Phishing Prevention Framework Reduces Incidents by Half

November 25, 2024 at 04:47PM The FS-ISAC launched a Phishing Prevention Framework aimed at reducing phishing and fraud for businesses, especially in financial services. Successful pilot programs cut phishing complaints in half. The framework emphasizes understanding fraud origins, collaborative data collection, and partnerships with telecom providers to enhance defenses against evolving phishing tactics. ### Meeting … Read more

Public sector cyber break-ins: Our money, our lives, our right to know

November 4, 2024 at 05:34AM Transport for London experienced a significant cyber attack in September, exposing customer data and affecting ticketing systems. Initial claims of minimal damage were contradicted by customer complaints. The piece argues for greater transparency in public sector cybersecurity, suggesting the need for independent investigations to improve accountability and prevent future breaches. … Read more

Acronym Overdose – Navigating the Complex Data Security Landscape

October 19, 2024 at 06:00AM The article discusses the importance of understanding data security acronyms such as DLP and NIST. It highlights key drivers for data security, including regulatory compliance, intellectual property protection, and customer trust. It also outlines a structured approach to data security using the NIST framework and emphasizes the integration of various … Read more

Securing Customers’ Trust With SOC 2 Type II Compliance

June 21, 2024 at 10:10AM Audit compliance is crucial for demonstrating commitment to data security, privacy, and building trust with customers and stakeholders. Based on the meeting notes, the key takeaway is that audit compliance contributes to demonstrating commitment to data security and privacy, and also helps in building trust with customers and stakeholders. Full … Read more

Wyze admits 13,000 users could have viewed strangers’ camera feeds

February 20, 2024 at 10:23AM Smart home security camera provider, Wyze, disclosed a cybersecurity incident to its customers, revealing that around 13,000 users were able to view other users’ camera feeds due to a security issue following a service outage. The company stated that only 1,504 users accessed the feeds, representing 0.25% of all users. … Read more

Ivanti Gets Poor Marks for Cyber Incident Response

February 13, 2024 at 11:36AM Ivanti’s VPN appliances have experienced widespread vulnerabilities, with slow incident response and delayed patch releases. This has led to criticism from cybersecurity experts and a federal mandate to disconnect Ivanti products from government systems. Ivanti’s reputation and customer trust are at stake, with uncertain prospects for recovery and continued caution … Read more

Recognizing Security as a Strategic Component of Business

January 31, 2024 at 10:02AM Business leaders need to recognize that cybersecurity should be a strategic aspect of the business, rather than just a cost center, due to its value in protecting and enabling the business. The relationship between CIOs and CISOs has become more equal, and IT and security teams have become integral to … Read more

Mr Cooper cyberattack laid bare: 14.7M people’s info stolen, costs hit $25M

December 18, 2023 at 03:58PM Mortgage lender Mr Cooper has disclosed a security breach resulting in the theft of personal information from 14.7 million individuals, costing an estimated $25 million to resolve. The stolen data includes names, addresses, Social Security numbers, and bank account details. Mr Cooper intends to provide free credit monitoring to affected … Read more