Tue.Nov 21, 2017

article thumbnail

Millions of Computers Affected By Intel Firmware Flaws

Data Breach Today

Numerous Manufacturers Must Prep and Distribute Customized Patches Security experts are readying for more details from chipmaker Intel about two classes of vulnerabilities in its chips that could put organizations' most trusted data at risk. Millions of computers are affected, and computer manufacturers must prep and distribute customized patches.

article thumbnail

Uber Hid 57-Million User Data Breach For Over a Year

WIRED Threat Level

The ridesharing service's latest scandal combines routine security negligence with an "appalling" coverup.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Windows 10 Security Feature Broken, CERT/CC Warns

Data Breach Today

Entropy Alert: Non-Random ASLR Leaves Systems Open To Buffer Overflow Attacks Recent versions of Windows have a security problem: They're not random enough, CERT/CC warns. The problem centers on certain uses of ASLR, which is designed to block return-oriented programming techniques and code reuse attacks.

Security 164
article thumbnail

The anatomy of effective information security management

IT Governance

With the ever-increasing risks faced by every UK organisation from cyber crime, there is significantly increased pressure on every information security manager to deliver effective security. This manager and their team are expected to plan, implement and monitor suitable measures to protect confidential assets and to mitigate losses in the event of a security breach.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

House Committee Urges HHS Action on Medical Device Risks

Data Breach Today

But Some Say the Request Doesn't Go Far Enough A House committee is urging HHS to act soon on a recommendation made by its cybersecurity task force: Develop a description of the cyber risks of components of medical devices. But a task force member says Congress should be pressing HHS to take action on all of the panel's recommendations, not just one.

Risk 100

More Trending

article thumbnail

Assessing the ISMG Healthcare Security Summit

Data Breach Today

HealthcareInfoSecurity Executive Editor Marianne Kolbasuk McGee reflects on the just-concluded ISMG Healthcare Security Summit in New York in the latest edition of the ISMG Security Report. Also, PCI Security Standards Council CTO Troy Leach on ransomware.

Security 100
article thumbnail

Artificial Intelligence Can Hunt Down Missile Sites in China Hundreds of Times Faster Than Humans

WIRED Threat Level

Teaching deep learning algorithms to find surface-to-air missile sites and much more in satellite images.

article thumbnail

Key Findings from the 2017 Thales Encryption Trends Study: Australia

Thales Cloud Protection & Licensing

Security: moving up the executive stack. The last few years will be remembered for frequent, large and damaging data breaches. They’ve impacted big business and small, private and public organisations, in Australia and around the world. When it comes to data security, hackers don’t discriminate. This has made senior executives everywhere sit up and take notice, with companies concerned about being compromised and becoming tomorrow’s news headline.

article thumbnail

Ten things impacting the world: IQ of 1,000

OpenText Information Management

The notion of a super-intelligent being has been the source of both speculation and entertainment for many years. We have conceptualized modern-day super intellects through characters like the genetically blessed Sherlock Holmes, the chemically altered Lucy, and the AI-enhanced Iron Man (a.k.a. Tony Stark). While we may not have reached these fictional levels of intelligence, … The post Ten things impacting the world: IQ of 1,000 appeared first on OpenText Blogs.

article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Police face legal action over Luton airport terror detention

The Guardian Data Protection

UK-based man, who is not religious and has denounced terrorism, was detained with son en route to holiday in Rome A man detained by the police on his way to a holiday in Rome is bringing legal action against Bedfordshire police for breaching his human rights. Ziad Najm, 56, is from Iraq but has lived in Europe for more than 30 years. He was at Luton airport with his son Tarek, 30, en route to a week-long holiday when they were detained by plainclothes police officers under anti-terrorism legisla

article thumbnail

OpenText InfoArchive takes a big integration step

OpenText Information Management

When I think about OpenText™ InfoArchive, I tend to focus on the value of information, both content and data. The multitude of data types and large amounts of information that can be ingested into the InfoArchive platform take precedent. Yet, it’s the fast time to value after ingestion which is the lasting power of InfoArchive. … The post OpenText InfoArchive takes a big integration step appeared first on OpenText Blogs.

68
article thumbnail

Feds Indict Iranian for HBO Hack—But Extradition Isn't Likely

WIRED Threat Level

Months after tormenting HBO with the release of unaired episodes and *Game of Thrones* spoilers, the alleged hacker has been indicted.

article thumbnail

3 tips for successful GDPR staff training

IT Governance

When organisations look to initiate a compliance programme, the ‘people’ factor is often overlooked. Staff awareness should be a major concern for organisations looking to comply with the EU General Data Protection Regulation (GDPR). However, our 2017 GDPR Report found that less than 10% of organisations have provided GDPR staff awareness training to all employees.

