izzy's playlists!
hello vonnie
PUT YOUR BEARD IN MY MOUTH
YOU ARE THE REASON
Kiana Khansmith
★
Today's Document
DEAR READER
almost home
RMH
roma★
TVSTRANGERTHINGS
h
#extradirty
2025 on Tumblr: Trends That Defined the Year
JVL
Sade Olutola
wallacepolsom
Show & Tell
Aqua Utopia｜海の底で記憶を紡ぐ
seen from United States
seen from United States
seen from United States
seen from Philippines
seen from United States
seen from Singapore
seen from Malaysia
seen from Norway
seen from United States
seen from South Korea
seen from United States
seen from United States
seen from United States
seen from Türkiye
seen from France
seen from Canada
seen from United Arab Emirates
seen from Malaysia
seen from Japan
seen from Poland
@csid-news
Exploring The Gap Between Cybersecurity Perception And Reality
Forbes / Tony Bradley / March 10, 2017
Most company executives and security professionals have a reasonable understanding of cybersecurity. Even if they don’t fully understand the mechanics under the hood, they at least realize that there is a vast and aggressive threat landscape out there, and that their networks are under virtually constant siege from attackers.
Exclusive: Workers Still Ignoring Security Risks from Personal Devices
Infosecurity Magazine / Steve Evans / March 8, 2017
It’s no secret that many of us use personal devices for work. It’s convenient, increases productivity and means employees can use a device they know and like, rather than one forced on them by IT. However, Symantec research revealed exclusively to Infosecurity Magazine suggests that many workers are not aware of the security risks associated with using their own devices for business. This can expose IT and indeed the whole business to risks.
Consumer Reports to Grade Products on Cybersecurity
Dark Reading / March 7, 2017
Cybersecurity Self-Defense: How to Make Your Smartphone More Secure
Slate/Fieke Jansen, Helen Kilby/ March 3, 2017
E-Commerce Merchants Can Get Card Transactions Guaranteed
Forbes/ Tom Groenfeldt / February 14, 2017
Within three years merchants will no longer be liable for credit card fraud online, said Skye Spear, vice president of partnerships at Signifyd. Already firms like Signifyd, Forter and Riskified use fast, smart technology like real-time machine learning to review credit card orders coming into e-commerce operations, decide which orders are safe and guarantee those orders. If the order turns out to be fraud, the companies will reimburse the merchant. Signifyd’s charges for providing a guarantee range from about 50 to 100 basis points, or 1 percent of an order. In the future, Spear said, credit card companies could just tack that onto what they charge for their card, or retailers could simply contract directly with the guarantee providers.
IBM's Watson Goes Commercial for Cybersecurity
Infosecurity Magazine/ Tara Seals / February 13, 2017
For the past year, IBM has been investing in cognitive security, with much of this effort centered around an initiative to train Watson on the language of cybersecurity. The company has taken the next step, by launching the first commercially available technology leveraging Watson for cybersecurity.
SCOTUS Pick Neil Gorsuch Will Have Important Voice on Data Privacy
Infosecurity Magazine / Tara Seals / February 10, 2017
Neil Gorsuch has been nominated as the new president’s choice for the Supreme Court. He still has to go through Senate confirmation hearings before officially becoming the ninth Justice on the highest court, but some are already discussing his potential impact on cybersecurity and privacy law.
Data security expert Richard Stiennon, chief strategy officer at Blancco Technology Group, said that Gorsuch’s record indicates a preference for accountability in breaches and the like.
Source: Infosecurity Magazine
Arby's Gets Roasted in Breach of 300K Payment Cards
Infosecurity Magazine / Tara Seals / February 10, 2017
Fast-food roast beef emporium has remediated a breach impacting about 300,000 payment cards.
The event involved malicious software installed on payment card systems at hundreds of its corporate-owned restaurant locations across the US—however, franchises were spared.
“Although there are over 1,000 corporate Arby’s restaurants, not all of the corporate restaurants were affected,” Christopher Fuller, Arby’s senior vice president of communications, told Krebs. “But this is the most important point: That we have fully contained and eradicated the malware that was on our point-of-sale systems.”
Source: Infosecurity Magazine
Spammer's delight: Gmail weirdly doesn't see spoofed @gmail.com addresses as junk
ZDNet / Liam Tung / February 9, 2017
Google's Gmail spam filters may block the bulk of spam from hitting your inbox, but according to one researcher it won't filter spam from a spoofed @gmail.com address.
No one likes spam and for the most part Google does a great job of keeping inboxes free of it. For Safer Internet Day, Google highlighted the "geeky detective work" it does to ensure the average Gmail inbox has less than 0.1 percent spam.
