The Last Watchdog

JUNE 15, 2023

The World Wide Web Consortium today announced a standardization milestone for a new browser capability that helps to streamline user authentication and enhance payment security during Web checkout. Customer authentication For the past 15 years, e-commerce has increased as a percentage of all retail sales.

Authentication 100

Authentication Communications Financial Services Retail 100

Thales Cloud Protection & Licensing

JANUARY 20, 2022

How to activate multifactor authentication everywhere. The impact of not having multifactor authentication (MFA) activated for all users is now well known by enterprises. Verizon’s Data Breach Investigation 2021 Report indicates that over 80% of breaches evolve phishing, brute force or the use of lost or stolen credentials.

Authentication 71

Authentication Data breaches Access Retail 71

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today. The app heavily encrypts all user financial data.

Data Privacy 83

Data Privacy Privacy GDPR Personal data 83

Thales Cloud Protection & Licensing

JUNE 24, 2021

How FIDO 2 authentication can help achieve regulatory compliance. One common denominator in all regulations is the need for strong authentication. Strong authentication is the key to eliminate a large percentage of cyber-attacks, including those based on stolen credentials and subsequent credential stuffing.

Authentication 71

Authentication Compliance GDPR Personal data 71

Security Affairs

DECEMBER 21, 2022

CyberNews researchers reported that Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Our research team discovered an exposed instance hosting a trove of data for Ecco. Original post @ [link]. What happened?

Retail 100

Retail Manufacturing Sales Phishing 100

Troy Hunt

APRIL 14, 2024

Data breach verification: that seems like a good place to start given the discussion in this week's video about Accor. Watch the vid for the whole thing but in summary, data allegedly taken from Accor was published to a popular hacking forum and the headlines inevitably followed. It's Device Trust tailor-made for Okta.

Authentication 88

Authentication Retail Data breaches Cloud 88

Thales Cloud Protection & Licensing

OCTOBER 23, 2018

So before the shopping frenzy begins, we thought this would be an opportune time to outline some best practices that both retailers and consumers should follow in order to protect consumer data. As convenience technologies evolve, look for more risks to consumers and retailers. Protecting Consumer Data is Priority #1.

Retail 70

Retail Data breaches Phishing Authentication 70

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. As the infrastructure changes, the adversaries change along with it to take the easiest path to data. Strong Customer Authentication (SCA).

Security 143

Security Retail Authentication Big data 143

Thales Cloud Protection & Licensing

JANUARY 10, 2022

In the latest episode of Thales Security Sessions podcast , I was asked by Neira Jones to join Simon Keates, Head of Strategy and Payment Security at Thales and share my thoughts about the major security and organizational challenges retailers and other financial services organizations are facing. Pandemic has changed us all.

Retail 126

Retail Security Financial Services Authentication 126

The Last Watchdog

MAY 3, 2021

All of the technical innovation cybersecurity vendors are churning out to deal with ever-expanding cyber risks, at the end of the day, come down to protecting encrypted data. PKI revolves around the distribution of digital certificates to validate the authenticity of websites.

Encryption 200

Encryption Retail Digital transformation Cloud 200

Thales Cloud Protection & Licensing

NOVEMBER 20, 2022

As the holiday season approaches, many retail, hospitality, logistics, and food manufacturing organizations hire seasonal workers to meet increasing demand. The Bureau of Labor Statistics reports a 7% job rise in the retail industry. How to Secure Access for your Seasonal Workers. Mon, 11/21/2022 - 05:36.

Access 71

Access Retail Security Authentication 71

Krebs on Security

OCTOBER 1, 2021

30 , the FCC said it plans to move quickly on requiring the mobile companies to adopt more secure methods of authenticating customers before redirecting their phone number to a new device or carrier. In a long-overdue notice issued Sept. ” The FCC said the proposal was in response to a flood of complaints to the agency and the U.S.

