[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (119 articles)

|

// AI-powered summary generated at 16:00

> Canada Mulls Mandatory Data Breach Notifications
Fines for non-compliance would reach $100,000.
> EWF USA 2014: Best Practice and Playbooks for Incident Response
In an interactive panel titled ‘Cyber Risk: This is not your father’s playbook’ at EWF USA 2014, Leigh Honeywell, security engineer at Heroku, and Carolyn Munoz, senior business security officer at ADP, took to the stage to discuss best practice for incident response, from both a technical and busin...
> Shellshock et l’industrie
Le précédent article consacré à shellshock introduisait le sujet et en donnait l’essentiel à savoir.. Ce second article examine les impacts sur les SI industriels en posant la question de la présence de la faille shellshock pour chaque type d’équipement. [...] Lire la suite
> Estonian Cybercrime Ringleader Gets 11 Years for Worldpay Hack
Sergei Nicolaevich Tšurikov also ordered to pay $8.4m in tough sentencing
> US Operators Fined $10 Million After Data Security Shambles
Contracted IT services firm did little to protect sensitive customer info, FCC says
> Shellshock : introduction
Au vu des analyses que l’on peut lire dans la presse, cette faille dépasserait en ampleur la précédente star des medias (Heartbleed dans OpenSSL), et menacerait internet de congestion en cas de ver qui comme Slammer [...] Lire la suite
> 1.2M SOHO Routers Vulnerable to Compromise
A flaw in the network address translation port mapping protocol (NAT-PMP) opens up networking devices to information interception.
> Russia and China Edge Out US With Proposed Cyber Security Pact
Two nations look to build closer ties as Washington looks on
> Speaker Lineup for THREADS ’14: Scaling Security
For every security engineer you train, there are 20 or more developers writing code with potential vulnerabilities. There’s no human way to keep up. We need to be more effective with less resources. It’s time to make security a fully integrated part of modern software development and operations. It’...
> Q3 DDoS Attack Volumes Are the Largest Ever Seen
The Internet of Things, multi-vector attacks and amplification are all critical factors for the DDoS landscape.
> JPMorgan: Hackers Had Access to 90 Servers for Two Months
But new details of the hack emerge, as regulators consider vendor regulations.
> We’re Sponsoring the NYU-Poly Women’s Cybersecurity Symposium
Cyber security is an increasingly complex and vibrant field that requires brilliant and driven people to work on diverse teams. Unfortunately, women are severely underrepresented and we want to change that. Career Discovery in Cyber Security is an NYU-Poly event, created in a collaboration with infl...
> Windows Zero-Day Flaw Echoes Sandworm Tactics
There's no patch yet for the flaw, which affects almost all versions of Windows.
> EWF USA 2014: DHS looks to Women and a New Cyber-Talent Workforce
The US government is crafting a twenty-first century cyber-workforce within government—and a big part of that involves the recruitment of women.
> EWF USA 2014: Dell CIO Shares Best Practice on Winning Buy-in
At the EWF event in Scottsdale, Arizona, Dell Software CIO, Carol Fawcett, presented on how to get attention and agreement for an information security agenda, and the changing role of the CIO.
> Apple Admits MITM iCloud Attack in China
Cupertino refuses to blame Beijing for major attack on users
> Chloe Madeley Rape Firestorm Draws Internet Trolling Crackdown
UK may quadruple jail time for those making anonymous online threats of physical harm against other people.
> Online Fraud Costs UK Over £670 Million
Get Safe Online poll shows growing problems, but rising awareness
> Staples Calls the Cops After Potential Card Fraud Incident
Retail chain could be latest to be hit as 2014 breach saga continues
> Operation DeathClick Targets US Defense Sector
Micro-targeted malvertising via real-time bidding engines elude most security approaches.