🕴 Critical Encryption Bypass Flaws in Popular SSDs Compromise Data Security 🕴

Vulnerabilities in Samsung, Crucial storage devices enable data recovery without a password or decryption key, researchers reveal.

📖 Read

via "Dark Reading: ".

🕴 Why the CISSP Remains Relevant to Cybersecurity After 28 Years 🕴



📖 Read

via "Dark Reading: ".

❌ ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers ❌

One-third of respondents in a new poll said that have been a victim of fraud or identity theft in the past.

📖 Read

via "The first stop for security news | Threatpost ".

🕴 Most Businesses to Add More Cloud Security Tools 🕴

Cloud adoption drives organizations to spend in 2019 as they learn traditional security practices can't keep up.

📖 Read

via "Dark Reading: ".

🕴 'PortSmash' Brings New Side-Channel Attack to Intel Processors 🕴

New vulnerability exposes encryption keys in the first proof-of-concept code.

📖 Read

via "Dark Reading: ".

❌ HSBC Data Breach Hits Online Banking Customers ❌

The data breach includes names, addresses, transaction histories, account information and more.

📖 Read

via "The first stop for security news | Threatpost ".

⚠ Android November update fixes flaws galore ⚠

Android's November security bulletin is here and there’s more to patch, and more urgency about applying them.

📖 Read

via "Naked Security".

🔐 What businesses can learn from political campaigns about using big data 🔐

Chris Wilson of WPA Intelligence explains how businesses could use predictive analytics to target customers, much like how political campaigners use targeting of potential voters.

📖 Read

via "Security on TechRepublic".

⚠ WhatsApp ‘martinelli’ warning is a hoax, don’t forward it ⚠

A WhatsApp chain letter is warning of a malware-packing video called "martinelli", and selling its lie with a grain of truth.

📖 Read

via "Naked Security".

⚠ Serious XSS flaw discovered in Evernote for Windows, update now! ⚠

Online-note-sharing company Evernote has patched a hole that allowed attackers to infect notes shared via its service.

📖 Read

via "Naked Security".

⚠ Voting machine manual tells officials to reuse weak passwords ⚠

The manual turns good advice on its head, telling officials to use, reuse and recycle weak passwords.

📖 Read

via "Naked Security".

🔐 Top 20 application vulnerabilities in the enterprise are dominated by Adobe and Microsoft 🔐

Among the 20 application vulnerabilities, half were for Adobe Flash and 20% were by Microsoft Office.

📖 Read

via "Security on TechRepublic".

🔐 Why you should use a password manager 🔐

Jack Wallen discusses why everyone should use a password manager.

📖 Read

via "Security on TechRepublic".

🕴 20 Cybersecurity Firms to Watch 🕴

A look at some of the more interesting investments, acquisitions, and strategic moves in the security sector over the past year.

📖 Read

via "Dark Reading: ".

🕴 5 Reasons Why Threat Intelligence Doesn't Work 🕴

Cybersecurity folks often struggle to get threat intelligence's benefits. Fortunately, there are ways to overcome these problems.

📖 Read

via "Dark Reading: ".

🔐 Consumers are more concerned with cybersecurity and data privacy in 2018 🔐

The majority of users would stop interacting with a brand after a breach.

📖 Read

via "Security on TechRepublic".

❌ Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw ❌

A sophisticated proxy code has infected hundreds of thousands of devices already.

📖 Read

via "The first stop for security news | Threatpost ".

❌ WordPress Flaw Opens Millions of WooCommerce Shops to Takeover ❌

A file delete vulnerability in WordPress can be elevated into a remote code execution vulnerability for plugins like WooCommerce.

📖 Read

via "The first stop for security news | Threatpost ".

🕴 Utah Hacker Pleads Guilty to DoS Attacks: DoJ 🕴

Online gaming companies, including Sony Online Entertainment, and servers were main targets.

📖 Read

via "Dark Reading: ".

🕳 November Event Spotlight: CISO / CPO GDPR Summits, GDPR Workshops, 43rd Annual IP Institute, GBI CIO Event, Data Protection World Forum, EDAA Summit, IAPP Europe Data Protection Congress, Privacy Insight Series Webinar 🕳

<code>Media</code><code>CISO / CPO GDPR Summits
November
Seattle</code><code>The GDPR fundamentally changed the data privacy landscape, but that was clearly just the beginning.?The recently approved California Consumer Privacy Act firmly plants similar rights in the US market, and other global regulations demonstrate that we are in a new era of data privacy.? It’s time for a paradigm shift in our approach to data ownership and rights.</code><code>This series is part of a special education / networking series in which TrustrArc is partnering with Intel, Microsoft, BDO, and GDPR Edge to bring to 20 locations across the US and EU.  The Summits will bring together a wide range of expertise and industry perspectives from practitioners, the participating partners, and other special guests to discuss emerging trends on data privacy management.</code><code>>Reserve your seat to a November CISO / CPO GDPR Summit today</code><code>_____________________________________________________________________________</code><code>GDPR Privacy Management Workshops
November
Boston, Washington DC, Seattle & New York</code><code>The TrustArc Privacy Workshops are designed to help businesses achieve, demonstrate, and manage ongoing compliance for the EU GDPR and other regulations and frameworks, including Privacy Shield and CCPA. The free workshops provide informative guidance, peer discussions, and practical solutions on how to operationalize privacy program management along with examples of how companies are using privacy technology tools to help automate compliance.</code><code>The U.S. Department of Commerce will be joining as presenters for Workshops in Boston, Washington DC and New York.</code><code>Topics to be covered in the workshops include: Data Mapping, Records of Processing, DPIA / PIA Management, International Data Transfer, Individual Rights / Data Subjects Access Rights Management, Consent Management, and Compliance Reporting.
</code><code>>Request a seat here</code><code>_____________________________________________________________________________</code><code>43rd Annual IP Institute: Creativity and Innovation in the Arts and Sciences
November 7 – November 9
San Jose, CA</code><code>This year’s multi-day IP Institute celebrates the diversity of IP in our lives and culture by offering outstanding educational programming as well as multiple fun networking events.  This year’s Institute provides a wide range of speakers and presentations on patent, copyright, trademark, trade secret, internet and privacy, cybercrime, technology transfer, licensing, music and entertainment, IP specific ethics, and more.</code><code>TrustArc Senior Counsel Darren Abernethy will be speaking on “GDPR: Lessons Learned From the Front Line” on Thursday, November 8th at 10:05am.</code><code>>Learn more here</code><code>_____________________________________________________________________________</code><code>GBI CIO Event
November 15
London</code><code>The CIO Event brings together technology leaders from across the public, large enterprises & mid-market sectors and will provide you with a strategic and practical toolkit to help drive transformation including CIO’s discussing the latest industry trends, workshops, panel discussions & Round table sessions led by visionaries within technology, first-hand case studies on the challenges facing IT andantastic networking opportunities with peers throughout the day.</code><code>TrustArc & GDPR Edge are sponsors and will be speaking at this event.</code><code>>Learn more here</code><code>_____________________________________________________________________________</code><code>Data Protection World Forum
November 20 – November 21
London</code><code>In an increasingly digital economy the…

🕴 Why Password Management and Company Security Strategies Fall Short 🕴

Researchers say companies need to rethink their password training and take a more holistic approach to security.

📖 Read

via "Dark Reading: ".