Passwords 283

Passwords Authentication Communications Retail 283

Security Affairs

JUNE 5, 2023

The BBC and British Airways were both impacted by the data breach suffered by the payroll provider Zellis. As a result of the cyber attack on the payroll provider Zellis, the personal data of employees at the BBC and British Airways has been compromised and exposed. reads the advisory published by the company.

Data breaches 83

Data breaches Retail Cybersecurity Personal data 83

Thales Cloud Protection & Licensing

NOVEMBER 25, 2021

Many retailers and shipping services are planning to hire temporary workers for the upcoming holiday season. That’s 50,000 more seasonal employees than the retailer brought in at the end of 2020, noted CNBC. Many organizations already have robust authentication solutions in place for their permanent workers.

Access 71

Access Retail Authentication Risk 71

Krebs on Security

SEPTEMBER 12, 2018

wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer’s phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device. The four major U.S.

Authentication 195

Authentication Retail Passwords Access 195

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2 billion fine in 2023.

GDPR 83

GDPR Compliance Personal data Privacy 83

The Last Watchdog

SEPTEMBER 24, 2018

Already having our primary access points for code and infrastructure behind strong authentication requiring two factor authentication (2FA), we learned that SMS-based authentication is not nearly as secure as we would hope, and the main attack was via SMS intercept. In fact, SMS attacks are being refined and improved daily.

Access 159

Access Authentication Retail Cloud 159

Security Affairs

AUGUST 9, 2021

In addition to the encryption of data, victims have received threats that data stolen during the incidents will be published.” Ransomware operators also stole data from the victims and leaked it online when they refused to pay the ransom. This activity has occurred across multiple industry sectors. in Australia since 2020.

Ransomware 113

Ransomware Retail Security Manufacturing 113

The Last Watchdog

MAY 9, 2023

Cavanagh As a latecomer to the hyperscale data center market , Oracle focused on its heritage of helping large enterprise customers securely and efficiently run their mission critical systems and applications, Cavanagh told me. Amazon had introduced Amazon Web Services in 2006 and Microsoft Azure became commercially available in 2010.

Cloud 195

Cloud Digital transformation Military Retail 195

The Last Watchdog

SEPTEMBER 22, 2023

Benefits of PrivX •Eliminates static credentials with passwordless authentication and just-in-time access, enabling easy implementation of Zero Trust access management solution. Core of SSH Zero Trust PrivX is a modern PAM solution that helps organizations to control and manage access to their critical systems and data.

IT 100

IT Retail Communications Access 100

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

Many airports today are engaged in multiple and large-scale digital transformation efforts, such as moving IT data to the cloud, sharing real-time flight and ground status with airport workers, and even implementing a BYOD (bring-your-own-device) policy for employees. Integrate separate siloed systems to limit data sprawl.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls. We live in a digital world in which we engage with significant social, government, retail, business and entertainment services now delivered without any direct human service management. Tue, 10/11/2022 - 06:46. million customer records.

Personal data 71

Personal data Data breaches Government Authentication 71

Krebs on Security

FEBRUARY 1, 2024

In a SIM-swapping attack, the crooks transfer the target’s phone number to a device they control, allowing them to intercept any text messages or phone calls sent to the victim, including one-time passcodes for authentication or password reset links sent via SMS.

Blockchain 229

Blockchain Ransomware Retail Analytics 229

Security Affairs

JANUARY 17, 2022

The IT giant pointed out that many of these vulnerabilities can be exploited by remote attackers without authentication. The highest CVSS v3.1 Base Score (10.0) was assigned to vulnerabilities affecting Oracle Communications Applications. The company will also address flaws in Oracle Essbase having a CVSS v3.1 Base Score of 9.9.

Communications 110

Communications Financial Services Big data Retail 110

IT Governance

NOVEMBER 23, 2023

The financial sector is quite heavily regulated, and involves a lot of confidential data. You’d therefore expect that the sector fares better at data security than your average organisation. In fact, in 2020–2022, the financial sector was the second-most attacked sector, topped only by the retail and manufacturing sector.

