Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

Facebook founder Mark Zuckerberg on Monday urged the European Union to take the lead in setting global standards for tech regulation or risk seeing countries follow China as a model. [Read More]
A coalition of consumer groups filed a complaint Thursday with US regulators claiming the popular video app TikTok has failed to live up to an agreement last year limiting data collection from children. [Read More]
Comparitech researchers have discovered that thousands of Android applications distributed through Google Play leak sensitive information due to Firebase misconfigurations. [Read More]
Cloud infrastructure provider DigitalOcean is informing customers that it inadvertently exposed some of their data to the Internet. [Read More]
GitHub has announced two new security features designed to help developers identify vulnerabilities and secrets in their code. [Read More]
Zoom has announced a series of security improvements, including better encryption and the possibility for admins to choose data center regions. [Read More]
Thousands of small business owners reeling from the aggressive measures taken to halt the spread of the coronavirus may have had their personal information exposed last month on a government website that handles disaster loan applications. [Read More]
Video game peripherals maker SCUF Gaming exposed to the web a database containing information on more than 1.1 million users. [Read More]
Data access and governance provider Okera raised in $15 million in Series B funding, which brings the total raised by the company to $29.6 million. [Read More]
An exposed AWS S3 bucket belonging to RigUp was found to expose tens of thousands of private files belonging to organizations and individuals in the U.S. energy sector. [Read More]

FEATURES, INSIGHTS // Data Protection

rss icon

Laurence Pitt's picture
For an MSP looking to grow business, the convergence of SD-WAN and security, along with the transitional needs of customers, translates to opportunity.
Jim Gordon's picture
Individuals and security professionals should have a 360 mindset and know the actions needed to take in the pursuit of data protection and the preservation of privacy.
Alastair Paterson's picture
If it takes a whole village to raise a child, it takes a whole community of vendors and business partners to build a secure data environment.
Ellison Anne Williams's picture
Data in Use has become a point of least resistance for an attacker. There is a major industry need to recognize this lapse and close the gap in data security by protecting data while it is being used.
Gunter Ollmann's picture
DLP has always been tricky to deploy and enforce, and most CISOs can freely regale stories of DLP promises and their subsequent failures.
Ellison Anne Williams's picture
Data protection schemes must recognize and secure data as it exists at all points in the processing lifecycle, whether at rest, in transit, or in use.
Torsten George's picture
By implementing the core pillars of GDPR, organizations can assure they meet the mandate’s requirements while strengthening their cyber security posture.
Laurence Pitt's picture
Failure to implement basic cybersecurity hygiene practices will leave retailers vulnerable to damage and fines during a lucrative time for their businesses.
Travis Greene's picture
While GDPR doesn’t require encryption, there are four mentions of encryption in GDPR that provide real incentives for organizations to use encryption.
Preston Hogue's picture
Security teams should think about how company data might connect with data from other organizations or industries and how those combined data sets could be triangulated into a larger picture that ultimately puts you at risk.