SecureWorld News

NOVEMBER 28, 2022

Under the proposed amendment , the onus is placed upon corporate boards and executive leadership to: Implement and maintain a written cybersecurity policy—approved annually—to protect information systems and nonpublic information stored on those systems. Have Infosec certifications and passion for #cyber and #dataprivacy.

Financial Services 71

Financial Services Cybersecurity CISO InfoSec 71

SecureWorld News

JUNE 13, 2023

It was fitting that the opening keynote panel for SecureWorld Chicago on June 8th was titled " Making the Cybersecurity Music: Navigating Challenges and Opportunities in Today's InfoSec Landscape. Well, information security, cybersecurity happens to be a critical part of the business, being able to achieve strategic objectives. "You

Cybersecurity 78

Cybersecurity CISO InfoSec Risk 78

BH Consulting

MAY 23, 2023

Repetition can lead people to over-disclose information, that could then put them at risk of identity theft and cybercrime. First published in the Journal of Cybersecurity , the research aims to understand the ‘privacy paradox’, where people share information without protecting it from others who don’t need to see it.

Artificial Intelligence 52

Artificial Intelligence Identity Theft Social Engineering InfoSec 52

Troy Hunt

NOVEMBER 22, 2022

That's a particularly sore point for me right now because of this incident just last week: This is the dumbest infosec story I’ve read in… forever? For example, the sort of data requested when filling out dodgy online competitions. neat. . :) As far as name and address they are correct.  number   U.S.

Data breaches 267

Data breaches Data privacy Hacking InfoSec 267

SecureWorld News

MARCH 8, 2023

She also spoke to the broader consequences of staff shortages and how this may affect the global cybersecurity workforce gap. And two vendor panels: There's a Bad Moon On the Rise – Are You Ready? The next opportunity to catch a SecureWorld event is SecureWorld Boston , taking place at the Hynes Convention Center on March 22-23.

Cybersecurity 78

Cybersecurity Risk InfoSec Data privacy 78

Security Boulevard

JUNE 19, 2022

A new bipartisan privacy bill, the American Data Privacy and Protection Act, “could” be the first privacy legislation in the US not doomed to fail, a story about why you should delete your location and private data in your car’s navigation system before selling it, and details on Firefox’s new privacy feature called “Total Cookie […].

Data privacy 59

Data privacy Technology InfoSec Information Security 59

Malwarebytes

OCTOBER 4, 2021

Cybersecurity Awareness Month is a fixture of the calendar now, as are Data Privacy Day, World Password Day, and a host of other well-intentioned privacy and security themed events. A lot of it is the same basic information you see on mainstream news reports, or blogs. The questions is, is anybody listening? Winding down.

Cybersecurity 125

Cybersecurity Phishing InfoSec Data privacy 125

BH Consulting

JANUARY 12, 2021

In the words of Duo Security’s Head of Advisory CISOs Wendy Nather, “This is not a marketing report to toss in your swag bag and ignore …this report will change how we think about running infosec programs.” Data Privacy Day with a difference. MORE Fines against banks for data breaches more than doubled last year.

Data privacy 52

Data privacy InfoSec DNS CISO 52

Security Boulevard

APRIL 7, 2024

Episode 324 features discussions on a significant AT&T data breach affecting 73 million customers and a sophisticated thread jacking attack targeting a journalist.

Data breaches 69

Data breaches Accountability Social Engineering Data privacy 69

Security Boulevard

JULY 28, 2021

With 90% of the data risk surface in pre-production, it’s all too easy for an insecure dataset to slide out, so data must be made safe before it is copied to non-production environments. Assure data compliance. Find and protect sensitive data and personally identifiable information.

Banking 142

Banking Marketing Digital transformation Risk 142

Notice Bored

APRIL 21, 2022

Yesterday I proposed a guideline on the information risk, security and privacy aspects of professional services. Contracting is an important control in its own right with significant information and commercial risks associated. Today, I'm exploring the preliminary phase. Is there a cultural fit, here, or a misfit?

Risk 63

Risk Data privacy Government Accountability 63

Duo's Security Blog

APRIL 29, 2022

As I immersed myself in foreign concepts around the information security industry, marketing, and business practices at scale, I grew to appreciate not just the technology we were building at Duo, but the people who built it, the diverse audiences that we addressed, and the unique problems-to-solve around security at large.

