Data Protection

Data Protection news, analysis, research, how-to, opinion, and video.

medical 3

Healthcare organizations still too lax on security

Data breach at Community Health is symptom of broader problem, security experts say


nuclear bomb test bikini atoll and enewetak october 21 1952 dv1282017

Workers at U.S. nuclear regulator fooled by phishers

Nuclear Regulatory Commission employees were tricked into disclosing passwords and downloading malware in three phishing attacks that occurred over a three-year period.

heartbleed 1200x700

Heartbleed to blame for Community Health Systems breach

According to a blog post from TrustedSec, the breach at Community Health Systems is the result of attackers targeting a flaw OpenSSL, CVE-2014-0160, better known as Heartbleed.

Facebook says most outbound email is encrypted now

Microsoft and Yahoo have enabled STARTTLS, which dramatically raised the percentage of encrypted messages

Kicking the stool out from under the cybercrime economy

CSO Online spoke with Shape Security's Wade Williamson at this year's Black Hat USA conference about the economy of cybercrime and how it can be weakened

piggy bank 164630734

Stolen data allegedly used by Irish credit unions to find debtors

Private investigators, said to be working on behalf of credit unions in Ireland, didn't need to be social engineering experts in order to convince staff at the Department of Social Protection (DSP) and other government agencies to...

jayrockefeller

Senator questions airlines' data privacy practices

Jay Rockefeller raises concerns about airlines collecting and sharing personal information

Phishing key

Why it is time to intensify employee education on phishing

Companies should consider intensifying employee training to combat the increasing craftiness of phishers who are working harder to obtain personal details on targets in order to trap them in scams.

security risk

SDS still young, but very much on the rise

Offering increased protection and a simplified approach, software-defined security is shaping up to be the next big thing in IT security

towerbridge

British spy agency scanned for vulnerable systems in 32 countries, German paper reveals

Heise Online reveals top-secret details about the GCHQ's 'Hacienda' program

Supervalu breach shows why move to smartcards is long overdue

U.S. remains one of the last developed nations to use magnetic stripe cards

hackers

Two supermarket chains report major computer break-ins

Supermarket chain Supervalu has reported that more than 200 stores were affected by a computer break-in that exposed customers' debit- and credit-card numbers and other data.

Official at digital currency service pleads guilty to money laundering

Liberty Reserve helped launder $6 billion worth of proceeds related to criminal activity, the DOJ has alleged

How a portable travel router can put TOR web-surfing security in your pocket

Introduced at Def Con 22, a project called PORTAL aims to make it much easier to keep your Internet traffic private via the TOR network

Ancient Stuxnet flaw still being used to attack millions of Windows XP PCs

XP popularity and poor patching revealed

suburbanhouse

Why contractors' home networks are a security threat

Companies should take note of a recent poll that found contractors and IT administrators were the favorite targets of hackers.

zeus

New Gameover Zeus botnet keeps growing, especially in the US

A new Gameover Zeus malware variant has infected over 10,000 systems so far, researchers say

hackersurvey

Survey: Most hackers do it for the lulz

A majority of hackers are in it for the thrill, and hardly any think they'll get caught

081414schneirer

Schneier: Cyber-retaliation like that exposed by Snowden report a bad idea

The NSA program dubbed MonsterMind is dangerous in that it would enable automated retaliation against machines that launch cyber attacks with no human intervention, meaning that such counterattacks could hit innocent parties, warns...

Load More