Thu.Dec 19, 2019

article thumbnail

How a Password-Free World Could Have Prevented the Biggest Breaches of 2019

Dark Reading

If history has taught us anything, it's that hackers can (and will) compromise passwords. Innovation in authentication technology is poised to change that in the coming year.

article thumbnail

Don’t neglect the PECR when addressing your GDPR compliance requirements

IT Governance

With all the attention that’s been paid to the GDPR (General Data Protection Regulation) over the past two years, organisations are neglecting other data protection laws, according to figures released by the ICO (Information Commissioner’s Office). It issued 17 fines between January and September this year for breaches of the UK’s PECR (Privacy and Electronic Communications Regulations) , which outline the way organisations carry out electronic marketing and data processing.

GDPR 58
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

2020 Predictions – Quantum knows what you did last summer

Thales Cloud Protection & Licensing

Quantum computing is based on the quantum mechanics principles of superposition and entanglement. Scientists say that quantum computing will cause seismic shifts in cryptography as we know it and will put all known split key (or asymmetric) cryptographic algorithms at risk. 2019 was a milestone year for quantum computing. Google’s announcement of achieving “quantum supremacy” sparkled the debate once more over the impact of quantum computing in cryptography.

article thumbnail

The Scammer Force is Strong with Star Wars: The Rise of Skywalker

Threatpost

Phishers are using "black SEO" to lure users in to malicious downloads masquerading as the latest Star Wars movie.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Alleged Dark Overlord Member Extradited, Pleads Not Guilty

Data Breach Today

But Most of the Notorious Hacking Group Remains Elusive An alleged member of The Dark Overlord hacking group who apparently made dumbfounding operational security mistakes while trying to extort U.S. companies has pleaded not guilty. Nathan Wyatt is perhaps the only person associated with the notorious hacking group who left a clear digital trail.

Security 182

More Trending

article thumbnail

Judge: Government Can Collect Royalties From Snowden Memoir

Data Breach Today

Court Rules That Former NSA Contractor Violated Nondisclosure Agreement A federal judge ruled this week that the U.S. government is entitled to proceeds from Edward Snowden's memoir and his paid speeches because the former NSA contractor did not submit his materials to his former federal employers for review before publishing.

article thumbnail

Watch out for phishing scams this Christmas

IT Governance

Christmastime in the workplace is often a time of monumental boredom, as you put off starting any new projects before the end of the year and start counting down the days until your holiday begins. With all this time to kill, it’s easy to see how you might be more likely than usual to let curiosity get the better of you. No longer overrun with work and only responding to emails days later – at which point you’ve already discovered that the email from your colleague that you skimmed but didn’t ha

article thumbnail

US Navy Memo Raised Cyberscurity Concerns About DJI Drones

Data Breach Today

Once Classified Document Finally Released In 2017, the U.S. Army ordered that the use of drones made by Chinese manufacturer DJI be discontinued, citing security concerns. Now, a second classified memo used to support that decision has been released, revealing serious concerns about how cyberspies could intercept video and other encrypted data.

article thumbnail

More than 267 millions of Facebook user phone numbers exposed online

Security Affairs

Security researcher Bob Diachenko discovered more than 267 million Facebook user IDs, phone numbers and names in an unsecured database. Security expert Bob Diachenko, along with Comparitech, has discovered more than 267 million Facebook user IDs, phone numbers and names in an unsecured database. The huge trove of data is likely the result of an illegal scraping operation or Facebook API abuse by a group of hackers in Vietnam.

article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Top 7 Data Governance and Metadata Management Blog Posts of 2019

erwin

Data has been the driving force of the decade. Digital pioneers like Amazon, Netflix and Uber account for some of the most extreme market disruption their respective industries have faced. But such success cannot be attributed soley to head-starts. Many organizations have tried and failed to become truly “data-driven,” and many organizations will continue to do so.

article thumbnail

FBI warns travelers against using untrusted and free WiFi networks

Security Affairs

The FBI warned one again the holiday travelers about the danger of using free WiFi networks while traveling. Free WiFi networks, such as the ones in the airports and hotel, hide many dangers to the holiday travelers, for this reason, has once again published a new warning. Threat actors could leverage free WiFi networks to infect victims with malware, to steal their sensitive data or to take over their devices. “Don’t allow your phone, computer, tablet, or other devices to auto-conne

article thumbnail

FTC Announces TCPA Junk Fax Prohibitions Do Not Apply to Online Faxes

Hunton Privacy

On December 9, 2019, the Federal Trade Commission announced that online fax services do not fall under legal prohibitions against junk faxes. In a petition filed in 2017 for declaratory judgement brought by AmeriFactors Financial Group, LLC pursuant to the Telephone Consumer Protection Act (“TCPA”) and the Junk Fax Protection Act (“JFPA”), the petitioner sought clarification regarding the status of online cloud-based fax services.

