Home

Tripwire retail survey: PCI compliance contributes to false sense of security

Key findings revealed that:

Despite industry data to the contrary, the survey indicates that organizations that rely on PCI compliance as the core of their information security program were twice as confident that they could detect rogue applications, such as those used to exfiltrate data. These respondents were also significantly more confident that they would be able to detect misconfigured or unauthorized network shares, which was a key attack vector exploited in the Target data breach.

: Lucy Harvey; Global Retail; Posted On Friday, 01 August 2014 17:42

Expert on TOR advisory

Following the security advisory issued by TOR stating that a group of relays were discovered in early July seemingly trying to deanonymize users, Jaime Blasco, director of AlienVault Labs, says:

: Carolina Brealey; Talking Point; Posted On Friday, 01 August 2014 17:38

Paddy Power data breach

Following the news of the Paddy Power data breach http://www.paddypowerplc.com/media/news/paddy-power-advises-customers-historical-data-breach, Mark James and David Harley at ESET and Troy Gill at AppRiver comment on the importance of notifying customers as soon as possible and why customers shouldn’t panic:

: Katie Chodosh; Talking Point; Posted On Friday, 01 August 2014 17:26

Remote code execution on Android devices

You walk into a coffee shop and take a seat. While waiting for your coffee, you take out your smartphone and start playing a game you downloaded the other day. Later, you go to work and check your email in the elevator. Without you knowing, an attacker has just gained a foothold in your corporate network and is steadily infecting all your colleagues’ smartphones too.