Wed.Jul 11, 2018

article thumbnail

Labour bought data on 1m mothers and their children

The Guardian Data Protection

ICO to fine baby club Emma’s Diary £140,000 for infraction before 2017 general election The Labour party bought data on more than 1 million new and expectant mothers and their children from a leading baby club ahead of the 2017 general election. The Information Commissioner’s Office (ICO) has issued a notice of intent to fine Emma’s Diary £140,000 for the infraction.

IT 101
article thumbnail

Trusting in technology: the need for greater assurance in connected health

Thales Cloud Protection & Licensing

Whether offering instant access to patient records, allowing remote diagnosis of treatment, or giving access to lifestyle management and monitoring apps, it’s undeniable that the Internet of Things (IoT) and connected services are revolutionising the healthcare industry. Working to improve operational efficiencies and deliver a greater level of care, the now-dubbed ‘Connected Health’ market has grown to such an extent recently that it is expected to be worth more than £450 billion by 2024.

IoT 72
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The GDPR for the Little Guy (or Gal)

Weissman's World

What is the GDPR? The GDPR is the European Union’s General Data Protection Regulation, and as the EU’s new take on privacy protection, it took effect a month ago to much fanfare. Officially, it “protects fundamental rights and freedoms of natural persons, and in particular, their right to the protection of personal data.” Note the […]. The post The GDPR for the Little Guy (or Gal) appeared first on Holly Group.

GDPR 159
article thumbnail

How IoT Changes Security

Data Breach Today

Steve Rog of ForeScout Technologies on Improving Security Hygiene The growth of IoT means traditional methods of security are inadequate, says Steve Rog of ForeScout Technologies, who calls for improvements in security hygiene.

IoT 190
article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Notorious ‘Hijack Factory’ Shunned from Web

Krebs on Security

Score one for the good guys: Bitcanal , a Portuguese Web hosting firm long accused of helping spammers hijack large swaths of dormant Internet address space over the years, was summarily kicked off the Internet this week after a half-dozen of the company’s bandwidth providers chose to sever ties with the company. Spammers and Internet service providers (ISPs) that facilitate such activity often hijack Internet address ranges that have gone unused for periods of time.

IT 141

More Trending

article thumbnail

Q&A: Here’s why it has become vital for companies to deter ‘machine-identity thieves’

The Last Watchdog

We’re undergoing digital transformation , ladies and gentlemen. And we’re in a nascent phase where clever advances are blossoming even as unprecedented data breaches arise in parallel. The latest example of this dichotomy comes from Timehop, a service that enables social media users to plug into their past. On Sunday, Timehop shared details about how a hacker got into their network, conducted several reconnaissance forays, and then moved swiftly on July 4th to pilfer personal information for 21

article thumbnail

Cryptocurrency Exchange Developer Bancor Loses $23.5 Million

Data Breach Today

A Wallet Used for Upgrading Smart Contracts Was Compromised Attackers have stolen $23.5 million in cryptocurrency from Bancor, which is developing a decentralized exchange. The cause of the hack may have been a failure by Bancor to protect authentication keys that allowed for changes in its token smart contracts.

article thumbnail

Facebook labels Russian users as ‘interested in treason’

The Guardian Data Protection

Firm removes category, which affected 65,000 people, from ad tools, following safety fears Facebook’s advertising tools algorithmically labelled 65,000 Russians as interested in treason, potentially putting them at risk from the repressive state, until the company removed the category, following inquiries from journalists. The labelling raises new concerns over data-driven profiling and targeting of users on the website, which has already faced criticism for the same tool algorithmically inferri

Risk 81
article thumbnail

How Website Security Must Evolve

Data Breach Today

Carlos Pero of Zurich Insurance on Protecting the 'Castle' As a result of cloud computing and the internet of things, the approaches to security for websites must change, says Carlos Pero of Zurich Insurance.

Insurance 100
article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

How to simplify the data mapping process under the GDPR

IT Governance

As part of an EU GDPR (General Data Protection Regulation) compliance project, organisations are required to map their data and information flows. However, identifying and keeping track of all the information flowing in and out of your organisation can be challenging. What can a data flow map help with? A data flow map can help you identify all the information your organisation holds and how it’s being transferred between other data processers and/or controllers, and allows you to assess privacy

GDPR 68
article thumbnail

A Successful Strategy for Fighting Phishing

Data Breach Today

Brent Maher of Johnson Financial Group Offers Real-World Lessons Learned The key to lowering the risk of employees becoming victims of phishing is to adopt an "adult learning" approach to training, says Brent Maher, CISO at Johnson Financial Group.

Phishing 100
article thumbnail

Watchdog investigates links between Canadian data firm and Vote Leave

The Guardian Data Protection

Information Commissioner’s Office inquiry into AggregateIQ is one of many started by ICO in response to data misuse claims The Information Commissioner’s Office is investigating the relationship between the Canadian data firm AggregateIQ, Vote Leave and a number of other leave campaigns, the body has said in a report published on Wednesday. Related: Labour bought data on 1m mothers and their children Related: Facebook fined for data breaches in Cambridge Analytica scandal Related: What triggered

article thumbnail

Making a Security Career Transition

Data Breach Today

Aaron Sherman Shares Insights on Moving From FBI to the Private Sector Aaron Sherman, who recently made the transition from serving as an FBI agent investigating cybercrime and nation-state threats to working at Braintrace on ways to improve detection and response efforts, shares insights on the career change.

