Latest

Cyberwarfare / Nation-state attacks

Super Micro: Audit Didn't Find Chinese Spying Chip

Jeremy Kirk  •  December 14, 2018

Super Micro Computer says a third-party audit of its recent and older motherboards has not turned up evidence of a spying chip as alleged in an explosive report two months ago by Bloomberg BusinessWeek. Bloomberg, however, has stood by its story despite no physical example of the malicious chip turning up.

►

Advanced SOC Operations / CSOC

Insights on Upgrading a SOC

Tom Field  •  December 14, 2018

By building in some risk intelligence upfront, organizations can upgrade their security operations centers and reduce the noise from the sheer volume of alerts and false positives, says Ganesh Prasad of RSA, who shares insights.

►

Breach Response

Breach Response: When to Involve the Board and PR

Tom Field  •  December 14, 2018

In the wake of the recent Marriott and National Republican Congressional Committee data breaches, now is the time to get your board's attention regarding breach response and public disclosures. Attorney Mark Rasch offers insights for preparing and practicing response plans.

►

Artificial Intelligence & Machine Learning

How to Maximize Data Used to Fight Fraud

Tom Field  •  December 14, 2018

The data being used to drive effective anti-fraud efforts can be rich in context and useful for other activities. Jim Apger of Splunk describes emerging fraud schemes and solutions, highlighting the role of machine learning.

Breach Response

Reports: China Suspected in Marriott Database Breach

Jeremy Kirk  •  December 13, 2018

Hackers linked with China are suspected to be behind the four-year breach of Marriott's Starwood guest reservation system, according to several news reports. The suggestion is likely to contribute to increased tension between the U.S. and China.

►

Audit

Making Internal Audits More Relevant

Suparna Goswami  •  December 13, 2018

How can internal audits be improved and made more meaningful? Prasanna Bharatan, internal auditor at the pharmaceutical company Wockhardt, outlines the important steps to take.

►

3rd Party Risk Management

Improving Vendor Risk Management

Suparna Goswami  •  December 13, 2018

Providing vendors with visibility to a company's systems makes the vendor management process far more complicated, says Sunil Chandiramani of NYKA Advisory Services.

Incident & Breach Response

Incident Response: Mistakes to Avoid

Suparna Goswami  •  December 13, 2018

Ganesh Viswanathan, CISO at Quatrro, a global services company, offers insights on how to avoid incident response mistakes. One key element, he says, is using multiple sources for breach detection so response can be swift.

Breach Response

Marriott: Breach Victims Won't Be Forced Into Arbitration

Jeremy Kirk  •  December 12, 2018

Breach victims who sign up for free fraud-monitoring services from breached businesses that lost control of their data often sign away their right to join class-action lawsuits or pursue other legal actions, and Marriott proved to be no exception, following its mega-breach. But it now appears to be backing off.

Breach Preparedness

Congratulations: You Get 'Free' Identity Theft Monitoring

Mathew J. Schwartz  •  December 12, 2018

Is there anything better than being offered one year of "free" identity theft monitoring? Regularly offered with strings attached by organizations that mishandled your personal details, the efficacy and use of such services looks set for a U.S. Government Accountability Office review.

Breach Notification

Fresh Google+ Bug Exposed 52.2 Million Users' Data

Jeremy Kirk  •  December 11, 2018

Google says a buggy API update it pushed last month for its soon-to-be-mothballed Google+ social network exposed personal information for 52.2 million users. The data-exposure alert arrives just two months after Google admitted that a March problem with the same API exposed data for 500,000 users.

Breach Preparedness

Equifax Breach 'Entirely Preventable,' House Report Finds

Mathew J. Schwartz  •  December 11, 2018

The massive data breach suffered by Equifax in 2017 "was entirely preventable," according to a report released by the House Oversight Committee's Republican majority. Some Democratic lawmakers have slammed the report for failing to advance legislative or oversight changes to help prevent breaches.