Why Clouds Keep Leaking Data
Dark Reading
SEPTEMBER 26, 2019
Sat.Sep 21, 2019 - Fri.Sep 27, 2019
89 
It’s Google’s World. Your Business Is Just Living in It
Adam Levin
SEPTEMBER 27, 2019
Fifty attorneys general announced earlier this month that Google is the target of an antitrust probe. Any business owner who has happened to find themselves stuck in the company’s orbit–that would be any company with a digital presence–won’t hesitate to tell you such a move is long overdue. Case in point: I just did a Google search for Basecamp, an online project management tool.
Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
AI Surveillance Tech Promises Safety, But at What Cost?
Data Breach Today
SEPTEMBER 23, 2019
Security, Privacy, Data Protection and Liability Questions Remain Unanswered Artificial intelligence technologies that provide surveillance capabilities can have upsides as well as downsides. Unfortunately, as developers and governments rush to experiment, security, privacy, data protection and liability questions remain unanswered.
Identity-based Cryptography
Thales Cloud Protection & Licensing
SEPTEMBER 26, 2019
Public key infrastructure (PKI) requires key distribution and has been long criticised for its usability issues [13,14,15]. In an experiment [15] conducted for analysing the usability of Mailvelop, a modern PGP tool rated 4.4 out of 5 stars on Chrome web store, 9 out of 10 pairs of participants failed to complete the assigned task of exchanging encrypted emails, i.e. 90% failure rate.
Optimizing The Modern Developer Experience with Coder
Advertisement
Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.
#ModernDataMasters: Nicola Askham, The Data Governance Coach
Reltio
SEPTEMBER 24, 2019
Kate Tickner, Reltio. Nicola Askham is the leading data governance training provider in the UK with over 16 years of experience and research in the field. She delivers training and consulting to major organisations to help them implement full data governance frameworks. Nicola’s powerful methodology breaks down the data governance initiative into logical steps to implement a framework that suits each unique client.
Sign up to get articles personalized to your interests!
Information Management Today brings together the best content for information management professionals from the widest variety of industry thought leaders.
More Trending
DoorDash Says 4.9 Million Records Breached
Data Breach Today
SEPTEMBER 27, 2019
'Unusual Activity' By Third-Party Service Provider to Blame Food delivery startup DoorDash says 4.9 million customer, contractor and merchant records were breached after "unusual activity" by a third-party service provider. Even aside from the usual identification data, experts say certain, specific data - such as food allergies - could pose risks in the wrong hands.
SHARED INTEL: Here’s one way to better leverage actionable intel from the profusion of threat feeds
The Last Watchdog
SEPTEMBER 24, 2019
Keeping track of badness on the Internet has become a thriving cottage industry unto itself. Related: ‘Cyber Pearl Harbor’ is upon us There are dozens technology giants, cybersecurity vendors, government agencies and industry consortiums that identify and blacklist IP addresses and web page URLs that are obviously being used maliciously; and hundreds more independent white hat hackers are doing much the same.
Document Management vs. Content Management: What's the Difference?
AIIM
SEPTEMBER 23, 2019
In this digital era, organizations are looking for ways to streamline their business processes. Companies are adopting different management solutions driven by AI-based software or apps to automate it. There are so many solutions to choose from, but the process gets quite tricky when the boundaries between the solutions are not defined properly. For instance, businesses are looking for cost-effective methods to capture, organize, share, and document digital data.
Benefits of Data Vault Automation
erwin
SEPTEMBER 26, 2019
The benefits of Data Vault automation from the more abstract – like improving data integrity – to the tangible – such as clearly identifiable savings in cost and time. So Seriously … You Should Automate Your Data Vault. By Danny Sandwell. Data Vault is a methodology for architecting and managing data warehouses in complex data environments where new data types and structures are constantly introduced.
15 Modern Use Cases for Enterprise Business Intelligence
Advertisement
Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?
Emotet Botnet Now Using Snowden's Memoir as a Lure
Data Breach Today
SEPTEMBER 24, 2019
Attackers Sending Emails Promising Copy of 'Permanent Record' A week after the Emotet botnet crept back to life, the attackers behind it are already trying a new way to ensnare victims - using Edward Snowden's newly released memoir as a phishing lure, according to the security firm Malwarebytes.