Paper 71
article thumbnail

Maze Ransomware operators threaten victims to publish their data online

Security Affairs

The victims of the Maze Ransomware now face another threat because operators behind the malware could become publish their data online. The victims of the Maze Ransomware are facing another risk, after having their data encrypted now crooks are threatening to publish their data online. The Maze ransomware also implements data harvesting capabilities, operators are threatening to release the data for all those victims who refuse to pay the ransom.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

Examining Legislative Proposals to Protect Consumer Data Privacy

Data Matters

On December 4, 2019, the Senate Commerce Committee addressed data privacy in a hearing titled, “ Examining Legislative Proposals to Protect Consumer Data Privacy.” The hearing focused on the two leading privacy proposals that were put forward in the week leading up to the hearing, the Consumer Online Privacy Rights Act (COPRA), introduced by Sen. Maria Cantwell, D-Wash., ranking member on the Committee, and a Staff Discussion Draft of the United States Consumer Data Privacy Act of 2019 (CDPA),

article thumbnail

70% of Organizations Experienced Internal Data Breaches in the Last Five Years

Adam Levin

Internal data breaches are on the rise, with 70% of security professionals reporting that it’s happened to them in the last five years. According to a survey conducted by email security company Egress , accidental internal breaches are one of the top three concerns for IT security decision makers along with external hacks and malware. Among the other findings in the report, fewer than than 40% (39.6%) of organizations train best cybersecurity practices and data hygiene to employees, and 26% of r

article thumbnail

Examining Legislative Proposals to Protect Consumer Data Privacy

Data Matters

On December 4, 2019, the Senate Commerce Committee addressed data privacy in a hearing titled, “ Examining Legislative Proposals to Protect Consumer Data Privacy.” The hearing focused on the two leading privacy proposals that were put forward in the week leading up to the hearing, the Consumer Online Privacy Rights Act (COPRA), introduced by Sen. Maria Cantwell, D-Wash., ranking member on the Committee, and a Staff Discussion Draft of the United States Consumer Data Privacy Act of 2019 (CDPA),

article thumbnail

Microsoft issues an out-of-band update to address SharePoint information disclosure flaw

Security Affairs

Microsoft issues an out-of-band update to address SharePoint flaw, tracked as CVE-2019-1491, that could be exploited to obtain sensitive information. Microsoft issues an out-of-band update to fix an information disclosure vulnerability in SharePoint server, tracked as CVE-2019-1491, that could be exploited by an attacker to obtain sensitive information.

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

How Should Smart Ediscovery Professionals Prepare for Smart Cities?

Zapproved

Smart cities use IoT sensors to collect data that can improve city services and enhance citizens’ quality of life, but they also raise questions regarding data privacy and security. How should ediscovery professionals prepare for these new data sources? The post How Should Smart Ediscovery Professionals Prepare for Smart Cities? appeared first on Zapproved.

IoT 59
article thumbnail

Reality and misconceptions about big data analytics, data lakes and the future of AI

IBM Big Data Hub

With the amount of choices surrounding big data analytics, data lakes and AI, it can sometimes be difficult to tell fact from fiction. With more than 40% of organizations expecting AI to be a “game changer,” it’s important to have a complete picture of the capabilities and opportunities available.

article thumbnail

Member of the Dark Overlord hacker Group extradited to the US

Security Affairs

The DoJ announced that the alleged member of the notorious hacker group The Dark Overlord has been extradited to the United States. The Department of Justice (DoJ) announced that the alleged member of The Dark Overlord hacking group has been extradited from the United Kingdom to the US. The man, Nathan Wyatt, 39, has been charged by U.S. authorities on six counts of aggravated identity theft, threatening to damage a protected computer, and conspiracy. “A United Kingdom national appeared to

article thumbnail

Real-Time Payment Platforms Offer Fast Cash & Fast Fraud

Dark Reading

Real-time payment services like The Clearing House and Zelle will completely clear transactions in an instant.but account takeover attackers love that speed as much as you do.

52
article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

Drupal addressed several issues, including a critical file processing bug

Security Affairs

The Drupal development team released versions 7.69, 8.7.11 and 8.8.1, which address several vulnerabilities, including a serious file processing issue. Drupal developers have released versions 7.69, 8.7.11 and 8.8.1, which address several vulnerabilities, including a serious file processing issue. The most serious issue is related to the Archive_Tar third-party library, it has been assigned a severity rating of critical.

CMS 53
article thumbnail

Data Mining and Predictive Analytics

Import.IO

With big data becoming more prevalent in the business world, a lot of data terms get thrown around, with many not quite understanding what they mean. What is data mining? Is there a difference between data mining and predictive analytics? How are the two related? All of these are great. The post Data Mining and Predictive Analytics appeared first on Import.io.

Mining 52
article thumbnail

Archives*RM Testimonial #5

The Schedule

This testimonial about the intersections of archives and records management comes from Elizabeth McGorty, Archivist & Records Manager for Brooklyn Navy Yard Development Corporation. I serve as Archivist & Records Manager for the Brooklyn Navy Yard Development Corporation (BNYDC) which manages the Brooklyn Navy Yard. The Yard was once a federal ship repair facility on the Brooklyn waterfront owned and operated by the US Navy.

article thumbnail

Honda Leaks Data of 26K North American Customers

Threatpost

The leaky database was online for about a week, exposing customers' vehicles information and personal identifiable information.

article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

Lousy IoT Security

Schneier on Security

DTEN makes smart screens and whiteboards for videoconferencing systems. Forescout found that their security is terrible: In total, our researchers discovered five vulnerabilities of four different kinds: Data exposure: PDF files of shared whiteboards (e.g. meeting notes) and other sensitive files (e.g., OTA -- over-the-air updates) were stored in a publicly accessible AWS S3 bucket that also lacked TLS encryption (CVE-2019-16270, CVE-2019-16274).

IoT 64
article thumbnail

267M Facebook Users’ Phone Numbers Exposed Online

Threatpost

Researchers believe that criminals were able to obtain personal information for millions of Facebook users.

article thumbnail

Privacy Requirements & Penalties Grow, Causing Firms to Struggle

Dark Reading

Between Europe's and California's privacy laws, companies have a complex landscape to navigate in 2020. Even data-mature industries, such as financial services, see problems ahead.

Privacy 61