Schneier on Security

APRIL 24, 2024

The law can’t stop privacy consent from being a fairy tale, but the law can ensure that the story ends well. In the United States, the notice-and-choice approach predominates; organizations post a notice of their privacy practices and people are deemed to consent if they continue to do business with the organization or fail to opt out.

Data collection 237

Data collection Risk 237

eSecurity Planet

FEBRUARY 2, 2024

Within the last couple of months, smart device vulnerabilities have been piling up, prompting businesses to protect their Internet of Things (IoT) environments. But that doesn’t just include thermostats, printers, and other connected devices that you have to protect — it now means electric cars, too.

Hacking 125

Hacking IoT Firmware Cybersecurity 125

Daniel Miessler

JULY 21, 2021

There isn’t enough good content, or. Some people would balk at that, and say he’s horribly biased and you can’t trust anything he says. Who else has the incentive to deeply analyze this problem, other than those who have oriented a business around solving it? There isn’t one, really.

Mobile 353

Mobile Marketing Information Security 353

Troy Hunt

NOVEMBER 14, 2023

We already know it's 437GB, but it's the breadth of column headings that's most stunning; here's all 414 of them: Just by eyeballing these, it really doesn't feel like the sort of data that comes from a healthcare provider, a brands company or a scheduler. It's a legitimate , honest , legal business model.

Healthcare 305

Healthcare Insurance Data breaches Scams 305

The Last Watchdog

APRIL 8, 2024

And to some extent, they don’t always deal with the reality of what the situation really is. “So when a CISO or anybody comes into a board room and says, ‘if we don’t do this, this is going to happen,’ it makes them all feel anxious and they start to close down their thought processes around it.”

CISO 210

CISO Risk Cybersecurity Insurance 210

Daniel Miessler

AUGUST 7, 2022

And the timing couldn’t have been worse, with the story about Amazon sharing Ring footage with police only a few weeks old. "Why But when I hear something new is bad, I don’t just jump on with everyone else. For small businesses in the medical field? I don’t. " Let's explore. So how about it?

Small Business 250

Small Business Internet Internet Government 250

Schneier on Security

DECEMBER 5, 2023

Surveillance has become the business model of the internet, and there’s no reasonable way for us to opt out of it. The technologies aren’t perfect; some of them are pretty primitive. Siri and Alexa and “Hey Google” are already always listening; the conversations just aren’t being saved yet.

Surveillance 335

Surveillance Internet Internet Government 335

Daniel Miessler

SEPTEMBER 29, 2020

This doesn’t mean it can’t still happen. That moment hasn’t happened (yet), but I think we’ve become the frog in the boiling cyber-water. Business disruption is the ultimate argument. According to Datto, Ransomware attacks are costing businesses more than $75 billion a year. It’s annoying 2.

Ransomware 246

Ransomware Government Social Engineering Small Business 246

Jane Frankland

MARCH 27, 2024

And I can’t help but be concerned that technology, especially advancements in artificial intelligence, is not just reshaping our world; it’s actually reshaping our identity and the fabric of trust that binds us. Businesses need to be unwavering in their human approach. It’s a tall order, no doubt.

Technology 130

Technology Artificial Intelligence Authentication Scams 130

Krebs on Security

JULY 27, 2020

Identity thieves who specialize in running up unauthorized lines of credit in the names of small businesses are having a field day with all of the closures and economic uncertainty wrought by the COVID-19 pandemic, KrebsOnSecurity has learned. But the same crime can be far more costly and damaging when thieves target small businesses.

Identity Theft 354

Identity Theft Small Business Energy and Utilities Computers and Electronics 354

Jane Frankland

APRIL 17, 2024

You see in the realm of clicks and codes; trust isn’t just important—it’s the bedrock. Without upholding digital trust, with every click, we not only risk security breaches, fraud and the misuse of our data but one’s own company’s reputation and the very foundation of our business operations.

Identity Theft 204

Identity Theft Digital transformation Technology Risk 204

The Last Watchdog

APRIL 30, 2024

Related: Why proxies aren’t enough Microsoft had used illegal monopolistic practices to crush Netscape Navigator thereby elevating Internet Explorer (IE) to become far and away the No. Acohido Pulitzer Prize-winning business journalist Byron V. Department of Justice. 1 web browser. IE’s reign proved to be fleeting.

