Federal Trade Commission Fines Equifax and Facebook

Hot on the heals on each other, Equifax and Facebook have each settled for large fines in unrelated privacy and data breach cases. All I can say is “about time” and “is that all?”

The FTC has fined Facebook $5 billion for data misuse and other issues related to Cambridge Analytica, the European GDPR, the last US Presidential Elections, and the Brexit campaign.  This ...

Continue Reading →
7
AUG
1

Computers and Internet, cybersecurity, Facebook, law and policy

Guest Post – Accreditation vs. Certification vs. Registration in the ISO world

Things with ISO standards can get really complicated: there are many ISO management standards – the most popular ones are ISO 9001, ISO 14001, ISO 27001, ISO 22301, ISO 20000, etc. – and there are a multitude of ways to get accredited/certified/registered related to those standards. But, that’s not all – there is a difference if you want to certify your company, or if you want to certify as an individual.

So, ...

Continue Reading →
5
AUG
0

certification, cybersecurity

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

FSB hackers drop files online

Russia is working to de-anonymize TOR.  A hacking group that distributed files stolen from a Russian contractor to the media last week has published some of the documents online.

IRS Reminds Tax Professionals: Create a Data Security Plan

Original release date: July 24, 2019

The Internal Revenue Service (IRS) ...

Continue Reading →
3
AUG
0

TOR, Weekend Update, WordPress

, , , , , ,

Lateral Phishing – A New Threat to Business Email

Phishing is getting better and harder to detect.  One new trend is using hijacked business email accounts to pivot further into a business, by using the built in trust of the company’s email domain to send phishing emails that appear to come from coworkers.  These phishing emails from trusted sources are used to hijack other email accounts in the same company.  This ...

Continue Reading →
31
JUL
0

Computers and Internet, cybersecurity, email, multi-factor authentication, passwords, Phishing

Don’t Get Emotional!

Social engineers have many tricks up their sleeves, and we have covered many of them in previous articles.  The biggest trick is phishing emails, of course, coupled with replica landing pages on hijacked websites.  Other methods include phone calls, such as fake tech support calls.  There are texting hoaxes, called smishing.  There are fake, cloned, or hijacked Facebook, LinkedIn, Twitter, and Instagram ...

Continue Reading →
29
JUL
0

cybersecurity, Facebook, Phishing, social engineering, social networks

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Programmer from hell plants logic bombs to guarantee future work

At some dark moment, have you ever wondered: what if the programmers are adding the bugs deliberately?

Yubico Security Keys with a Crypto Flaw

Wow, is this an embarrassing bug:  Yubico is recalling a line of security keys used by the U.S. government due ...

Continue Reading →
27
JUL
0

cybersecurity, encryption, Google, Weekend Update

,

20th Annual System Administrator Appreciation Day

From SysAdminDay.com

Your network is secure, your computer is up and running, and your printer is jam-free. Why? Because you’ve got an awesome sysadmin (or maybe a whole IT department) keeping your business up and running. So say IT loud; say IT proud …

Happy SysAdmin Day!

Wait… what exactly is SysAdmin Day? Oh, it’s only the single greatest 24 hours on the planet… and pretty much the most ...

Continue Reading →
26
JUL
0

Computers and Internet

Page 117 of 278 «...90100110115116117118119...»