Page 23 - Euro Security Watch

CISO Trainings

Equifax Gets a New CISO

Mathew J. Schwartz • February 13, 2018

After suffering one of the worst data breaches in history, in which 145.5 million U.S. consumers' personal details were stolen, credit bureau Equifax has hired Jamil Farshchi to serve as its new CISO. Farshchi joins from Home Depot, which hired him after suffering a massive data breach.

Forensics

Attribution Games: Don't Rush to Blame

Mathew J. Schwartz • February 13, 2018

Following the online attack against the opening ceremonies of the Olympic Winter Games in South Korea, some pundits were quick to guess that Russia was involved. But some attribution experts call the rush to attribute any cyberattack premature or even "irresponsible."

Encryption & Key Management

Google Set to Name and Shame Sites Lacking HTTPS

Mathew J. Schwartz • February 9, 2018

Google is prepping its Chrome browser to brand as "not secure" every site a user tries to visit that does not use HTTPS encryption by default. The move is meant to push more sites to use HTTPS to secure communications and help block eavesdropping and man-in-the-middle attacks.

Governance & Risk Management

Fitness Dystopia in the Age of Self-Surveillance

Mathew J. Schwartz • February 5, 2018

Orwell got it wrong: People are less likely to surrender their privacy to a totalitarian state than to the lure of sharing holiday snaps, cat videos or the route and time they took for their latest cycling, jogging or kiteboarding outing, as captured by a wearable fitness device.

Endpoint Security

Expect More Cybersecurity 'Meltdowns'

Mathew J. Schwartz • January 24, 2018

Technology giants are still struggling to identify what's at risk from the Spectre and Meltdown flaws in modern CPUs, never mind getting working security updates into users' hands. In the meantime, expect a rush by researchers to find more flaws in microprocessor code.

Breach Notification

Equifax Breach Victims: UK Count Goes Up

Mathew J. Schwartz • January 22, 2018

Data broker Equifax has released a revised count of U.K. victims of its massive 2017 data breach, now saying 860,000 residents had their personal details exposed. The data broker is offering its own fraud-monitoring services to breach victims, provided they share their personal details.

Endpoint Security

Warning: Microsoft Fix Freezes Some PCs With AMD Chips

Mathew J. Schwartz • January 8, 2018

Security teams are scrambling to put in place fixes for the Meltdown and Spectre flaws. But Windows users report that Microsoft's security fix for the flaws has been freezing some PCs built with CPUs from chipmaker AMD. Here are workarounds.

Endpoint Security

Top 5 Ways to Hack a Business

Mathew J. Schwartz • January 2, 2018

Simulated attacks by an information security testing firm have found that fresh WannaCry, NotPetya and EternalRocks would still rip through many an enterprise network. Here's how organizations must respond.

Endpoint Security

Trump Administration: 'North Korea Launched WannaCry'

Mathew J. Schwartz • December 19, 2017

The Trump administration has belatedly announced that hackers tied to the government of North Korea were behind the WannaCry ransomware outbreak that began in May and infected more than 200,000 endpoints across 150 countries. Why is the White House only now airing its attribution?

Fraud Management & Cybercrime

Don't Be a Money Mule for the Holidays

Mathew J. Schwartz • December 10, 2017

Cybercriminals continue to rely on individuals who undertake the risky operation of moving illicit proceeds from one location to another. But these "money mules" face a multitude of risks, including imprisonment, police warn.

Breach Notification

Report: Uber Paid Florida 20-Year-Old $100,000 Over Hack

Mathew J. Schwartz • December 7, 2017

The hacker to whom Uber paid $100,000 to destroy data and keep quiet about its big, bad breach is a 20-year-old man living in Florida, Reuters reports. But numerous questions remain about the 2016 breach, including whether the payment was a bug bounty, extortion payoff or hush money.

Cloud Security

Parliament Admits to Unsafe Email Habits

Mathew J. Schwartz • December 6, 2017

Parliament to the populace: Do as we say, not as we do. How else to characterize multiple U.K. lawmakers' flagrant disregard for the data privacy laws that they themselves voted into effect?

Breach Notification

Equifax UK Breach Notification Demands Victims' Details

Mathew J. Schwartz • November 29, 2017

Fool me once, shame on you. Fool me twice, shame on me. That's the situation facing victims of Equifax's massive data breach, who are being offered identity theft or fraud monitoring services from none other than Equifax. First, however, they have to share some personal information.

Data Loss Prevention (DLP)

Russia's Accused Hacker Repeat Play: Extradition Tug of War

Mathew J. Schwartz • November 28, 2017

Are you an accused Russian hacker who's been detained on foreign soil at the request of U.S. authorities? Bad news: While Mother Russia will go to court to try to bring you home, your odds of resisting U.S. extradition don't look good.

Anti-Phishing, DMARC

Drive-By Phishing Scams Race Toward Uber Users

Mathew J. Schwartz • November 23, 2017

Give crooks credit for topicality: They remain loathe to miss a trick. Indeed, hardly any time elapsed after Uber came clean about the year-old breach it had concealed before crack teams of social engineers unleashed appropriately themed phishing messages designed to bamboozle the masses.