Data Matters

SEPTEMBER 26, 2018

Although the FTC is the primary security regulator for consumer IoT devices, there are no comprehensive regulations or laws specific to the unique challenges of the IoT market. To help offer consistent guidance regarding the privacy and security of IoT devices, the U.S. NIST initiatives in IoT.

IoT 68

IoT Privacy Manufacturing Authentication 68

Privacy and Cybersecurity Law

MAY 17, 2017

The National Institute of Standards and Technology (NIST) is holding a Cybersecurity Framework Workshop this week at its headquarters in Gaithersburg, Maryland. The purpose of the workshop is to discuss issues related to its widely used Cybersecurity Framework.

IoT 40

IoT Cybersecurity IT Manufacturing 40

CILIP

JULY 7, 2023

Three tiers (standard bronze, silver and gold) have been outlined so that each library can measure its own ‘green’ credentials and have a definitive rubric to guide future progress. Eco plant pots workshops. Many of Gloucestershire’s libraries hold creative crafting or upcycling events that, between them, cover all age ranges.

Libraries 52

Libraries IT Access Security 52

Everteam

APRIL 4, 2019

.” Superposition is essentially the ability of a quantum system to be in multiple states at the same time, a Qubit can be in any proportion of both states at once and you can’t predict which one will be, but the minute you measure it, it collapses into one of the definite states. Major Quantum Changes.

Computer and Electronics 75

Computer and Electronics Artificial Intelligence Digital transformation ECM 75

AIIM

MAY 13, 2019

As a project sponsor or agile project manager, you should definitely be on the lookout for this person, because if you can find them and secure them for your team, you will have given yourself a much-needed advantage in ensuring you ship a quality product. The Connected, Inspired, Hands-on Project Sponsor – Leading the Digital Charge.

IoT 85

IoT IT Risk Security 85

Troy Hunt

SEPTEMBER 17, 2019

CommBank will give you 16 characters: All the nonsense with @Citibank yesterday reminded me that my main bank @CommBank also has its own password security stupidity which is limiting password lengths to 16 characters. Banks like ING will give you your money bank: Hi Owen, your online banking is safe and secure with ING. Any thoughts?

Passwords 95

Passwords Authentication Security IT 95

ForAllSecure

MARCH 15, 2023

I do a lot of presentations on Mayhem, as well as security education in general. For example, I was at API World last year doing a talk about API security, and I deliver a lot of the hackathons we’ve been doing at universities in our Mayhem Heroes program. A lot of what universities teach about software security is policy.

Education 40

Education IT Security Government 40

eDiscovery Daily

FEBRUARY 7, 2019

During last year’s EDRM Spring Workshop, I discussed on this blog that EDRM had released the preliminary draft of its Technology Assisted Review (TAR) Guidelines for public comment. We avoided taking a position on which variation of TAR is more effective, because that very much depends on facts specific to each case.

IT 44

IT Education Marketing Risk 44

IBM Big Data Hub

APRIL 11, 2024

The groundwork for effectively operationalizing governance is human-centered, and includes securing funded mandates, identifying accountable leaders, developing agency-wide AI literacy and centers of excellence and incorporating insights from academia, non-profits and private industry.

Government 78

Government Education Artificial Intelligence Risk 78

Hunton Privacy

JANUARY 20, 2023

On January 20, 2023, The Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth published “Digital Assets and Privacy,” a discussion paper compiling insights from workshops with CIPL member companies that explored the intersection of privacy and digital assets, with a particular focus on blockchain technology.

Paper 134

Paper Blockchain Privacy Financial Services 134

Data Protection Report

DECEMBER 6, 2017

The Board has been active since its establishment, working on draft regulations, seeking opinions and comments from public and private institutions on those drafts, publishing user-friendly manuals, and organizing meetings, conferences and workshops to hold discussions. Definitions. The Regulation is a product of such efforts.

Personal data 40

Personal data Paper Encryption Cloud 40

ARMA International

DECEMBER 26, 2019

Just 59% of surveyed RIM professionals are included in their company’s IT strategic planning, including activities such as requirements definition and vendor selection – down from 67% in 2017. The top objection to using the cloud for digital records continues to be potential privacy or security concerns – no change from 2017.