Internet 130

Internet Internet Engineering Authentication 130

Schneier on Security

JANUARY 31, 2024

Since most of us can’t reasonably avoid getting a loan or using a credit card, we’re forced to share our data. Worse still, you don’t have a right to even see your data or vet it for accuracy, let alone limit its spread. The CFPB’s simple and practical rules would fix this.

Banking 244

Banking Financial Services Marketing Data privacy 244

Dark Reading

NOVEMBER 9, 2023

The cybersecurity skills gap is making businesses more vulnerable, but it won't be fixed by upskilling high-potential recruits alone.

Cybersecurity 119

Cybersecurity 119

Schneier on Security

APRIL 6, 2021

What’s clever about this scam is that the victim is an Uber driver and the scammer is the passenger, so the driver is naturally busy and can’t see what the scammer is doing. The scammer convinces the victim to lend them their cell phone, and the scammer quickly clones it.

Scams 260

Scams 260

Schneier on Security

DECEMBER 5, 2023

Surveillance has become the business model of the internet, and there’s no reasonable way for us to opt out of it. The technologies aren’t perfect; some of them are pretty primitive. Siri and Alexa and “Hey Google” are already always listening; the conversations just aren’t being saved yet.

Surveillance 291

Surveillance Government Advertising Marketing 291

Schneier on Security

JULY 7, 2023

But they aren’t talking about how that power comes from all of us. Figuring out who contributed to which words the AIs output would be both challenging and invasive, given that even the companies themselves don’t quite know how their models work. This won’t supersede normal copyright law, of course.

Technology 246

Technology Small Business Artificial Intelligence Government 246

Krebs on Security

JULY 21, 2023

But one aspect of that vaunted list that hasn’t shifted much since is that very few of these companies list any security professionals within their top executive ranks. “If the company isn’t going to give them legal cover, then why give them the responsibility for security? . Image: IANS Research.

CSO 204

CSO CISO Insurance Risk 204

Troy Hunt

NOVEMBER 19, 2021

The one thing I'll change in the future (and I don't know when I'll next do this outdoors, TBH) is to plug the RØDE lapel mic into the wireless unit.

Wireless 283

Wireless Mobile 283

The Last Watchdog

MAY 24, 2023

Hackers can hurt your business or organization in many ways. If a cyber-criminal uses you as a way to get at your customers, suppliers, or employees, these vital business relationships can turn sour. Finally, don’t forget the bad press that results for businesses when they are hacked. Keep remediation costs in mind.

Cybersecurity 203

Cybersecurity Backups Data breaches Technology 203

Troy Hunt

JULY 28, 2023

IoT, breaches and largely business as usual so I'll skip that in the intro to this post and jump straight to the end: the impending HIBP domain search changes. As I say in the vid, I really value people's feedback on this so if nothing else, please skip through to 48:15, listen to that section and let me know what you think.

IoT 161

IoT Passwords Accountability 161

Troy Hunt

JANUARY 21, 2022

It's mostly breaches this week and that's mostly business as usual, except for one. I didn't know whether I should speak about the one that frankly, upset me, but I felt it would be somewhat disingenuous not to.

Retail 251

Retail 251

Jane Frankland

MARCH 8, 2024

International Women’s Day is one of those annual landmarks that shouldn’t just be about the magnolia-laden rhetoric and floral tributes. Sadly, this doesn’t surprise me. I can’t help but question if we’ve polarised the movement’s narrative. Who’s Asking the Right Question?

Banking 130

Banking Government Technology Cybersecurity 130

Krebs on Security

AUGUST 25, 2023

19, 2023, someone targeted a T-Mobile phone number belonging to a Kroll employee “in a highly sophisticated ‘SIM swapping’ attack.” ” T-Mobile has not yet responded to requests for comment. . ” T-Mobile has not yet responded to requests for comment.

Mobile 193

Mobile Cyber Risk Cryptocurrency Data breaches 193

Malwarebytes

APRIL 8, 2024

Our business solutions remove all remnants of ransomware and prevent you from getting reinfected. Our business solutions remove all remnants of ransomware and prevent you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

Small Business 79

Small Business VPN Data breaches Education 79

CyberSecurity Insiders

DECEMBER 19, 2022

Mobile devices may not have changed fundamentally in recent years, but the way they are used within businesses has. Here’s what the work-from-anywhere phenomenon means for mobile security and BYOD management, and how administrators can meet newfound challenges while also protecting the business and respecting employee privacy.