Source: ZDNet
Triada Replaces Hummingbad as No 1 Mobile Threat
Infosecurity Magazine / Tara Seals / February 8, 2017
Hummingbad has been replaced as the top mobile malware threat. It has been usurped by Triada, a modular backdoor for Android.
According to Check Point Security, Triada grants super-user privileges to downloaded malware, helping it to be embedded into system processes. It has also been seen spoofing URLs loaded in the browser. And in January, based on data from the World Cyber Threat Map, Triada edged past Hummingbad, ending that baddie’s year-long reign.
Source: Infosecurity Magazine
Everything old is new again: Experts predict a flood of denial-of-service attacks
TechRepublic / Dan Patterson / February 7, 2017
The hottest trend in cyberattacks is an archaic and simplistic hacker tool. Propelled by the rise of IoT, the popularity of denial-of-service attacks rebounded in late 2016 and early 2017. Accompanying the rapid acceleration of the IoT and connected device market, warn cybersecurity experts, will be a zombie botnet swarm of network-crippling attacks.
Denial-of-service attacks are simple but effective weapons that bring down websites and services by flooding networks with junk traffic from commandeered botnets. Digital fallout will often cripple the target and ripple across the web to knock out unaffiliated but connected services and sites. "After an attack [clients] often feel angry and violated," said Matthew Prince, CEO of denial-of-service mitigation service CloudFlare in an interview with TechRepublic. "A distributed denial-of-service (DDoS) attack is not a sophisticated attack. It's the functional equivalent of a caveman with a club. But a caveman with a club can do a lot of damage."
Source: TechRepublic
University student gets 3 years' probation in cybercrime
Associated Press / Joe Mandak / February 6, 2016
A Carnegie Mellon University student who developed and sold malicious software through an online cybercriminal marketplace that allowed others to remotely control Google Android smartphones has been sentenced to three years' probation.
U.S. District Judge Arthur Schwab also ordered Morgan Culbertson, 22, to perform 300 hours of community service. The native of Churchill, a Pittsburgh suburb, had faced up to 16 months in prison under federal sentencing guidelines. But, he was spared incarceration after his defense attorney and prosecutors acknowledged his lack of a criminal record and efforts to use his prodigious computer skills constructively since he was charged in July 2015.
Source: Associated Press
The Biggest Host Of Dark Web Sites Got Hacked And Shut Down
Forbes / Lee Matthews / February 3, 2016
There was a massive disruption on the Dark Web this week. The cause: Freedom Hosting II, the single largest host of sites on the Dark Web, had been compromised. Hackers breached their systems, downloaded gigabytes of data, and then replaced web pages with a notification about the hack... along with a rather curious ransom demand.
Just how big is Freedom Hosting II? Anonymity and privacy researcher Sarah Jamie Lewis estimates that it was hosting somewhere between 15 and 20% of all sites on the Dark Web. The impact of this attack could be quite far-reaching, and while you might think that would mean that the ransom demand would be sky high that's definitely not the case.
Source: Forbes
These 10 cities have the worst malware infection rates in the US
TechRepublic / Alison DeNisco / February 2, 2017
Malware attacks are on the rise across the US, but some cities are more susceptible than others, according to a recent report from Enigma Software Group (ESG). In 2016, Tampa, Orlando, and St. Louis each had malware infection rates per capita more than five times the national average—the highest in the US, the report found.
Those same three cities were also at the top of the list of highest infection rates in 2015.
Source: TechRepublic
House Passes Bill to Tighten DHS Insider Threat Defenses
BankInfo Security / Eric Chabrow / February 1, 2017
Legislation to tighten insider threat defenses at the U.S. Department of Homeland Security has passed the House of Representatives on a voice vote.
The Department of Homeland Security Insider Threat and Mitigation Act of 2017, or HR 666, approved Jan. 31, would establish an insider threat program within the department to:
Provide training and education for DHS personnel on how to identify, prevent, mitigate and respond to insider threat risks to the department's critical assets;
Furnish investigative support regarding potential insider threats that may pose a risk to the DHS's critical assets; and
Conduct risk mitigation activities for insider threats.
Source: BankInfo Security
An IndyCar archive left unprotected online, details on 200k racing fans exposed
Security Affairs / Pierluigi Paganini / January 31, 2017
The notorious expert Chris Vickery has discovered an open Rsync server hosting the personal details for at least 200,000 racing fans.
Further analysis revealed that data belongs to the archive of a defunct racing forum called DownForce that was a component of a platform used by IndyCar.
Source: Security Affairs
Over four billion data records were stolen in 2016
ZDNet / Zack Whittaker / January 30, 2017
"No industry, organization size or geographic location, is immune to a data breach."
That's the bottom line to Risk Based Security's recently published end-of-year data breach report, which concluded that over four billion records had been stolen during 2016.
The report confirmed that three companies accounted for half of the records stolen in breaches reported last year.
Source: ZDNet