MY TAKE: ‘Perimeter-less’ computing requires cyber defenses to extend deeper, further forward
The Last Watchdog
SEPTEMBER 27, 2019
Threat actors are opportunistic, well-funded, highly-motivated and endlessly clever. Therefore cybersecurity innovations must take hold both deeper inside and at the leading edges of modern business networks. Related: Lessons learned from Capitol One breach Most of the promising new technologies I’ve had the chance to preview this year validate this notion.
What Are the Best Practices for Email Management?
AIIM
SEPTEMBER 25, 2019
It’s easy to overlook email as ‘old school,’ but the fact is that we still use email extensively, especially in business. Radicati released updated figures early in 2019 that shows the total number of active email users has jumped to 3.9 billion. More than that, American workers will receive an average of 126 emails a day. And while most folks think of email mostly as transactional messaging, the marketing power of email is still going strong.
The State of Malware Analysis: Advice from the Trenches
Lenny Zeltser
SEPTEMBER 26, 2019
What malware analysis approaches work well? Which don’t? How are the tools and methodologies evolving? The following discussion–captured as an MP3 audio file –offers friendly advice from 5 malware analysts. These are some of the practitioners who teach the reverse-engineering malware course (FOR610) at SANS Institute: Jim Clausing : Security Architect at AT&T and Internet Storm Center Handler (Panelist) Evan Dygert : Senior Security Engineer for Blue Cross Blue Shield Assoc
The Tumultuous IT Landscape Is Making Hiring More Difficult
Advertisement
After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!
Kaspersky: Dual-Use Dtrack Malware Linked to ATM Thefts
Data Breach Today
SEPTEMBER 24, 2019
Remote Access Trojan Is Capable of Cyberespionage and Financial Fraud A newly discovered remote access Trojan called Dtrack has been targeting banks in India for well over a year, Kaspersky researchers say. The malware, which can steal data from ATMs and doubles as a cyberespionage tool, appears to be linked to North Korea's Lazarus Group.
NEW TECH: How ‘cryptographic splitting’ bakes-in security at a ‘protect-the-data-itself’ level
The Last Watchdog
SEPTEMBER 23, 2019
How can it be that marquee enterprises like Capital One, Marriott, Facebook, Yahoo, HBO, Equifax, Uber and countless others continue to lose sensitive information in massive data breaches? Related: Breakdown of Capital One breach The simple answer is that any organization that sustains a massive data breach clearly did not do quite enough to protect the data itself.
7 Ways VPNs Can Turn from Ally to Threat
Dark Reading
SEPTEMBER 21, 2019
VPNs are critical pieces of the security infrastructure, but they can be vulnerable, hackable, and weaponized against you. Here are seven things to be aware of before you ignore your VPN.
Iran denies successful cyber attacks hit infrastructures of its oil sector
Security Affairs
SEPTEMBER 21, 2019
In the last hours, some western media reported destructive cyber attacks against infrastructures in the Iranian oil sector, but Iran denied it. Last week drone attacks have hit two major oil facilities run by the state-owned company Aramco in Saudi Arabia, one of them is the Abqaiq site. Western Governments and Saudi Arabia blamed Iran for the attacks.
Improving the Accuracy of Generative AI Systems: A Structured Approach
Speaker: Anindo Banerjea, CTO at Civio & Tony Karrer, CTO at Aggregage
When developing a Gen AI application, one of the most significant challenges is improving accuracy. This can be especially difficult when working with a large data corpus, and as the complexity of the task increases. The number of use cases/corner cases that the system is expected to handle essentially explodes. 💥 Anindo Banerjea is here to showcase his significant experience building AI/ML SaaS applications as he walks us through the current problems his company, Civio, is solving.
Google Calendar Privacy Concerns Raised
Data Breach Today
SEPTEMBER 23, 2019
Companies Need to Be Aware of Risks A misconfiguration in a Google Calendar function that allows Google to index calendars raises serious privacy concerns because it could lead to inadvertent, broad public exposure of calendars that contain sensitive information, including corporate details, a researcher reports.
NEW TECH: The march begins to make mobile app security more robust than legacy PC security
The Last Watchdog
SEPTEMBER 26, 2019
Is mobile technology on a course to become more secure than traditional computing? Seven or eight years ago, that was a far-fetched notion. Today, the answer to that question is, “Yes, it must, and soon.” Related: Securing the Internet of Things I’ve been writing about organizations struggling to solve the productivity vs. security dilemma that’s part and parcel of the BYOD craze for some time now.
