(ISC)² Blog

From Silo to Synergy between Cybersecurity and Privacy in Europe

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a pair of webinars, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. After looking at the landscape in the U.S., we now turn our attention to Europe. The conversation brought together conversation Isabelle Roccia, IAPP managing director Europe, Christian Toon, CISO at Pinsent Masons Law Company, Anna Zeiter, CPO at eBay and Ilias Chantzos, global & privacy officer at Broadcom. By John E. Dunn  The reality of data breaches is causing the structure of corporate management to rapidly evolve. The traditional model... Read more →

From Silo to Synergy between Cybersecurity and Privacy in the U.S.

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a webinar, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. Bringing together a conversation between Cobun Zweifel-Keegan from IAPP (Moderator), Ron Woerner, an independent CISO/Forrester consultant, and Robin Andruss from Skyflow. By John E. Dunn “The nice thing about standards is that there are so many to choose from.” - Grace Hopper After the early optimism of the internet era, data has turned into a problem, with privacy crystallizing many of the most pressing issues. One way to understand this is... Read more →

Infosecurity Europe 2023 Preview – Our Pick of the Keynote Sessions

In the first of two previews of Infosecurity Europe 2023, we look at our top picks for unmissable keynote sessions across the three days of the conference, held at ExCel in London from June 20-22. By John E. Dunn As the pivotal cybersecurity conference in the region, every Infosecurity Europe conference is oriented to topical themes. This year is no exception, with the speaker lineup covering everything from the on-going anxiety of cyberwar, how zero trust can be made to work once it leaves the drawing board, and the never-ending puzzle of assessing supply chain risk. The following is our... Read more →

#WorldPasswordDay - (ISC)² Members Weigh In

This year for World Password Day we have covered the history and misconceptions of passwords in Password Myths vs. Reality and dove into the benefits of password managers in Beyond Username and Password: Protecting Your Digital Identity. To wrap up the annual reminder of staying safe and secure online, we asked our group of (ISC)² Blog Volunteers for their insights and advice. What is your best advice as a cybersecurity professional to those outside of the industry when it comes to setting passwords? Continue to educate yourself, regardless of the industry you are in, the safety of data is not... Read more →

Beyond Username and Password: Protecting Your Digital Identity

By Elango Balusamy, CC Elango is an accomplished technology leader with 20+ years of experience building high-performance engineering organizations for high-tech and financial services businesses across multiple geographies. With an in-depth understanding of governance, compliance, regulatory, and cybersecurity requirements of ASEAN markets. In today's digital age, we use a multitude of digital products and services, one thing common across them is how we identify ourselves in the digital world. Username and password was the de facto standard to prove identity, with the growth of the digital landscape, newer and sophisticated techniques are catching up. While Single Sign On (SSO) and... Read more →

Password Myths vs. Reality

By Er. Tapan Jatakia, CC Tapan is a researcher, innovator, mentor and advisor in the domains of cybersecurity and threat intelligence with a passion for interweaving data science, machine learning and artificial intelligence along with IT/cybersecurity to study and conduct research and development. World Password Day is an annual event celebrated on the first Thursday of May to promote password security awareness and best practices. May 7, 2013, marked the first observance of World Password Day, which aims to raise awareness about the significance of employing robust, distinct, and intricate passwords for safeguarding online accounts and personal data. World Password... Read more →

#IdentityManagementDay - Best Practices to Help Keep Your Organization Secure

By Chinatu Uzuegbu, CISSP, CEO/Managing Cyber Security Consultant at RoseTech CyberCrime Solutions Ltd. We kicked off the Identity and Access Management Processes from the Top-Level Management approach. The Identity and Access Management Security Steering Committee is a group of C-Suites leaders, also referred to as the respective Data and Asset Owners from the various Business Units of my organization. The group met and established the governing policy around the Identity and Access Management Processes. The governance covers the Mandatory Access Control Policy and Trust Policy of the organization which are automatically enforced as the baselines on default. The governance of... Read more →

IDENTITY MANAGEMENT DAY 2023: Advice from Cyber Pros

Tomorrow, April 11 is Identity Management Day. This day serves as an annual reminder to increase awareness and education for leaders, IT decision-makers and the general public on the importance of identity management. The dangers of improper management of digital identities are at an all-time high. We spoke with our blog volunteers to get their insights into what best practices their companies are following, along with how you can get on a path to better identity management. Why is identity management and security important in 2023? “In the current digital landscape, identity security has gained paramount importance due to the... Read more →

Cybersecurity Industry News Review – March 21, 2023

KillNet is bad for your health, TikTok facing further bans, ransomware impacts cancer test results, Russia allegedly increasing its cyberwarfare efforts. By Joe Fay Microsoft Demonstrates How KillNet Is Bad for Our Healthcare Sector Microsoft has highlighted a rise in DDoS attacks on healthcare organizations, mapping a three-fold increase in attacks over three months. It said it tracked 10 to 20 attacks per day on healthcare organizations on Azure in November but was seeing 40 to 60 per day in February. The attack mix changed over this time, it added, with over half of attacks now being UDP floods, with... Read more →

Latest Cyberthreats and Advisories - March 17, 2023

Cybercriminals pounce on SVB collapse, privacy concerns around ChatGPT and the FBI warns of a rise in crypto scams. Here are the latest threats and advisories for the week of March 17, 2023. By John Weiler Threat Advisories and Alerts FBI Warning: Cryptocurrency Investment Schemes on the Rise The U.S. Federal Bureau of Investigation (FBI) is warning internet users of an increase in cryptocurrency investment scam schemes, which defrauded victims of over $2 billion in 2022. Cybercriminals (usually located overseas) use social media platforms, dating apps, professional networking apps and other online means to connect with targets. The criminals then... Read more →

