Schneier on Security

JUNE 8, 2021

Increasing our offensive capabilities without being able to secure them is like having all the best guns in the world, and then storing them in an unlocked, unguarded armory. Military software is unlikely to be any more secure than commercial software. A 2018 GAO report expressed concern regarding the lack of secure and patchable U.S.

Military 145

Military Cybersecurity Communications Manufacturing 145

IT Governance

APRIL 27, 2018

This week, we discuss TSB’s chaotic system upgrade, a security flaw in electronic hotel locks and a major NATO cyber security exercise. Security researchers have discovered that millions of electronic door locks used in hotel rooms around the world are vulnerable to hacking. Here are this week’s stories.

Military 43

Military Information Security Manufacturing Access 43

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Google , Clearview AI , and Meta all receives hefty penalties in 2022, demonstrating the continued important of effective information security.

Security 132

Security Data breaches Ransomware Military 132

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

The Last Watchdog

JUNE 20, 2023

focusing on illuminating the vulnerabilities of all network devices and mapping of the recommended security controls using a breach attack simulation (BAS) engine. In response, Radiflow recently released CIARA 4.0,

Cybersecurity 100

Cybersecurity Risk Manufacturing Analytics 100

The Last Watchdog

NOVEMBER 28, 2018

Both were well-equipped to teach, test and train individuals ranging from teen-agers and non-technical adults, to working system administrators and even seasoned tech security pros. Veterans have an inclination to continually defend their country, and many have security clearances, he says. “We My guess is that Gov.

Cybersecurity 140

Cybersecurity Systems administration Military Manufacturing 140

IT Governance

FEBRUARY 6, 2024

Enforcement Uber fined €10 million for GDPR breaches The Dutch data protection authority, Autoriteit Persoonsgegevens, has fined Uber €10 million for failing to be transparent about its data retention practices and making it difficult for drivers to exercise their data privacy rights.

Data Privacy 76

Data Privacy Privacy Insurance Security 76

IT Governance

JULY 30, 2024

But as a reminder, here are some key facts about the CrowdStrike incident: CrowdStrike is a publicly listed security company, which provides security software to – among many other large organisations – Microsoft. The outage was caused by a bad security update rolled out by CrowdStrike. Learn more about the CIA triad here.)

Insurance 112

Insurance Risk Encryption Manufacturing 112

AIIM

MARCH 29, 2022

As metaverse technology stacks expand and become more available, cheaper, and connected, the conception of use cases across all sectors becomes a contagious exercise. The impact of the metaverse on our businesses and lives will likely be greater than that of the internet. Of course, not every use case will materialize immediately.

Blockchain 104

Blockchain Manufacturing Retail Privacy 104

eSecurity Planet

OCTOBER 21, 2022

There are also security concerns, such as to protect trade secrets or to avoid legal liability in the event of a workplace injury or incident. Fitbit and similar technology can be used to track employees’ exercise routines, with some companies even offering rewards like extra days off for good behavior.

IT 128

IT Computer and Electronics Access Manufacturing 128

eSecurity Planet

NOVEMBER 6, 2023

The past week has been a busy one for cybersecurity vulnerabilities, with 34 vulnerable Windows drivers and four Microsoft Exchange flaws heading a long list of security concerns. The Problem: Three flaws discovered by the Kubernetes security community carry CVSS severity scores of 7.6 CVE-2022-4886 (Path Sanitization Bypass): This 8.8-level

Ransomware 113

Ransomware Authentication Cybersecurity Access 113

Thales Cloud Protection & Licensing

MARCH 1, 2023

Europe Leads the Cybersecurity Regulation Dance divya Thu, 03/02/2023 - 06:58 Europe has emerged as a hub for developing cyber policies, acting to improve software security, and quickly reporting severe breaches. But these regulations provide the incentive and the motivation to enable secure-by-design products and resiliency.

Cybersecurity 71

Cybersecurity Compliance GDPR Manufacturing 71

DLA Piper Privacy Matters

MAY 5, 2020

To achieve these, local data processing or anonymization of data must be considered; The security and confidentiality of the personal data processed in the context of connected vehicles must be guaranteed, in particular by implementing measures such as the encryption of the communication channel. . geolocation data; biometric data; etc.)

Privacy 69

Privacy Personal data GDPR Insurance 69

Adam Shostack

JANUARY 2, 2025

[no description provided] In his " ground rules " article, Mordaxus gives us the phrase "stone soup security," where everyone brings a little bit and throws it into the pot. The interplay of mitigations and bypasses that gets you there is a fine exercise if you've never worked through it.) The iPhone is more secure.

IoT 52

IoT Manufacturing Sales Communications 52

Adam Shostack

JANUARY 2, 2025

The Vulnerabilities Equities Process (VEP) is how the US Government decides if they'll disclose a vulnerability to the manufacturer for fixing. These are the "major factors" that senior government officials are supposed to consider in exercising their judgement. The second question relates to there being four equities to be considered.

Government 52

Government Manufacturing Security Cybersecurity 52

Data Protection Report

DECEMBER 17, 2020

The Data Strategy proposed the establishment of nine common European data spaces for data sharing and pooling, including health, mobility, manufacturing, financial services, energy, and agriculture. The EC’s Data Strategy sets out a vision of common European data spaces, a Single Market for data. These are described in our second blog post.

Government 102

Government Personal data Marketing Agriculture 102

IBM Big Data Hub

MARCH 28, 2024

As cloud computing continues to transform the enterprise workplace, private cloud infrastructure is evolving in lockstep, helping organizations in industries like healthcare, government and finance customize control over their data to meet compliance, privacy, security and other business needs. billion by 2033, up from USD 92.64

Cloud 97

Cloud Energy and Utilities Compliance Privacy 97

DLA Piper Privacy Matters

MARCH 20, 2023

The CNIL will also check the measures implemented to ensure the security of the data. The access to the electronic patient record in health care institutions The security of health data has already been under the CNIL’s scrutiny over the past years and subject to investigations in 2020 and 2021 in health care institutions.