Content services 76

Content services Cloud Records Management Privacy 76

CILIP

SEPTEMBER 10, 2018

The role of the library professional has definitely changed over the last 10 years with the evolution of technology. For example, who would have thought that public librarians would be running workshops on coding, stop motion, and 3D printing 10 years ago? but was unable to secure a position. Another said: ? one said, ?but

Libraries 40

Libraries Education Communications Marketing 40

Hunton Privacy

MAY 9, 2016

On March 16, 2016, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP co-hosted a one-day workshop in Amsterdam, Netherlands, together with the Dutch Ministry of Security and Justice, to kick off CIPL’s new long-term project on the implementation of the EU General Data Protection Regulation (“GDPR”).

GDPR 53

GDPR Compliance Privacy Risk 53

ForAllSecure

MARCH 14, 2022

In fact, I remember starting a new job by flying to Auburn Hills, Michigan for the very first meeting of the Featherstone Group, a collection of automotive OEM executive and security professionals. Steve Grobman, CTO with Intel’s security group had this to say: CNBC: Yeah, so I think that nothing is ever impossible.

Computer and Electronics 52

Computer and Electronics Government Communications Cybersecurity 52

HL Chronicle of Data Protection

OCTOBER 25, 2018

Department of Homeland Security (DHS) earlier this month. FDA also provided a definition of “patient harm” for purposes of this guidance, which is defined as “physical injury or damage to the health of patients, including death. Consistent with the U.S. Cybersecurity exploits (e.g.,

Cybersecurity 40

Cybersecurity Manufacturing Risk Communications 40

Troy Hunt

JANUARY 10, 2018

Both during this week and over previous years, there's been various headlines calling the security posture of Aadhaar into question and the Indian government has been vehemently refuting any suggestion that the system isn't top notch. But claiming the service is "hack-proof", that's something I definitely have an issue with.

Security 111

Security Government Encryption Risk 111

Adam Shostack

APRIL 23, 2020

This week’s threat model Thursday looks at an academic paper, Security Threat Modeling: Are Data Flow Diagrams Enough? I take issue with the framing of ‘enough’, as if there’s a single definition of enough that’s enough for all of us, but that’s the authors’ choice.

Paper 52

Paper Encryption Cybersecurity Security 52

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. I've got a lot of industry certifications, but having all those paper degrees proved to be a poor equivalent to having actual hands on experience in information security.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. I've got a lot of industry certifications, but having all those paper degrees proved to be a poor equivalent to having actual hands on experience in information security.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

SEPTEMBER 21, 2021

What role might the security industry have in identifying or even stopping it? Welcome to the hacker mind, in original podcast from for all security. I'm a principal on the security team at Cybereason, and I'm also a digital forensics instructor at the SANS Institute, Grooten: Martijn Grooten. So I hope you'll stick around.

Passwords 52

Passwords Access IoT IT 52

erwin

APRIL 4, 2019

In most cases, a new data governance framework requires people – those in IT and across the business, including risk management and information security – to change how they work. You can encourage feedback through surveys, workshops and open dialog. Any concerns they raise or recommendations they make should be considered.

Government 75

Government Metadata Risk Information Security 75

IT Governance

JANUARY 3, 2024

billion records The security researcher Jeremiah Fowler discovered an unprotected database exposing more than 1.5 Fowler contacted the company, which secured the database. The security researcher Bob Diachenko identified the leak in September and contacted TuneFab, which fixed the misconfiguration within 24 hours.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

Thales Cloud Protection & Licensing

MARCH 7, 2022

Thales asked six women in the cybersecurity industry to provide their opinions on how business can build an inclusive work culture and what this means for security leaders around the world. Winnie Wong , APAC Regional & Channel Marketing for Data Security products at Thales. “An Let’s hear what they have to say.

Marketing 71

Marketing Mining Cybersecurity Education 71

The Last Watchdog

FEBRUARY 28, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. Related: Companies must bear a broad security burden. Security warnings keep popping up, urging you to take immediate action or install a particular security product. Less common types.

