You may want to review the specific language in your cyber liability insurance policy… #cyber #insurance
scmagazine.com/analysis/rans…
Wow! This is troubling… Data shared included: • Income
• Filing Status
• Refund amount
• Health savings account usage
• Dependents’ college scholarship amount
#privacy #fintech #personalfinance
NEW: Major tax filing companies, like H&R Block and TaxAct, have been sending your information to Facebook as you file your taxes online.
The penalties for disclosing data without consent could be steep. themarkup.org/pixel-hunt/202…
This certainly raises legal & ethical issues.
vice.com/en/article/y3pnkw/u…
#privacy #internetsecurity #legal #ethics #surveillance
I'm not taking a position on his guilt or innocence in this case, but there is at least one clear takeaway: If you're a CISO, make sure you are covered by your company's D&O insurance - and get it in writing!
www-nytimes-com.cdn.ampproje…
Vulnerability & patch management may not current buzzwords in cybersecurity, but they are fundamental and required. Ignoring it not only puts your organization at risk, but now might result in problems with the FTC.
fcw.com/security/2022/07/ftc…
#cybersec #infosec #vulnerabilities
Maybe they were listening! Unfortunately, we’ll have to wait until the research is published in June to learn the names of the offenders. #privacy #CyberSec #infosec
thenextweb.com/news/muting-y…
Keith Young retweeted
Someone DMed me about automated pen test tools. Since I ranted about vuln scanners, what's my take on them?
IDK... I'm of two minds. Bottom line, it's more how you view/use the tool. But let's explore some of the nuance. (and boy is there a ton here!)
1
The (security) journey never ends...
#PatchTuesday #cybersecurity #patchmanagement #microsoft #security
threatpost.com/microsoft-wor…
Well, this could get interesting...
#cybersecurity #infosec #log4j #vulnerability #appsec #Security
therecord.media/ftc-warns-le…
T-Mobile compromised (yet) again. At what point do customers decide T-Mobile can't be trusted and take their business elsewhere?
#cybersecurity #securitybreach #databreach #tmobile
theverge.com/platform/amp/20…
Reusing passwords is a bad idea. Reusing a password for your password manager is a REALLY bad idea!
Oh, and while you're correcting things, enable MFA.
#cybersecurity #passwords #mfa #security
therecord.media/lastpass-con…
Microsoft's response to vulnerabilities reported to them back in March: "Meh. We might fix some of them later...might not." #cybersecurity #microsoft
thehackernews.com/2021/12/re…
No rest for the weary... But, hey, since we've all had so much practice lately patching log4j, patching these 2 new Microsoft vulnerabilities should be easy...right? #cybersecurity #microsoft #patchmanagement
bleepingcomputer.com/news/mi…
Keith Young retweeted
A lot of cybersecurity just feels like technical debt, fixing and dealing with the aftermath of people's left over mess.
Keith Young retweeted
Short threat on securing your APIs, thanks for a client asking me questions recently. :-D
APIs need to receive all the same security attention as a regular web app. This means: security requirements, a threat model, secure coding,
1/?
Keith Young retweeted
This slide addresses #cybersecurity #riskmanagement roles & responsibilities. I recommend including Internal Audit in an oversight capacity, similar to IIA's Three Lines of Defense. Well done Microsoft, thanks for sharing with/the community!
#informationsecurity #security
If you work in / with banking organizations, start preparing now for new incident reporting requirements! #banking #CyberSecurity #dfir #Incidentresponse
scmagazine.com/analysis/cybe…