Risk 104

Risk Data breaches Authentication Financial Services 104

Security Affairs

FEBRUARY 10, 2022

Use strong multi-factor authentication methods such as biometrics, physical security tokens, or standalone authentication applications to access online accounts. Authenticate calls from third party authorized retailers requesting. Authenticate calls from third party authorized retailers requesting.

Authentication 96

Authentication Passwords Retail Education 96

Security Affairs

JANUARY 24, 2024

The company said that the ransomware attack took place on Friday night and impacted only one data center in Sweden. Impacted customers include Sweden’s largest cinema chain Filmstaden (the attack disrupted its online ticket system) and the discount retail chain Rusta. Tietoevry notified law enforcement and impacted customers.

Ransomware 115

Ransomware Government Retail Cloud 115

Thales Cloud Protection & Licensing

NOVEMBER 22, 2017

This year is expected to see similarly high numbers which is paralleled by increasing retailer anxiety about the state of their cybersecurity. In fact, according to our recent survey of retailers , 88% feel vulnerable to data threats. Digital payment data is created, shared and stored in more places than ever before.

Risk 90

Risk Retail Digital transformation Authentication 90

Adam Levin

NOVEMBER 17, 2020

Mobile payment platforms, like Apple Pay and Google Pay, use advanced technology, like fingerprint authentication and tokenization (in which credit card account numbers are replaced by randomly generated numbers) to provide brick-and-mortar shoppers with an added layer of security. Shop at reputable and recognizable retailers.

Retail 97

Retail e-Delivery Passwords Phishing 97

The Last Watchdog

FEBRUARY 3, 2021

The intruders got in by tricking UScellular retail store employees into downloading malicious software on store computers. Once the attacker is in, they can find data on other employees or customers that they can leverage into further attacks. I always recommend, if there’s an option with multi factor authentication, to NOT go by SMS.

Phishing 252

Phishing Access Authentication Passwords 252

IBM Big Data Hub

FEBRUARY 14, 2024

Promote cross- and up-selling Recommendation engines use consumer behavior data and AI algorithms to help discover data trends to be used in the development of more effective up-selling and cross-selling strategies, resulting in more useful add-on recommendations for customers during checkout for online retailers.

Artificial Intelligence 88

Artificial Intelligence Retail Unstructured data Insurance 88

Adam Levin

APRIL 10, 2019

A security analysis of 30 major banking and financial apps has shown major security holes and a lax approach to protecting user data. Among the most alarming finding was the practice of embedding and hard-coding of private certificates and API keys into banking apps.

Retail 74

Retail Security Insurance Encryption 74

Krebs on Security

AUGUST 12, 2018

“The cyber criminals typically create fraudulent copies of legitimate cards by sending stolen card data to co-conspirators who imprint the data on reusable magnetic strip cards, such as gift cards purchased at retail stores,” the FBI warned.

Phishing 213

Phishing Authentication Retail Encryption 213

OpenText Information Management

APRIL 15, 2024

For most businesses, AI has introduced a new mindset, a new way to think, a new appreciation for trust and data, and a new outlook on how to unleash human potential. Yet conference attendees who are ready to take flight with AI have questions: Where is the data? Is it ready to run models? Can the results be trusted?

Cloud 67

Cloud Compliance Government Retail 67

Threatpost

OCTOBER 2, 2020

Account takeover fraud (ATO) attacks are on the rise, up nearly 300 percent since last year.

Retail 89

Retail Authentication Security 89

Security Affairs

SEPTEMBER 3, 2023

LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM) Social engineering attacks target Okta customers to achieve a highly privileged role Talos wars of customizations of the open-source info stealer SapphireStealer UNRAVELING EternalBlue: inside the WannaCry’s enabler Researchers released a free decryptor for the Key (..)

Security 111

Security Ransomware Data breaches IoT 111

Security Affairs

JUNE 7, 2023

“a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to MOVEit Transfer’s database.” ” reads the advisory published by the company. The company has yet to determine the number of impacted employees.

Ransomware 83

Ransomware Retail Personal data Authentication 83