Marketing 88

Marketing InfoSec Architecture Authentication 88

Security Boulevard

SEPTEMBER 19, 2022

In recent court testimony two Facebook engineers were asked what information, precisely, does Facebook store about us, and where is it? Surprisingly they said, they don’t know.

Engineering 97

Engineering Data privacy Technology InfoSec 97

SC Magazine

FEBRUARY 8, 2021

Ultimately, he believes “this is good for businesses as, through the insurance process, they will gain better visibility into their cyber risks and measures they can deploy to keep digital operations secure and compliant to data privacy regulations.”. billion in premium. But much will rely on regulation.

Insurance 126

Insurance Cyber Insurance Cybersecurity Government 126

Security Boulevard

FEBRUARY 26, 2023

How data brokers are selling sensitive mental health data for a few hundred dollars with little attempt to hide identifying information such as names […] The post Twitter’s Paywall 2FA, Mental Health Data for Sale, Meta’s Verified Program appeared first on The Shared Security Show.

Authentication 52

Authentication Data breaches Data privacy Technology 52

Security Boulevard

MAY 12, 2024

In this first-ever in-person recording of Shared Security, Tom and Kevin, along with special guest Matt Johansen from Reddit, discuss their experience at the RSA conference in San Francisco, including their walk-through of ‘enhanced security’ and the humorous misunderstanding that ensued.

Cybersecurity 110

Cybersecurity Data privacy Technology InfoSec 110

Security Boulevard

MAY 26, 2024

Episode 331 of the Shared Security Podcast discusses privacy and security concerns related to two major technological developments: the introduction of Windows PC’s new feature ‘Recall,’ part of Microsoft’s Copilot+, which captures desktop screenshots for AI-powered search tools, and Slack’s policy of using user data to train machine learning features (..)

Technology 69

Technology Data privacy InfoSec Information Security 69

Security Boulevard

DECEMBER 31, 2023

In this episode, host Tom Eston shares the three key lessons he’s learned over his 18-year career in cybersecurity: effective communication, continuous learning, and empathy.

Cybersecurity 130

Cybersecurity Data privacy Technology InfoSec 130

Security Boulevard

MAY 19, 2024

In episode 330 Tom, Scott, and Kevin discuss the new features for iPhones and Android phones designed to warn users about secret trackers, possibly aiding in identifying stalkers.

Data breaches 64

Data breaches Technology Social Engineering Data privacy 64

Security Boulevard

JANUARY 2, 2024

One of the big questions that I often get is: How does someone become successful in a cybersecurity career? In this blog I want to share with you the three key lessons I’ve learned during my 18-year journey in the cybersecurity industry.

Cybersecurity 121

Cybersecurity Data privacy CISO Technology 121

Security Boulevard

JANUARY 7, 2024

In this episode, we discuss the most sophisticated iPhone exploit ever, Google’s agreement to settle a $5 billion lawsuit about tracking users in ‘incognito’ mode, and a new iOS app, Journal. The iPhone exploit, known as Operation Triangulation, has complex chains of events that lead to compromised iPhone security.

Data privacy 116

Data privacy Technology Mobile InfoSec 116

Security Boulevard

APRIL 28, 2024

Discussions include the impact of high-profile vulnerabilities and […] The post Privacy Challenges in Relationships, Phishing Down but Vulnerabilities Up? Despite phishing’s decreased prevalence, it remains the second most popular method for gaining initial network access.

Phishing 72

Phishing Data privacy Passwords Technology 72

Security Boulevard

APRIL 14, 2024

In episode 325, Tom and Kevin discuss a significant backdoor threat that nearly compromised Linux systems globally, stemming from an infiltration into an open-source project called XZ Utils by attackers who gained commit access and inserted a backdoor.

Cybersecurity 75

Cybersecurity Data breaches Data privacy Technology 75

Security Boulevard

NOVEMBER 5, 2023

In this episode, we explore the recent Okta breach where hackers obtained sensitive customer data via unauthorized access to the Okta support system. Next, we discuss the emerging threat of “quishing,” a combination of voice calls and phishing that preys on unsuspecting victims.

Phishing 109

Phishing Hacking Data breaches Data privacy 109

Security Boulevard

MARCH 10, 2024

In episode 320, Tom and Scott discuss the contentious issue of who is accountable when Facebook or Instagram accounts are hacked, discussing potential failings on both the user’s and Meta’s part. They explore the possibility of inadequate security measures on these platforms and the implications of Meta potentially profiting from fraudulent ads.

