Over a quarter of cloud loads have been compromised by cryptojackers
Audit of cloud workloads finds misconfiguration remains rife – and cybercriminals are taking advantage
David Braue | 26 Jul | Read more
Cloud Security — News
FTC commissioners: Facebook’s $5bn fine was too light
Facebook settles FTC privacy charges but two commissioners think the terms won't change the company's behavior.
Scam email explodes: 50 percent increase in Q1 2019, says Symantec
Australia in the firing line of business email compromise scammers.
Equifax to pay up to $700m over 2017 breach, consumers can get up to $20,000 in cash
Equifax settlement comes ahead of Facebook’s expected $5bn penalty.
The week in security: Will a $US5b fine get the privacy message through?
Facebook copped a massive fine for privacy violations – but will it be enough to force the industry to be more proactive about protecting users’ privacy? Opinions are divided.
David Braue | 22 Jul | Read more
Microsoft warned 10,000 targets of nation-state hackers in one year
Microsoft shows off its work to defend democracies under attack by well-funded hackers.
Microsoft eyes Mozilla’s Rust to obliterate C++ memory security flaws
Could Mozilla's Rust help developers who use C, C++ and C# cut time spent on worrying about security issues?
As skills gaps persist, CEDA finds temporary migration is “a net positive” for Australia
Formal temporary skills programs have “helped to fill important skills gaps” in areas like cybersecurity, a new analysis has concluded while warning that regular changes to the programs are creating problems for employers that need more certainty in their workforce planning.
David Braue | 17 Jul | Read more
The week in security: After major GDPR violations, everything is fine
Massive GDPR fines for data breaches were the order of the week as British Airways copped a £183m ($A328m) fine for a hack of its website last year.
David Braue | 17 Jul | Read more
Workers wise up to phishing, but you still need 2FA for business accounts
Train your staff to catch phishing email, but you also have to implement two-factor authentication.
Huge rock, cracked windshield helps hacker land a $10k Tesla security bug
If you have the right information, a cracked windshield on a Tesla can be worth five times its cost of replacement.
Apple zaps Zoom web server on thousands of Macs
Apple has rolled out a security-related update to all Mac systems to ensure users of Zoom aren't exposed to a serious privacy and security flaw.
CSO Webinar: The FBI knows how to catch a cybercriminal – but do you?
Ever more sophisticated cyber adversaries, many with nation-state backing, pose an imminent threat to both public and private organisations.
Microsoft kicks off public preview of Azure AD password muffler
Microsoft buries the password a little bit more and brings it to Windows 10 201H1 testers.
GDPR fines roll in: After BA, Marriott faces £99m fine over breach affecting 383 million
Marriott Hotels faces the EU's second largest fine under its new data protection laws. It will challenge the fine.
British Airways faces £183m GDPR fine over hack, four times Google's GDPR fine
British Airways could land a fine equal to 1.5 percent of its global revenues over a 2018 website hack.
CSOs should look to orchestration, automation to bridge security policy, information silos
Security orchestration, automation and response (SOAR) may have only emerged as an industry buzzword a little over a year ago, but the integrSecurity orchestration, automation and response (SOAR) may have only emerged as an industry buzzword a little over a year ago, but the integration and automation that lie at its core have rapidly gained currency with CSOs whose roles increasingly involve unifying silos of security information and translating them into action.
David Braue | 08 Jul | Read more
Scam: No Samsung phone updates? There's an app for that on Google Play with 10 million users
Scammers exploit Samsung's poor record of updating crappy phones.
China’s spyware at the border targets foreign travelers
Chinese police malware scans phones for files about Delai Lama, Taiwan and Islam.
Anti-fraud analytics must be about prevention, not detection
Fraud is hardly a new phenomenon online, but organisations’ ability to detect and fight it has increased as ever-richer machine learning models help helping experts apply analytic techniques to detect “once in a blue moon” events such as business email compromise (BEC) and high-value financial transfers.
David Braue | 03 Jul | Read more