❌ WordPress Flaw Opens Millions of WooCommerce Shops to Takeover ❌

A file delete vulnerability in WordPress can be elevated into a remote code execution vulnerability for plugins like WooCommerce.

📖 Read

via "The first stop for security news | Threatpost ".

🕴 Utah Hacker Pleads Guilty to DoS Attacks: DoJ 🕴

Online gaming companies, including Sony Online Entertainment, and servers were main targets.

📖 Read

via "Dark Reading: ".

🕳 November Event Spotlight: CISO / CPO GDPR Summits, GDPR Workshops, 43rd Annual IP Institute, GBI CIO Event, Data Protection World Forum, EDAA Summit, IAPP Europe Data Protection Congress, Privacy Insight Series Webinar 🕳

<code>Media</code><code>CISO / CPO GDPR Summits
November
Seattle</code><code>The GDPR fundamentally changed the data privacy landscape, but that was clearly just the beginning.?The recently approved California Consumer Privacy Act firmly plants similar rights in the US market, and other global regulations demonstrate that we are in a new era of data privacy.? It’s time for a paradigm shift in our approach to data ownership and rights.</code><code>This series is part of a special education / networking series in which TrustrArc is partnering with Intel, Microsoft, BDO, and GDPR Edge to bring to 20 locations across the US and EU.  The Summits will bring together a wide range of expertise and industry perspectives from practitioners, the participating partners, and other special guests to discuss emerging trends on data privacy management.</code><code>>Reserve your seat to a November CISO / CPO GDPR Summit today</code><code>_____________________________________________________________________________</code><code>GDPR Privacy Management Workshops
November
Boston, Washington DC, Seattle & New York</code><code>The TrustArc Privacy Workshops are designed to help businesses achieve, demonstrate, and manage ongoing compliance for the EU GDPR and other regulations and frameworks, including Privacy Shield and CCPA. The free workshops provide informative guidance, peer discussions, and practical solutions on how to operationalize privacy program management along with examples of how companies are using privacy technology tools to help automate compliance.</code><code>The U.S. Department of Commerce will be joining as presenters for Workshops in Boston, Washington DC and New York.</code><code>Topics to be covered in the workshops include: Data Mapping, Records of Processing, DPIA / PIA Management, International Data Transfer, Individual Rights / Data Subjects Access Rights Management, Consent Management, and Compliance Reporting.
</code><code>>Request a seat here</code><code>_____________________________________________________________________________</code><code>43rd Annual IP Institute: Creativity and Innovation in the Arts and Sciences
November 7 – November 9
San Jose, CA</code><code>This year’s multi-day IP Institute celebrates the diversity of IP in our lives and culture by offering outstanding educational programming as well as multiple fun networking events.  This year’s Institute provides a wide range of speakers and presentations on patent, copyright, trademark, trade secret, internet and privacy, cybercrime, technology transfer, licensing, music and entertainment, IP specific ethics, and more.</code><code>TrustArc Senior Counsel Darren Abernethy will be speaking on “GDPR: Lessons Learned From the Front Line” on Thursday, November 8th at 10:05am.</code><code>>Learn more here</code><code>_____________________________________________________________________________</code><code>GBI CIO Event
November 15
London</code><code>The CIO Event brings together technology leaders from across the public, large enterprises & mid-market sectors and will provide you with a strategic and practical toolkit to help drive transformation including CIO’s discussing the latest industry trends, workshops, panel discussions & Round table sessions led by visionaries within technology, first-hand case studies on the challenges facing IT andantastic networking opportunities with peers throughout the day.</code><code>TrustArc & GDPR Edge are sponsors and will be speaking at this event.</code><code>>Learn more here</code><code>_____________________________________________________________________________</code><code>Data Protection World Forum
November 20 – November 21
London</code><code>In an increasingly digital economy the…

🕴 Why Password Management and Company Security Strategies Fall Short 🕴

Researchers say companies need to rethink their password training and take a more holistic approach to security.

