybersecurity Digital transformation Compliance Risk 289

Security Affairs

OCTOBER 23, 2023

” The City of Philadelphia announced that it is conducting a comprehensive, programmatic and manual review of the potentially impacted email accounts. Once the review is completed, the City will confirm the identities and contact information of potentially impacted individuals and will notify them.

Data breaches 115

Data breaches Phishing Access Cybersecurity 115

Troy Hunt

APRIL 14, 2024

Data breach verification: that seems like a good place to start given the discussion in this week's video about Accor. I couldn't confirm the authenticity of the data either and I wrote a short thread about it during the week: I'm not convinced this data is from Accor.

Authentication 88

Authentication Retail Data breaches Cloud 88

HID Global

FEBRUARY 22, 2024

People of different ages think about security differently. We review these inherent differences in this podcast episode.

Security 59

Security 59

HID Global

FEBRUARY 22, 2024

People of different ages think about security differently. We review these inherent differences in this podcast episode.

Security 52

Security 52

Data Matters

OCTOBER 19, 2021

The FTC, in its own words, “blanket[ed] industry” with these notices to send a “clear message” that companies cannot use “fake reviews and other forms of deceptive endorsements” to “cheat consumers and undercut honest businesses.”. Periodically search for what people are saying, and follow up if you find questionable practices.

Authentication 97

Authentication Privacy IT 97

KnowBe4

JULY 14, 2022

You may want to be careful about clicking on a student loan forgiveness ad. The Tech Transparency Project reviewed the top Google searches with 'student loan forgiveness' and found almost 12% of the ads were showing potential malicious intent.

Security awareness 112

Security awareness Security 112

IT Governance

FEBRUARY 16, 2024

We sat down to chat to him about industry challenges in 2024. About that “GDPR-like legislation”, could you please elaborate? Management in all organisations should consider the following five points: Review your privacy notice – ensure that it’s up to date and reflects the jurisdictions you’re processing personal data in.

Data Privacy 117

Data Privacy GDPR Compliance Privacy 117

eDiscovery Daily

MAY 23, 2023

Reporting, such as an understanding of existing data types, who is speaking to whom over email, texts, and chats, and testing of potentially relevant terms and phrases can help teams understand the content of their data and formulate a strategy that saves time and money in terms of what must be hosted and reviewed later.

Data collection 69

Data collection Access IT Security 69

Hunton Privacy

MARCH 20, 2023

The orders request information from 2019 through the present about the companies’ standards and policies related to paid commercial ads and the companies’ processes for screening and monitoring for compliance with those controls, including human review and use of algorithmic, machine learning or automated systems.

Sales 113

Sales Compliance IT Artificial Intelligence 113

CILIP

JANUARY 16, 2024

CILIP welcomes publication of Sanderson Review of Public Libraries CILIP has welcomed the publication of the findings of Baroness Sanderson of Welton’s Independent Review of Public Libraries, announced today at an event at the House of Lords attended by our CEO, Nick Poole.

Libraries 86

Libraries Government Education Communications 86

Schneier on Security

JULY 3, 2023

“We’re supposed to be able to go about our business in our day-to-day lives without being surveilled unless we are suspected of a crime, and each little bit of this technology strips away that ability.”

Privacy 126

Privacy Marketing Access Security 126

eSecurity Planet

FEBRUARY 21, 2024

A firewall audit is a procedure for reviewing and reconfiguring firewalls as needed so they still suit your organization’s security goals. Audits raise questions about firewall functionality, as well as force teams to get granular about who’s in charge of firewall rules.

Compliance 113

Compliance Risk Access Sales 113

Security Affairs

APRIL 27, 2024

. “BenefitsCal took immediate steps to protect you by temporarily inactivating your account. Someone that was not allowed may have accessed your account between March 1, 2023 and February 13, 2024. BenefitsCal is notifying impacted users and providing them with instructions on what they can do. ” continues the notification.

Access 113

Access Passwords Data breaches Security 113

Schneier on Security

JUNE 28, 2023

The stalkerware company LetMeSpy has been hacked : TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared little to no data with LetMeSpy.

