Reasonable Security Procedures and Practices The California Consumer Privacy Act (CCPA) private right of action establishes statutory damages of between $100 and $750 per incident for consumers whose personal information has been compromised by a breach of personal information resulting from the business’ “violation of the duty to implement reasonable security procedures and practices appropriate Read More
New Changes to Password Change Recommendations: Making Frequent Password Changes a Thing of the Past
Users hate changing passwords. Passwords are hard to remember and you’re not supposed to write them down. That’s why it’s common to see both weak passwords — qwerty1234 and your dog’s name are a lot easier to remember than HGF45DEsre%$ — and the same passwords used on multiple different web-sites. This is why the National Read More
Six Information Security Management Questions for the Chief Executive
What data or information do you have that—if stolen, changed, destroyed, or otherwise compromised—would negatively impact your bottom-line, your competitive position, or put you in legal jeopardy? What measures does your organization have in-place to secure that data? What computer-driven business processes do you have that—if compromised or unavailable—would negatively impact your bottom-line, your competitive Read More
Cyber Defense Special: Spectre & Meltdown
The Citadel Perspective A fascinating week in the information security world: the discovery of three extremely subtle bugs – vulnerabilities – in the computer chips that drive the world has everyone – properly – concerned. What a tremendous – hopefully painless – learning lesson. So let’s lay it out. What’s going on? What do we Read More
Cyber Security News of the Week, July 23, 2017
Individuals at Risk Cyber Warning How A Billion-Dollar Internet Scam Is Breaking Hearts And Bank Accounts. Criminal networks defraud lonely people around the world with false promises of love and romance. … Modern online romance scams are premeditated, organized crimes that steal millions ― potentially billions ― of dollars from vulnerable, lonely people over the Read More
IMPORTANT NOTICE: Users and IT Dept’s Need to Take Action as Dangerous Ransomware Attack Circles Globe
A dangerous ransomware attack is occurring today which is having a significant impact on computers globally. The attack has compromised the hospital system in England and severely impacted the Spanish telecommunications company, Telefonica. All told, more than 74 countries have been impacted. Background The malware is sent through phishing attacks in which recipients of emails Read More
ISSA-LA Seventh Annual Information Security Summit
ISSA-LA Seventh Annual Information Security Summit Los Angeles Convention Center The Summit on June 4, 2015 Known for its groundbreaking keynote addresses and speakers, this year’s Summit will be no exception. Keynote Speaker Bruce Schneier: Internationally Renowned Security Technologist and Author of 12 books, including Liars and Outliers: Enabling the Trust Society Needs to Read More
Sony Hackers Have Your Personal Information. What You Can Do.
Work for Sony? Employee? Contractor? Writer? Cinematographer? If your paycheck or your pension or your medical insurance has its origins at Sony, then you are at risk. If Sony has your email address, then you are at risk. Financial Fraud. Cybercriminals use financial information about you to commit fraud, stealing money from your bank account Read More
SPECIAL ALERT: Aggressive Malware Requires User Diligence
SPECIAL ALERT: We are tracking a new very-aggressive malware. This malware is distributed as a zip file attachment to emails. When the zip-file is run, it encrypts files on the user’s hard drive, rendering them unusable until a ransom is paid. There is no technology to protect against the malware. The only defense against these Read More
Three Rules for Password Sanity
Let’s start with the obvious. We all hate passwords. Users hate passwords because they are hard to remember and they slow you down, getting in the way of the computing experience. IT staff hate passwords because they’re just one more critical thing that needs to be managed, taking valuable time away from keeping computer systems Read More