Security 100
article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

FRANCE: Website publisher fined for violation of the cookie requirements

DLA Piper Privacy Matters

By Denise Lebeau-Marianna and Caroline Chancé. The French Council of State affirmed the EUR 25,000 fine imposed by the CNIL on Editions Croque Futur (challenges.fr) for non-compliance with French data protection law, and in particular cookie requirements. The facts go back to 2014-2015 when the French data protection authority (the CNIL) found out that French company Editions, Croque Futur, publisher of the website challenges.fr, was infringing several provisions of the data protection law

article thumbnail

Evolving Cyberattacks Against Banks

Data Breach Today

Brian Hussey of Trustwave on How This Financial Fraud Works, and How to Mitigate the Threat A new kind of cyberattack that targeted financial institutions in Europe and Russia to steal nearly $100 million illustrates how threats are evolving, says Brian Hussey of Trustwave, who discusses mitigation steps.

100
100
article thumbnail

Major International Airport System Access Sold for $10 on Dark Web

Dark Reading

Researchers from the McAfee Advanced Threat Research team began with an open search on Russian RDP shop UAS to make their discovery.

Access 74
article thumbnail

The UK cyber security law that shipping organisations must comply with

IT Governance

The NIS Regulations (Network and Information Systems Regulations 2018) became UK law on 10 May 2018. The NIS Regulations are derived from the NIS Directive (Directive on security of network and information systems) and apply to OES (operators of essential services) and DSPs (digital service providers). The NIS Regulations aim to reduce the risk of disruption to critical services by requiring relevant organisations to protect their networks and information systems that affect the availability of

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

Brazil’s Senate Passes General Data Protection Law

Hunton Privacy

As reported by Mundie e Advogados, on July 10, 2018, Brazil’s Federal Senate approved a Data Protection Bill of Law (the “Bill”). The Bill, which is reportedly inspired by the EU General Data Protection Regulation, is expected to be sent to the Brazilian President in the coming days. The Bill will take effect 18 months after it is published in Brazil’s Federal Gazette.

IT 60
article thumbnail

This Is How Much a 'Mega Breach' Really Costs

Dark Reading

The average cost of a data breach is $3.86 million, but breaches affecting more than 1 million records are far more expensive.

article thumbnail

Senators Fear Meltdown and Spectre Disclosure Gave China an Edge

WIRED Threat Level

By not informing the US government of two industry-wide hardware flaws, Intel may have inadvertently given ammo to China's hackers.

article thumbnail

Hacker Exploits 2-Year Old Router Issue To Steal Sensitive US Military Data

Dark Reading

A moderately skilled hacker managed to steal export-restricted data pertaining to the Reaper drone and Abrams tank from computers belonging to two US Army officials.

article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

The Relationship Between AI And Cybersecurity

Cyber Info Veritas

As our use of computers and the internet increases, cyber threats also increase. While most cyber-attacks are human instigated and often ride on factors such as system vulnerabilities and human errors, as artificial intelligence (AI), machine learning, and the Internet of Things (IoT) advance at a fast pace, some people are worried about a Skynet—a Terminator reference—type of future.

article thumbnail

Critical Vulns Earn $2K Amid Rise of Bug Bounty Programs

Dark Reading

As of June, a total of $31 million has been awarded to security researchers for this year - already a big jump from the $11.7 million awarded for the entire 2017.

article thumbnail

Newsmaker Interview: Scott Helme on Securing the Web

Threatpost

Scott Helme, the well-known security researcher, international speaker and the founder of the securityheaders.com and report-uri.com free tools for web security, has devoted himself to improving the security environment of the internet for the past decade. Threatpost sat down with Helme to discuss the state of web security, particularly on the encryption front — including certificate […].

article thumbnail

What We Talk About When We Talk About Risk

Dark Reading

Measuring security risk is not that hard if you get your terms straight and leverage well-established methods and principles from other disciplines.

Risk 48
article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

How Technology Business Management clarifies federal IT spending

CGI

How Technology Business Management clarifies federal IT spending. shobana.lv@cgi.com. Thu, 07/12/2018 - 01:33. Should the government be run like a business? Or is the public sector so different that business strategies are out of place? These questions loom large in every election cycle and there are supporters and opponents for each view. In either case, government agencies need to understand their total IT costs in order to make data-driven decisions and analyze tradeoffs between cost, quality

IT 40
article thumbnail

An Alternative to Upfront Estimates

Role Model Software

Estimating the cost of custom software projects doesn’t have to be a roll of the dice. When starting a new venture such as a custom software application, we’d all like know how much it will cost to build. However, when building the first version of an application (MVP) it is nearly impossible to know the total cost upfront, but there is another way.

Risk 40
article thumbnail

Why You Need A VPN

Cyber Info Veritas

We live in an interconnected world, a world where, in an instance, someone at the other end of the world can access your private information such as location (from your IP), browsing history, and even browsing data all at the click of a button. Whether you are a personal computer user, a small business, or even a large corporation, you cannot (and should not) take your cybersecurity lightly because how safe you are while using the internet and interconnected devices determines the safety of the