Computer and Electronics 113

Computer and Electronics Phishing Ransomware Encryption 113

ForAllSecure

AUGUST 16, 2022

Frank, now the chief innovation officer and co founder of Tidal Security, returns to The Hacker Mind to discuss the ATT&CK, only this time from the perspective of his new company. He talks about the community platform that Tidal Security launched at Black Hat USA 2022. Vamosi: I just returned from Hacker Summer Camp 2022.

Analytics 40

Analytics IT Security Compliance 40

Troy Hunt

JANUARY 3, 2020

NewPassword: passw0rd ConfirmPassword: passw0rd This is a real request from my Hack Yourself First website I use as part of the workshops Scott Helme and I run. Any cookie that requests SameSite=None but is not marked Secure will be rejected. Imagine this request: POST [link] Cookie: AuthCookie=EF29.

Passwords 114

Passwords Security IT Risk 114

Troy Hunt

FEBRUARY 6, 2018

Here we have this absolute cornerstone of security - a paradigm that every single person with an online account understands - yet we see fundamentally different approaches to how services handle them. When I run my Hack Yourself First workshop , that's one of the first questions I ask - "what's the correct minimum password length?"

Passwords 79

Passwords Authentication Access Security 79

ForAllSecure

SEPTEMBER 14, 2022

Yeah, I think there's definitely a well-established Jeopardy style like flavor and style of capture the flag. Vamosi: The Computer Science Annual Workshop or CSAW is a well-established CTF competition in New York. It's designed by the security experts at Carnegie Mellon University, so it's kind of like a win-win for the world.

Military 40

Military IT Education Cybersecurity 40

Troy Hunt

NOVEMBER 8, 2021

Here's the attachment (shout out to Mr Robot): He's sent it to the email address I have published in my security.txt file which I put out there because I genuinely want to know if someone finds a security vulnerability in any of my things. Just look at a Twitter search for me asking for security contacts at a company.

Data breaches 27

Data breaches IT Security Libraries 27

Troy Hunt

SEPTEMBER 17, 2018

Obviously Apple have already killed it off, but even for many people on Chrome, the Comodo website actually looks very different: So it turns out that 3 different machines in my workshop today are part of the Chrome experiment to remove the EV indicator from the browser. You know what makes people think the website is "secure"?

Marketing 110

Marketing Phishing Encryption IT 110

Troy Hunt

DECEMBER 30, 2018

That was the single best financial decision we ever made and it happened well before my life as people know it today; there was no Pluralsight, no workshops, no speaking events or Have I Been Pwned or blog sponsorship - nothing. Try a Google search for life savings lost in investment scheme and you'll understand why this is so important.

Education 111

Education Marketing IT Insurance 111

Krebs on Security

OCTOBER 5, 2018

From time to time, there emerge cybersecurity stories of such potential impact that they have the effect of making all other security concerns seem minuscule and trifling by comparison. Yesterday was one of those times. Bloomberg Businessweek on Thursday published a bombshell investigation alleging that Chinese cyber spies had used a U.S.-based

Computer and Electronics 229

Computer and Electronics IT Security IoT 229

IT Governance

JUNE 15, 2018

On the other, the definition is unhelpfully vague, and the burden is on you to determine whether or not your interests in processing the personal data really are legitimate. Data Protection Impact Assessment Workshop. On the one hand, this gives you a lot of room for interpretation.

GDPR 70

GDPR Personal data Compliance Privacy 70

ForAllSecure

MAY 4, 2021

In this episode, Frank Duff, Director of ATT&CK Evaluations for MITRE Engenuity, talks about how both red and blue teams can directly benefit from ATT&CK, and how organizations -- and even some security vendors -- are now evaluating their solutions against it. government agencies. government agencies. Yeah, great but what does it do?

Government 52

Government IT Access Analytics 52

ForAllSecure

MAY 4, 2021

In this episode, Frank Duff, Director of ATT&CK Evaluations for MITRE Engenuity, talks about how both red and blue teams can directly benefit from ATT&CK, and how organizations -- and even some security vendors -- are now evaluating their solutions against it. government agencies. government agencies. Yeah, great but what does it do?

Government 52

Government IT Access Analytics 52