📖 Read

via "Dark Reading: ".

🕴 Why Password Management and Security Strategies Fall Short 🕴



📖 Read

via "Dark Reading: ".

🔐 How to enable SSL and TLS 1.3 on NGINX 🔐

Jack Wallen walks you through the steps for enabling SSL and TLS 1.3 on your NGINX websites.

📖 Read

via "Security on TechRepublic".

❌ Program Looks to Tap Military Vets for Cyber-Jobs ❌

The training and job-matching effort is a public-private partnership to address a growing workforce gap.

📖 Read

via "The first stop for security news | Threatpost ".

❌ Program Looks to Tap Military Vets for Cyber-Jobs ❌

The training and job-matching effort is a public-private partnership to address a growing workforce gap.

📖 Read

via "The first stop for security news | Threatpost ".

🕴 IT-to-OT Solutions That Can Bolster Security in the IIoT 🕴

Industrial companies can use the hard-won, long-fought lessons of IT to leapfrog to an advanced state of Industrial Internet of Things security.

📖 Read

via "Dark Reading: ".

🔐 How to make good business decisions about the spectrum of cyberthreats 🔐

Ray Rothrock, CEO of cyber-defense firm RedSeal, explains how to weigh each threat and respond appropriately.

📖 Read

via "Security on TechRepublic".

🕴 Checkmarx Acquires Custodela 🕴

The purchase adds DevSecOps capabilities to a software license compliance platform.

📖 Read

via "Dark Reading: ".

🕴 Crytpocurrency Exchange Targeted Via Attack on Web Traffic Analysis Firm 🕴

"Island-hopping" attackers breached StatCounter so they could get to users of gate.io.

📖 Read

via "Dark Reading: ".

🕴 Finding Gold in the Threat Intelligence Rush 🕴

Researchers sift through millions of threat intel observations to determine where to best find valuable threat data.

📖 Read

via "Dark Reading: ".

🕴 New Side-Channel Attacks Target Graphics Processing Units 🕴

A trio of new attacks bypass CPUs to wring data from vulnerable GPUs.

📖 Read

via "Dark Reading: ".

⚠ Phone companies slammed for lousy robocall efforts ⚠

By this time next year, says Chairman Ajit Pai, the FCC wants to see an anti-robocall system on consumers' phones - or else.

📖 Read

via "Naked Security".

⚠ Google warning: Fix your dodgy ads within 30 days or get banned ⚠

Having taken what it thought was a decisive swipe at the problem of “abusive” advertising a year ago, Google now says next month’s Chrome 71 will unleash an even tougher crackdown.

📖 Read

via "Naked Security".

⚠ Closed doors are no match for a Wi‑Fi peeping tom and a smartphone ⚠

Researchers have found that a smartphone and some smart number crunching can track people moving in their homes as they reflect radio waves.

📖 Read

via "Naked Security".

❌ Apple Modernizes Its Hardware Security with T2 ❌

Apple has widened the range of Macs running its T2 security chip. Is macOS finally catching up with other platforms when it comes to secure computing?

📖 Read

via "The first stop for security news | Threatpost ".

⚠ Ranting researcher publishes VM-busting zero-day without warning ⚠

A security researcher has published a zero-day flaw in a commonly-used virtual machine management system without notifying the vendor, justifying it with a scathing critique of the infosecurity industry.

📖 Read

via "Naked Security".

❌ Podcast: Troy Hunt Talks Bad Passwords – and Who’s to Blame for Them ❌

Troy Hunt sounds off on how both consumers and services have a joint role in creating and enforcing strong passwords.

📖 Read

via "The first stop for security news | Threatpost ".

🕴 The Executive Summit Returns to Black Hat Europe 2018 🕴

This day-long event for CISOs and execs will show you the way to next-level skills, strategies, and techniques that will bolster your relevance and wow the board.

📖 Read

via "Dark Reading: ".