IT 77

IT Data breaches 77

Security Affairs

MARCH 4, 2024

Amex recommends customers review their account statements over the next 12 to 24 months and enable instant notifications via the company’s mobile app to receive notifications about potential suspicious activity. Amex told customers that would not be responsible for any fraudulent charge on their account.

Data breaches 106

Data breaches Access IT Security 106

Security Affairs

MARCH 1, 2024

The Hungarian business of the European discount retailer Pepco Group has been the victim of a phishing attack, crooks stole about 15 million euros ($16.3 The press release doesn’t provide technical details about the attack, however it was likely victim of a Business Email Compromise (BEC) attack. Crooks stole €15.5

Retail 102

Retail Phishing Access IT 102

Security Affairs

FEBRUARY 16, 2024

For more information about Exchange Server’s support for Extended Protection for Authentication(EPA), please see Configure Windows Extended Protection in Exchange Server.” Experts recommend also private organizations review the Catalog and address the vulnerabilities in their infrastructure.

IT 118

IT Cybersecurity Authentication Risk 118

eDiscovery Daily

JANUARY 24, 2024

Initially envisioned as a routine project, the scope expanded, revealing hundreds of GBs of data that demanded thorough review within just 10 days. The data needed to be collected, processed, hosted, reviewed, and produced within this tight timeframe. Download the webinar to learn more.

Education 41

Education Communications 41

Schneier on Security

APRIL 28, 2023

My latest book, A Hacker’s Mind , is filled with stories about the rich and powerful hacking systems, but it was hard to find stories of the hacking by the less powerful. Here’s one I just found. So if you’re at a large company and there are rumors of layoffs, go to HR and initiate a complaint against a manager.

IT 91

IT 91

Data Matters

SEPTEMBER 6, 2022

Passage of the bill comes on the heels of US Congressional inquiries about the use and protection of health data collected by mental health apps and an uptick in private litigation in the area. The settlement provides an instructive roadmap about CCPA issues that are top of mind for the OAG. Review financial incentive disclosures.

Privacy 197

Privacy B2B Sales Compliance 197

Security Affairs

DECEMBER 14, 2023

We’re a bit baffled by this and concerned about the implications for our network security. We reached out via Reddit Chat to gather more details and have our leads review immediately.” Has anyone here experienced anything similar?

Access 121

Access Cloud Security IT 121

CILIP

JANUARY 23, 2024

Sanderson Report Shows that libraries are part of something bigger UK media, leading writers, including two former Children's Laureates, and library advocates including CILIP CEO, Nick Poole came out in force to defend public and school libraries in response to Baroness Sanderson’s Review of Libraries.

Libraries 52

Libraries Risk Government Access 52

eDiscovery Daily

MARCH 17, 2022

Messages can also be viewed through our 24-hour thread feature which increases review speeds by permitting the numbering, tagging, and production of individual messages while displaying the full context of a conversation. The key difference between ESI Analyst and traditional review is our way of processing modern data.

IT 73

IT 73

Hanzo Learning Center

NOVEMBER 3, 2022

From being able to review the company’s history for internal reasons or to demonstrate regulatory compliance, good record-keeping across all the facets of this global business is vital. We asked our key contact about the company's seismic changes in record keeping throughout 20 years of impressive growth.

Compliance 92

Compliance Archiving 92

Security Affairs

OCTOBER 26, 2023

“We had previously announced on August 10, 2023, about the unauthorized access to our servers (*). The group published samples of some data allegedly exfiltrated from the company network, including passport scans and projects of new watches. This unauthorized access was the result of a ransomware attack.

Data breaches 131

Data breaches Ransomware Cybersecurity Personal data 131

Data Matters

OCTOBER 13, 2021

Firms should review their policies, procedures, and communication monitoring to ensure that employees are not engaging in business-related communications outside of the firm’s official channels and in a manner that the firm is unable to capture and preserve if required. conducting renewed employee training on the above requirements.

Communications 156

Communications Marketing Privacy Compliance 156

Security Affairs

NOVEMBER 10, 2023

The company became aware of anomalous activity on or about August 22, 2023, and immediately launched an investigation with the help of third-party forensic experts. As part of an ongoing investigation, McLaren undertook a thorough review of the potentially impacted files to determine whether any sensitive information was present.

Data breaches 115

Data breaches Ransomware Insurance Manufacturing 115