GDPR 63
article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

6 Real Black Friday Phishing Lures

Dark Reading

As the mega-shopping day approaches, here's a look at six examples of phishing attacks - and ways to avoid taking the bait.

article thumbnail

Profile of the Month: Ashvin Kamaraju, Global Vice President of Engineering

Thales Cloud Protection & Licensing

“I did not plan my foray into security,” says Ashvin Kamaraju who, to date, has racked up an impressive seven-year tenure at Thales eSecurity. With a background in operating systems, file systems and storage, Ashvin was initially hired to help scale products in those areas. In the process, he developed an interest and expertise in data security. Ashvin has certainly traveled an unconventional path into a leadership role in enterprise security (believe it or not, he holds undergraduate and gradua

article thumbnail

UEA suffers data breach blunder

IT Governance

The University of East Anglia (UEA) has suffered a data breach after an email containing sensitive medical information about a staff member was sent to about 300 students. This is the second breach in five months for UEA, both of which were reported to have been caused by human error. A university spokeswoman said : This was unintentional and clearly should not have happened, and the university apologises unreservedly.

article thumbnail

Amazon Creates Classified US Cloud

Schneier on Security

Amazon has a cloud for U.S. classified data. The physical and computer requirements for handling classified information are considerable, both in terms of technology and procedure. I am surprised that a company with no experience dealing with classified data was able to do it.

Cloud 56
article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

Intel Patches CPU Bugs Impacting Millions of PCs, Servers

Threatpost

Intel released eight patches for vulnerabilities in remote management software and firmware that could allow local adversaries to elevate privileges, run arbitrary code, crash systems and eavesdrop on communications.

article thumbnail

Ten Top Next-Generation Firewall (NGFW) Vendors

eSecurity Planet

Next-generation firewalls (NGFW) are essential to IT security and make up a $10 billion market. We review ten of the best.

article thumbnail

Iranian Nation-State Hacker Indicted for HBO Hack, Extortion

Dark Reading

'Winter is coming,' DoJ official says of overseas hackers such as the alleged HBO hacker who steal intellectual property from the US.

60
article thumbnail

Uber Reveals 2016 Breach of 57 Million User Accounts

Threatpost

Uber CEO said a 2016 data breach that exposed 57 million Uber user accounts and a subsequent payment of $100,000 to a hacker to delete data and keep it a secret is inexcusable.

article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

e-Records 2017 – “Information Governance: Take Control and Succeed” Conference Recap

The Texas Record

The 2017 e-Records conference delivered on all fronts hosting a variety of vendors, local government and state agency representatives and, of course, plenty of staff from the two hosting state agencies: Department of Information Resources (DIR) and Texas State Library and Archives Commission (TSLAC). After a word from each of the hosting agencies executive directors, Mark Smith and Stacey Napier, the presentations kicked off with learning often happening simultaneously in two conference rooms th

article thumbnail

UK Information Commissioner Publishes Advice on BCR Applications under the GDPR

Hunton Privacy

On November 20, 2017, the UK Information Commissioner’s Office (“ICO”) published an article on its blog containing advice on applications for Binding Corporate Rules (“BCRs”) to comply with requirements under the EU General Data Protection Regulation (“GDPR”). BCRs, which are one of the legal mechanisms available to support transfers of personal data outside the EEA, are codified under the GDPR, prompting a number of companies to explore the possibility of applying for BCR authorization.

GDPR 49
article thumbnail

How a DMS Provides Protection: User Access Controls

Record Nations

Data breaches can cost companies millions and even billions of dollars when you add up legal fees and the cost of lost business from a decline in consumer trust. While it’s easy to blame outside forces such as hackers as the main cause of data breaches, a surprising number of breaches are due to internal […]. The post How a DMS Provides Protection: User Access Controls appeared first on Record Nations.

Access 49
article thumbnail

The new Belgian Data Protection Authority: leaner and (probably) meaner

DLA Piper Privacy Matters

Patrick Van Eecke and Peter Craddock. On 25 May 2018, the Belgian Privacy Commission will be renamed “Belgian Data Protection Authority” (BDPA) and will gain the power to impose fines. This is part of a comprehensive reform approved by the Belgian Parliament on Thursday 16 November 2017. Among the changes, the BDPA will be headed by 5 full-time commissioners, compared to 16 part-time commissioners currently, and still presided for the time being by Willem De Beuckelaer (the current P

GDPR 45
article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

Why change management is the key to digital transformation

Information Management Resources

When faced with the task of altering the entire technology infrastructure of an organization, CIOs should adopt a mission-oriented mindset.

article thumbnail

Palo Alto Networks PA Series: Next-Gen Firewall Overview and Analysis

eSecurity Planet

We review Palo Alto Networks' next-gen firewalls, which classify all traffic based on application, application function, user and content.

48
article thumbnail

A Call for Greater Regulation of Digital Currencies

Dark Reading

A new report calls for international collaboration to create more transparency with virtual currencies and track money used for cybercrime.

46