Computer and Electronics 52

Computer and Electronics IT File names Access 52

Data Matters

DECEMBER 9, 2019

In particular, in the UK, the Information Commissioner’s Office (“ICO”) has issued two notices of intention to fine of €114m and €215m for failure to implement appropriate data security measures. fine against a furniture manufacturer in Denmark and a kr. The involvement of an entity is triggered when it exercises ‘decisive influence’.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Matters

DECEMBER 9, 2019

In particular, in the UK, the Information Commissioner’s Office (“ICO”) has issued two notices of intention to fine of €114m and €215m for failure to implement appropriate data security measures. fine against a furniture manufacturer in Denmark and a kr. The involvement of an entity is triggered when it exercises ‘decisive influence’.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

OpenText Information Management

APRIL 1, 2024

Mark will be joined by OpenText customer Carsten Trapp, CIO of manufacturer Carl Zeiss, who will discuss his company’s partnership with OpenText to support their SAP S/4HANA transformation and compliance initiatives. Wondering what’s new in our products?

IoT 64

IoT Digital transformation Cloud Manufacturing 64

IBM Big Data Hub

AUGUST 7, 2023

For instance, in response to sustainability trends, product manufacturers may need to prove the carbon footprint of their products to regulators and clients. It provides a comprehensive solution for secure, transparent and trustworthy data management. Figure 2 illustrates the blockchain functionalities that Orion offers.

Blockchain 62

Blockchain Government Authentication Manufacturing 62

CGI

APRIL 19, 2018

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Today, agencies need to bring the same level of motivation to ensure that their data and devices are secure. has been estimated at more than $7 million.

Cybersecurity 40

Cybersecurity Digital transformation Manufacturing Government 40

CGI

JULY 5, 2018

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Today, agencies need to bring the same level of motivation to ensure that their data and devices are secure. has been estimated at more than $7 million.

Cybersecurity 40

Cybersecurity Digital transformation Manufacturing Government 40

CGI

MAY 15, 2018

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Today, agencies need to bring the same level of motivation to ensure that their data and devices are secure. has been estimated at more than $7 million.

Cybersecurity 40

Cybersecurity Digital transformation Government Manufacturing 40

CGI

MAY 27, 2016

Context aware - as above, but the context could be whether a building is secure and being occupied. Behavioural based health and wellness - For life insurance, the level of exercise completed could influence the premiums offered.

Insurance 40

Insurance IoT Marketing Manufacturing 40

IT Governance

DECEMBER 13, 2018

This week, in our last podcast of the year, we revisit some of the biggest information security stories from the past 12 months. As is now traditional, I’ve installed myself in the porter’s chair next to the fire in the library, ready to recap some of the year’s more newsworthy information security events. caused problems of their own.

Data breaches 63

Data breaches Personal data Access GDPR 63

Data Protection Report

APRIL 9, 2024

On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published a Notice of Proposed Rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”), which imposes new reporting requirements for entities operating in critical infrastructure sectors.

Ransomware 84

Ransomware Agriculture Cybersecurity Government 84

IBM Big Data Hub

JULY 11, 2023

For example, a fleet truck outfitted with an EoT-secure identity and wallet is able to pay for its own fuel at a similarly EoT-enabled fuel pump without the driver having to open an app or provide a credit card.

IoT 51

IoT Agriculture Artificial Intelligence Blockchain 51

HL Chronicle of Data Protection

SEPTEMBER 25, 2019

If a consumer does not have an account, the CCPA prohibits a business from requiring that consumer to create an account as a condition of exercising their rights. It excepts from the CCPA certain types of owner and vehicle information shared by a vehicle dealer and the manufacturer for vehicle repairs associated with warranties or recalls.

Sales 40

Sales Communications Data breaches Compliance 40

Data Protection Report

SEPTEMBER 17, 2019

The amendments change and clarify a business’ obligation to permit consumers to submit requests to exercise their CCPA rights. Note that CCPA § 1798.150 – the consumer private right of action for certain security breaches and the requirement for reasonable security – continues to apply. – § 1798.130.

B2B 40

B2B Privacy Communications Encryption 40

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

Data Protection Report

JUNE 6, 2019

The new Nevada law also exempts motor vehicle manufacturers or repair services that retrieve information from the motor vehicle “in connection with a technology or service related to the motor vehicle” or provided by a consumer in connection with a subscription or registration for a technology or service related to the vehicle.

Privacy 40

Privacy Sales Insurance Manufacturing 40

ForAllSecure

DECEMBER 16, 2020

Very few of these devices have security in mind when they were built. We can also find interesting binaries by getting another similar firmware (such as a similar model by another manufacturer) and comparing which binaries are unique to each system with a script. Also if you want more on embedded security, check out this project.

Libraries 52

Libraries IT Authentication Access 52

ForAllSecure

DECEMBER 15, 2020

Very few of these devices have security in mind when they were built. We can also find interesting binaries by getting another similar firmware (such as a similar model by another manufacturer) and comparing which binaries are unique to each system with a script. Also if you want more on embedded security, check out this project.

Libraries 52

Libraries IT Authentication Access 52

Data Protection Report

NOVEMBER 3, 2017

As we warned a year ago, we expect that these type of widespread outages may be more common in the future because of security weakness related to the Internet of Things, coupled with increased adoption of IoT devices in the United States and worldwide. Documenting Security and Preventative Measures. Before an Attack.

IoT 40

IoT Communications Risk Passwords 40