Google Adwords Malvertising Campaign Targets Apple Macs
Apple Mac owners using the Google search engine may have been infected via malicious ads at the tip-top of their search results last week after attackers launched a malvertising campaign against Google Adwords. In an act of gumption or plain cheek, the attackers’ malicious lure of choice was a phony ad for one of Google’s…
Despite the DDoS attacks, don’t give up on Dyn or DNS service providers
The DDoS attacks that flooded Dyn last month and knocked some high-profile Web sites offline don’t mean businesses should abandon it or other DNS service providers, Gartner says. In fact, the best way to go is to make sure critical Web sites are backed by more than one DNS provider, says Gartner analyst Bob Gill.
PCI 3.2 Compliant Organizations Are Likely GDPR Compliant
PCI DSS version 3.1 will be retired on October 31, 2016, with version 3.2 being the only valid version beginning the 1st of November. From that date, any new validation of PCI compliance will have to be against version 3.2. The new requirements will, however, be considered ‘best practices’ until Feb. 1, 2018 when they…
Microsoft Launches Security Program For Azure IoT
Microsoft has launched a new program for its Azure cloud platform to help business customers strengthen their security posture amid the rise of the Internet of Things. Security and privacy concerns are top of mind for IT pros as the IoT continues to grow within the enterprise. Many struggle to verify the security of their…
Healthcare industry is the bullseye for hackers in 2017
Healthcare is the most cyber attacked industry according to the 2016 IBM X-Force Cyber Security Intelligence Index. In the same report just a year ago — when financial services held the top spot — healthcare wasn’t even in the top six. The IBM report states that more than 100 million patient records globally were breached last…
How To Build A Strong Security Awareness Program
At the Security Awareness Summit this August in San Francisco, a video clip was shown that highlights the need to develop holistic security awareness. The segment showed an employee being interviewed as a subject matter expert in his office cubicle. Unfortunately, all his usernames and passwords were on sticky notes behind him, facing the camera…
Let’s Clean Up The Internet By Taking Responsibility For Our Actions
Someone has to clean the house, shovel the walk, and mow the lawn. As we grow to adulthood, we realize that this person is us. We either do it ourselves, or we have to earn enough to pay someone else to do it. The Internet has reached a point where we need to take responsibility…
Data Leaked by Pagers Useful for Critical Infrastructure Attacks
Pagers are still used in industrial environments and many organizations don’t realize that the messages sent with these devices can be highly useful to malicious actors looking to launch a targeted attack. After analyzing the use of pagers in the healthcare industry, researchers at Trend Micro have focused their attention on the risk they pose…
Black Hat Europe 2016 S: How Artificial Intelligence Will Liberate Security
T. Kuhn’s The Structure of Scientific Revolution outlined an episodic model in which periods of “normal science” were interrupted by periods of “revolutionary science.” It challenges us as a society to consider new paradigms, to change the rules of the game, our standards and our best practices. The advent of applied Artificial Intelligence (AI), also…
Global City CIOs Launch New Organization to Promote Best Smart City Practices
Major city chief information officers (CIO) have banded together to launch their own club in the interest of trying to move the bar on urban IT projects. The club, called the Council of Global City CIOs, includes city IT managers from San Francisco, Washington, D.C., Chicago, New York City, The Hague, Dubai, Boston and Seattle….