Retailers Face Many Challenges, Data Security Doesn’t Have to be One of the Them
Thales Cloud Protection & Licensing
SEPTEMBER 24, 2019
Business is booming and data is flowing. Retailers and shoppers are leveraging and enjoying many benefits data sharing brings: loyalty programs, personalized experiences, easier product location and ordering, online shopping, mobile access and the list goes on. With a few clicks, even hard-to-find products make their way to a customer’s doorstep within hours.
Russians Hack FBI Comms System
Schneier on Security
SEPTEMBER 24, 2019
Yahoo News reported that the Russians have successfully targeted an FBI communications system: American officials discovered that the Russians had dramatically improved their ability to decrypt certain types of secure communications and had successfully tracked devices used by elite FBI surveillance teams. Officials also feared that the Russians may have devised other ways to monitor U.S. intelligence communications, including hacking into computers not connected to the internet.
The Cloud Development Environment Adoption Report
Advertisement
Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.
Ransomware Attack on Rural Hospital Disrupts Services
Data Breach Today
SEPTEMBER 23, 2019
Campbell County Health in Wyoming Sending Patients to Other Hospitals Many Miles Away A ransomware attack late last week on a county hospital in rural Wyoming was still causing patient care disruptions on Monday. Some patients were sent more than 125 miles away to other area hospitals for treatment.
A new Fancy Bear backdoor used to target political targets
Security Affairs
SEPTEMBER 24, 2019
Security experts at ESET have uncovered a new campaign carried out by Russia-linked Fancy Bear APT group aimed at political targets. Security researchers at ESET have uncovered a new campaign carried out by Russia-linked Fancy Bear APT group (i.e. APT28 , Sednit , Sofacy , Zebrocy , and Strontium ) aimed at political targets. In the recent attacks, the hackers used a new set of malicious payloads, including a backdoor written in a new language.
Iranian Government Hackers Target US Veterans
Dark Reading
SEPTEMBER 24, 2019
'Tortoiseshell' discovered hosting a phony military-hiring website that drops a Trojan backdoor on visitors.
On Chinese "Spy Trains"
Schneier on Security
SEPTEMBER 26, 2019
The trade war with China has reached a new industry: subway cars. Congress is considering legislation that would prevent the world's largest train maker, the Chinese-owned CRRC Corporation, from competing on new contracts in the United States. Part of the reasoning behind this legislation is economic, and stems from worries about Chinese industries undercutting the competition and dominating key global industries.
Driving Responsible Innovation: How to Navigate AI Governance & Data Privacy
Speaker: Aindra Misra, Senior Manager, Product Management (Data, ML, and Cloud Infrastructure) at BILL
Join us for an insightful webinar that explores the critical intersection of data privacy and AI governance. In today’s rapidly evolving tech landscape, building robust governance frameworks is essential to fostering innovation while staying compliant with regulations. Our expert speaker, Aindra Misra, will guide you through best practices for ensuring data protection while leveraging AI capabilities.
Senator Demands Answers About Exposed Medical Imaging Data
Data Breach Today
SEPTEMBER 27, 2019
TridentUSA Allegedly Exposed Data on More than 1 Million Patients Sen. Mark Warner, D-Va., is demanding answers from TridentUSA Health Services about its data security practices following the recent discovery that it exposed more than 1 million patient files on the internet due to an unsecured server.
Checkm8: unpatchable iOS exploit could lead to permanent jailbreak for iOS devices running A5 to A11 chips
Security Affairs
SEPTEMBER 27, 2019
A security expert has released a new jailbreak, dubbed Checkm8, that impacts all iOS devices running on A5 to A11 chipsets , it works on iPhone models from 4S to 8 and X. The security expert Axi0mX has released a new jailbreak, dubbed Checkm8 , that works on all iOS devices running on A5 to A11 chipsets. The jailbreak works with all Apple products released between 2011 and 2017, including iPhone models from 4S to 8 and X.
How to find remaining 32-bit applications on macOS
Jamf
SEPTEMBER 26, 2019
With macOS Catalina, Apple no longer supports 32-bit applications. See how you can locate all 32-bit macOS applications and take action.
Let's personalize your content