Security Industry — News

Users smallest source of concern despite causing most security breaches: CompTIA

Persistent shortcomings in corporate information-security policy continue to compromise security efforts by exposing organisations to human error and the ever more-clever depredations of ransomware and other malware authors, peak security group CompTIA has warned on the back of new research showing that just 54 percent of surveyed companies offer their employees any form of cybersecurity training.

David Braue | 01 Apr | Read more

Optus undertakes extensive security review as sanction for “significant” privacy breaches

Number-two telecommunications company SingTel Optus will undergo a wide ranging, independent review of its information-security systems after working with the Office of the Australian Information Commissioner (OAIC) to finalise an enforceable undertaking relating to what privacy commissioner Timothy Pilgrim has called three “significant” breaches of customer privacy last year.

David Braue | 31 Mar | Read more

The week in security: Now law in Australia, data retention challenged overseas

It was a banner week for the handling of personal information, with Australia's controversial metadata retention laws becoming law after Labor capitulated on its previous opposition to the legislation. Similar issues were at the fore in the US – where numerous technology companies pressed the US government to stop its collection of metadata – and Europe, where Dutch telcos were ordered to delete data retained under previous data-retention laws after they were found to be unconstitutional. And the EU's high court wasset to revisit the ability of US companies to handle the zealously-protected personal information of EU citizens.

David Braue | 30 Mar | Read more

The week in security: Google fights app malware, long-term PCI compliance plummets

Government requests for Facebook continued to grow in the second half of 2014, the company's latest transparency report has confirmed. And, speaking of transparency, some vendors were worried by findings by Verizon that 80 percent of PCI DSS-compliant firms fail to stay compliant in the year after their certifications – leading some to push the PCI Council to accept software-based encryption]] as well as the current hardware-based encryption it requires.

David Braue | 23 Mar | Read more