Media 75

Media Accountability Hacking Malware 75

Security Boulevard

MARCH 31, 2024

In episode 323, the hosts discuss two prominent topics. The first segment discusses a significant vulnerability discovered in hotel locks, branded as ‘Unsaflok,’ affecting 3 million doors across 131 countries. The vulnerability allows attackers to create master keys from a regular key, granted access to all doors in a hotel.

Data privacy 64

Data privacy Technology InfoSec Information Security 64

Security Boulevard

JANUARY 21, 2024

In Episode 313, hosts Tom and Scott discuss the world of scambaiting, discussing what it is, the tactics used, and its effectiveness in stopping scammers. They talk about popular channels like Scammer Payback and Kitboga that show these scams in progress.

Media 78

Media Accountability Hacking Scams 78

Security Boulevard

FEBRUARY 11, 2024

In episode 316, we have the pleasure to chat with Jason Haddix, a prominent influencer in the cybersecurity community. With an intriguing career path, from being a ‘computer kid’, venturing into the nascent dark web, to becoming a respected figure in the Bug Bounty space, his journey is nothing short of inspiration.

Cybersecurity 64

Cybersecurity Data privacy Technology InfoSec 64

Security Boulevard

JUNE 11, 2023

In this exciting episode of our podcast we have the pleasure of speaking with Phillip Wylie, a remarkable professional with a captivating career in cybersecurity. Join us as we discuss Phillip’s unique journey and uncover valuable insights on breaking into the cybersecurity field.

Cybersecurity 105

Cybersecurity Penetration Testing Data privacy Technology 105

Security Boulevard

JULY 23, 2023

In this episode, we discuss the recent Microsoft security breach where China-backed hackers gained access to numerous email inboxes, including those of several federal government agencies, using a stolen Microsoft signing key to forge authentication tokens. A TikTok influencer used a voice cloning app to expose a cheating boyfriend.

Scams 97

Scams Cybersecurity Authentication Government 97

Security Boulevard

MARCH 17, 2024

In episode 321, the hosts discuss how connected cars are sharing driving data with insurance companies, potentially leading to increased rates for drivers. They also talk about the anti-TikTok bill passed by the House, which could force ByteDance to sell TikTok or face a ban in app stores.

Insurance 59

Insurance Surveillance Data privacy Technology 59

Security Boulevard

JULY 9, 2023

However, there’s a catch – the app collects extensive personal data, sparking concerns about privacy. Next, we dive into the world of airline reservation scams, exposing how […] The post Meta’s Threads and Your Privacy, Airline Reservation Scams, IDOR Srikes Back appeared first on Shared Security Podcast.

Scams 97

Scams Media Data privacy Technology 97

Security Boulevard

DECEMBER 10, 2023

In episode 307, Tom and Scott debunk misinformation circulating about the iOS 17 NameDrop feature by law enforcement and others on social media. Next, they discuss the potential risks of QR code scams, detailing a real-life incident where a woman lost a significant amount of money due to a QR code scam.

Ransomware 69

Ransomware Scams Media Risk 69

Security Boulevard

NOVEMBER 6, 2022

Katie Teitler, Senior Cybersecurity Strategist at Axonius and co-host on the popular Enterprise Security Weekly podcast, joins us to discuss the role of cybersecurity in combating midterm election disinformation.

Cybersecurity 115

Cybersecurity Data privacy Technology InfoSec 115

Security Boulevard

SEPTEMBER 10, 2023

In this episode we discuss the FBI’s remarkable takedown of the Qakbot botnet, a saga involving ransomware, cryptocurrency, and the FBI pushing an uninstaller to thousands of victim PCs. Next, we explore how a major U.S. energy organization fell victim to a QR code phishing attack, highlighting the ever-evolving tactics used by attackers.

Phishing 75

Phishing Cryptocurrency Ransomware Social Engineering 75

Security Boulevard

JANUARY 14, 2024

In episode 312, Tom and Scott discuss the implications of a new law in Ohio that may require parental consent for children under 16 using social media, including the pros and cons of this legislation.

Media 64

Media Data privacy Technology InfoSec 64

Security Boulevard

JUNE 13, 2022

This week we discuss hacking ham radio with special guests Caitlin Johanson, Rick Osgood, and Larry Pesce. In this episode you’ll learn what ham radio is, why its still relevant, why would attackers want to hack ham radio, all about packet radio and APRS (Automatic Packet Reporting System), and what equipment and licensing you need […].

Hacking 124

Hacking Healthcare Data privacy Technology 124