Home

Kimpton Hotels disclose data breach - expert comments

Kimpton Hotels, a boutique hotel brand that includes 62 properties across the United States, said recently it is investigating reports of a credit card breach at multiple locations.

George Rice, senior director, payments at HPE Security – Data Security: “Once again with last night’s news of a data breach at Kimpton Hotels, we see that hospitality service providers face extraordinary challenges with customer data security at point of sale (POS).

Card-on-file transactions are common, meaning card data is often stored longer than typical, to maintain customer bookings and for resort service charges after check-in. Online booking systems often channel card data from various sources and third parties over the internet, creating additional possible points of compromise. Partner booking systems accessing the hotel platforms also present additional risks and malware paths for entry to data processing systems to steal sensitive information.

: SECURITY EXPERT; Talking Point; Posted On Monday, 01 August 2016 00:00

Hacking group claims responsibility of bringing down Pokémon Go

Pokémon Go, the augmented reality game, has reportedly suffered a major DDoS attack which prevented US and European gamers from accessing it for most of Saturday. Stephen Gates, chief intelligence research analyst at NSFOCUS, reacts:.

: SECURITY EXPERT; Talking Point; Posted On Monday, 01 August 2016 00:00

Courts rule US cannot force Microsoft to hand over emails stored abroad

The Microsoft corporation won a major legal battle recently against the United States Justice Department when a federal appeals court ruled that a warrant for a suspects data does not extend to information stored in overseas computers, handing a victory to privacy advocates. Circuit Judge Susan Carney said communications held by U.S service providers on servers outside the United States are beyond the reach of domestic search warrants, reversing a 2014 ruling by a US district court requiring Microsoft to turn over emails stored on a server in Dublin.

: SECURITY EXPERT; Talking Point; Posted On Monday, 01 August 2016 00:00

DDoS attacks on Philippine Government Websites

It is being reported that there was a spike in cyber attacks on Philippine government web sites, including a key Malaccañang agency, following the United Nations International Arbitration court's ruling in favour of the Philippines on the West Philippine Sea territorial dispute. However, it was not clear if the attacks were carried out by parties associated with China itself, as they apparently emanated from multiple countries. So far, the government has not been able to pinpoint the origin of the attacks. All were categorised as DDoS, or Distributed Denial of Service actions.