Database Security
UK Data Breaches Have Increased in Number, Scale and Cost, Reveals Study
June 11, 2015 Added by:Tripwire Inc
According to the 2015 Information Security Breaches Survey, the number of security breaches has increased in the past year, whereas the scale and cost have nearly doubled.
Comments (0)
What is PHI?
June 03, 2015 Added by:Danny Lieberman
Software Associates specialize in HIPAA security and compliance for Israeli medical device companies – and 2 questions always come up: “What is PHI?” and “What is electronically protected health information?”
Comments (0)
Highlights From Verizon Data Breach Report 2015
May 19, 2015 Added by:Anton Chuvakin
Credential abuse still reign supreme.
Comments (0)
Whole Disk Encryption Explained
May 18, 2015 Added by:PCI Guru
There are a lot of security professionals and lay people that seem to believe that encryption is encryption and that is simply not the case.
Comments (0)
2015 Verizon DBIR and the Human Attack Surface
April 16, 2015 Added by:Tripwire Inc
Verizon’s annual Data Breach Investigations Report (DBIR) gives annual analysis and insight to the prior year’s security incidents and confirmed data breaches. As a security practitioner, I look to this report as a bellwether for our own security practices – what patterns are emerging and what should be my immediate takeaways to better protect my organization.
Comments (0)
Dangers Accelerate: Increasing Global Threats Loom Over Information Security Landscape
March 19, 2015 Added by:Steve Durbin
The pace and scale of information security threats continues to accelerate, endangering the integrity and reputation of today’s most trusted organizations. Attackers have become more organized, attacks are more refined, and all threats are more dangerous, and pose more risks, to an organization’s reputation than ever before.
Comments (0)
Those Pesky Users: How To Catch Bad Usage of Good Accounts
February 24, 2015 Added by:Anton Chuvakin
Stolen credentials, guessed passwords, pass-the-hash and other means of gaining system access present an exciting challenge to those folks who already woke from the mortal slumber of “isn’t my firewall and AV enough?”
Comments (5)
Humanizing Non-Human High Privileged Accounts
February 10, 2015 Added by:Identropy
Every IT environment has them. They are called by a variety of names: Non-human accounts; system accounts; service accounts; administrator accounts; shared accounts; group accounts; and the list goes on. What is common is that they have exceedingly high privileges to often the most critical areas of an IT environment.
Comments (5)
Anthem Breach: How Hackers Stole Credentials and Why Two-Factor Authentication May Help Prevent Future Phishing Scams
February 09, 2015 Added by:Thu Pham
If the Anthem attack was carried out as the result of using a single password, their access security wasn’t up to industry standards. Two-factor authentication may have thwarted attacks by requiring the use of a personal device to verify the identity of a system administrator or other technical employee with access to their database of millions of sensitive records.
Comments (3)
Does Your Valuable Data Belong to Hackers?
January 05, 2015 Added by:Thu Pham
Every organization, regardless of size, is comprised of a variety of sensitive data - from HR and payroll handling medical, financial and personally identifiable employee data to your precious intellectual property. And each of these data types can be sold for a price on the black market, making them valuable to attackers financially as well as for blackmail purposes.
Comments (6)
Moving from Alert-Driven to Intelligence-Driven Security
January 05, 2015 Added by:Paul Lipman
The emergence of smart, integrated, cloud-based security services will enable a transformation from an alert-centric to an intelligence-centric approach to security. This will vastly enhance the Chief Information Security Officer's (CISO’s) visibility and ultimately deliver substantial improvements in the robustness of the overall security posture.
Comments (1)
Improve Information Security and Privacy Now!
December 22, 2014 Added by:Rebecca Herold
Too many businesses have poor information security controls in place (e.g,. demonstrably Sony, Staples, and a seemingly infinite number of other companies) and are basically giving their intellectual property, and the personal information they are responsible for, away.
Comments (4)
What Network Security Lessons Can We Learn from the Sony Attack?
December 17, 2014 Added by:Patrick Oliver Graf
Hollywood is a place that can be driven mad by star-studded gossip, where the talk of the town is rarely private and where people are accustomed to their secrets not staying secret for very long. Yet, this state of play hasn’t made it any easier for the victims of last month's cyberattack against Sony, carried out by shadowy assailants calling themselves the Guardians of Peace.
Comments (15)
Security in 2015: The Internet Becomes the Corporate Network Perimeter
December 05, 2014 Added by:Paul Lipman
The cloud has been widely hailed as the most disruptive force in modern business. Indeed, the world is in the midst of fundamentally profound transformations, enabled by the cloud, in the ways in which we access and interact with data and applications. Unfortunately, the security industry has not kept pace with these transformational trends, necessitating an equally profound change in the way we s...
Comments (0)
The Cost of a Data Breach in 2014: An Industry by Industry Breakdown
December 04, 2014 Added by:Thu Pham
The average total cost of a data breach increased 15 percent in 2014 to $3.5 million, this according to the Ponemon Institute’s 2014 Cost of Data Breach Study: Global Analysis. But how does that average vary from industry to industry, each with different types of consumer information and different data regulations?
Comments (0)
Phones, Phablets and Clouds - Securing Today’s New Infrastructure
December 03, 2014 Added by:Steve Durbin
Despite the undeniable corporate and consumer interest, the security and privacy implications of cloud and mobile connected devices are concerning many security professionals. Countless organizations are still playing catch up – Bring Your Own Device (BYOD) polices are only starting to be embedded, reviewed and updated. IT departments are overwhelmed with the amount of devices entering the workp...
Comments (0)
- Demonstration of Destructive Cyberattack Vector on “Air-gapped” Systems
- What It Will Really Take to Build Trust in Security Companies
- Avoid the Breach: Live Webinar 9/27 - Register Now
- Going Global: Three Key Strategies for Managing International Firewalls
- What Is ID and Verification and Why Is It Such an Integral Part of Digital Life?
- How to Choose the Right EDR solution for Your Organization
- Automating Access May Be Best for Remote Users
- SAP Cyber Threat Intelligence report – September 2016
- Demonstration of Hacking a Protective Relay and Taking Control of a Motor
- Pokémon GO Security Threats Hit via Social Media