Mobile 129

Mobile Risk Government Software 129

Security Affairs

MARCH 1, 2024

The Hungarian business of the European discount retailer Pepco Group has been the victim of a phishing attack, crooks stole about 15 million euros ($16.3 “Pepco Group (“Pepco” or the “Group”) has been the target of a sophisticated fraudulent phishing attack in its Hungarian business.” Crooks stole €15.5

Retail 95

Retail Banking Phishing Cyber Attacks 95

Krebs on Security

DECEMBER 6, 2023

Accredited registrars don’t have to participate, but ICANN is asking all registrars to join and says participants can opt out or stop using it at any time. The service can’t be used to request WHOIS data tied to country-code top level domains (CCTLDs), such as those ending in.de (Germany) or.nz (New Zealand), for example.

Phishing 223

Phishing Internet Internet Scams 223

The Last Watchdog

APRIL 4, 2022

Hackers don’t discriminate based on the number of employees or the size of the IT budget. The same types of security risks impact businesses, whatever their size. Day in and day out, small-to-medium businesses are targeted by cyberattacks. Hackers aren’t looking for buckets of cash.

Hacking 223

Hacking Penetration Testing Data breaches Authentication 223

Troy Hunt

JULY 21, 2022

Never a dull moment in data breach land, more from there next week 😊 References The Yoda 3D print looks amazing (just don't touch his stick) New flash - social media platform collects lots of data! seriously, the TicTok hyperbole got a bit too much this week) What if. some free stuff is actually free? (you're

Data breaches 277

Data breaches Media 277

Schneier on Security

SEPTEMBER 2, 2022

Government officials in the country of just over 600,000 people said certain government services remained temporarily disabled for security reasons and that the data of citizens and businesses were not endangered. Russia is being blamed, but I haven’t seen any evidence other than “they’re the obvious perpetrator.”

Retail 241

Retail Government Ransomware Information Security 241

Schneier on Security

MARCH 22, 2021

The scammers convince the victims to give them remote access to their computers, and then that they’ve mistyped a dollar amount and have received a large refund that they didn’t deserve. One, it illustrates the complex business nature of the scam: there are a lot of people doing specialized jobs in order for it to work.

Banking 338

Banking Scams Computers and Electronics Social Engineering 338

Hacker Combat

DECEMBER 18, 2023

An inactive Facebook business page won’t do your brand any good; sometimes, it may be best to delete it and start fresh. The post How To Delete a Facebook Business Page? Deleting a page is straightforward and can be. appeared first on Hacker Combat.

78

78

Troy Hunt

NOVEMBER 19, 2022

with a very clear result) Have I Been Pwned didn't get pwned (I can't believe how this got written in the first place, nor how anyone ever even took it seriously 🤦‍♂️) Sponsored by: Varonis. this one is a poll.

Government 208

Government 208

eSecurity Planet

FEBRUARY 26, 2024

Frequently Asked Questions (FAQs) Bottom Line: Cross-Site Scripting Endangers Data, Applications & Business Reputation How Does Cross-Site Scripting Work? The vulnerability exists in the code, and security teams won’t be able to see that unless they know the programming language in which the page is written.

Risk 104

Risk Financial Services Engineering Software 104

SecureBlitz

JANUARY 4, 2023

It is no surprise that most business owners have to use software solutions to keep afloat and compete with the best in the industry. Without software solutions, most businesses will end up being outpaced by the competition.

Software 86

Software Cybersecurity 86

Malwarebytes

MARCH 25, 2024

Last week on Malwarebytes Labs: New Go loader pushes Rhadamanthys stealer Canada revisits decision to ban Flipper Zero Patch Ivanti Standalone Sentry and Ivanti Neurons for ITSM now 19 million plaintext passwords exposed by incorrectly configured Firebase instances Apex Legends Global Series plagued by hackers Tax scammer goes after small business (..)

Small Business 79

Small Business Architecture Media Passwords 79