Cybersecurity Industry News Review – March 14, 2023

The U.K. Online Safety Bill triggers a security rebuke from WhatsApp, the Czech Republic concerned about TikTok, an international law enforcement effort shuts down the NetWire RAT infrastructure, while a study suggests workforce malaise towards reporting security incidents. By Joe Fay WhatsApp Would Leave U.K. Rather Than Break Encryption WhatsApp would pull its end-to-end encrypted messaging service in the U.K., rather than submit to any requirement to weaken its privacy stance to comply with the U.K. government’s Online Safety Bill. WhatsApp chief Will Cathcart said that 98 per cent of its users were outside the U.K., and ALL users wanted... Read more →

Latest Cyberthreats and Advisories - March 10, 2023

By John Weiler Mexico timeshare scams, the DoppelPaymer ransomware gang gets busted and a major data leak rocks Oakland, California. Here are the latest threats and advisories for the week of March 10, 2023. Threat Advisories and Alerts FBI Issues Warning About Mexico Timeshare Scam The U.S. Federal Bureau of Investigation (FBI) has issued an advisory about timeshare scams in Mexico, which affected over 600 people and resulted in roughly $39.6 million in victim losses last year. How does the scam work? Owners of timeshares in Mexico receive an unexpected email or phone call from fraudsters requesting to sell or... Read more →

(ISC)² Members Reveal Deep Skepticism About Artificial Intelligence and Machine Learning

By John E. Dunn It’s little surprise that many people are skeptical about the rapid encroachment of artificial intelligence (AI) and machine learning (ML) into daily life. However, should cybersecurity professionals be more positive about the benefits for the field? (ISC)² asked its members and candidates – experienced cybersecurity practitioners as well as those at the beginning of their career – whether or not they were concerned about the growth and adoption of both AI and ML in different scenarios. The results of the straw poll of 126 people revealed a consistently high degree of concern and skepticism about the... Read more →

Cybersecurity Industry News Review: February 7, 2023

By Joe Fay Derivatives traders, trainer trainers, and finger lickers all hit by ransomware. Russian hackers lash out after Ukraine tanks deal announced. Apple patches decade old devices. ION Markets Hit by “Cyber Security Event” Dublin-based data and software firm ION Markets has been hit by a “cyber event” which has had a knock-on effect on financial futures and derivatives markets worldwide. The attack is thought to have been ransomware related. ION Markets said the attack on its ION Cleared Derivatives division was “contained to a specific environment”, all the affected servers are disconnected, and remediation of services is ongoing.... Read more →

Royal Mail “cyber incident” is an ongoing cyberattack CEO admits to MPs

By: Joe Fay Simon Thompson, CEO of the U.K.’s Royal Mail, has confirmed in a session with MPs that the crippling of its ability to send parcels and letters abroad was down to a “cyberattack” and that it was “ongoing”. Thompson said that investigations into the attack on the U.K. postal operator – one of the most high-profile attacks on the country’s critical infrastructure to date – were continuing, but so far there was no evidence that personal data of customers had been compromised. The U.K. National Crime Agency (NCA) and National Cyber Security Centre (NCSC) have been investigating the... Read more →

How are you marking data privacy day?

By: Joe Fay Data Privacy Day (known as Data Protection Day in Europe) falls this Saturday (January 28) and if you haven’t worked out how to mark the day yet, tech vendors and organizations are more than willing to help. The international event began as Data Protection Day in Europe in 2007, under the auspices of the Council of Europe, and has since been taken up in the U.S. and other countries. Cisco marked it by releasing its 2023 Data Privacy Benchmark Study, which found that 92% of organizations recognized they need to do more to reassure customers about how... Read more →

Latest Cyberthreats and Advisories - January 20, 2023

TikTok is fined for a privacy violation, major corporations suffer breaches and Vice Society attacks another school. Here are the latest threats and advisories for the week of January 20, 2023. Threat Advisories and Alerts U.K. School Survey Reveals Surprising Findings A new survey by London Grid for Learning (LGfL) and the National Cyber Security Centre (NCSC) revealed that the uptick in cyberattacks on the U.K. school system may not be as bad as first thought. The survey, of more than 800 schools, revealed that 78% of them had suffered at least one cybersecurity incident. Other interesting findings showed that... Read more →

Latest Cyberthreats and Advisories - December 23, 2022

Ransomware hits hard around the world – again, Cybercriminals steal food and Fortnite’s developer is fined millions. Here are the latest threats and advisories for the week of December 23, 2022. Threat Advisories and Alerts Criminal Actors Use BEC Attacks to Steal Large Food Shipments Three U.S. government agencies – The Federal Bureau of Investigation (FBI), the Food and Drug Administration Office of Criminal Investigations (FDA OCI) and the U.S. Department of Agriculture (USDA) – have issued a joint warning to food suppliers that their industry is seeing an uptick in business email compromise (BEC) attacks. Criminal actors are impersonating... Read more →

Latest Cyberthreats and Advisories - November 18, 2022

Beware the BatLoader, the NSA calls for more memory-safe programming language use and ransomware causes more trouble in Australia….Here are the latest threats and advisories for the week of November 18, 2022. Threat Advisories and Alerts Researchers Sound Alarm on Dangerous BatLoader Malware Dropper A dangerous new malware loader with features for determining whether it's running on business or home computers has begun rapidly infecting systems worldwide over the past few months. Researchers at VMware Carbon Black claim the threat, dubbed BatLoader, is being used to distribute a variety of malware tools including a banking Trojan, an information stealer, and... Read more →

LATEST CYBERTHREATS AND ADVISORIES - OCTOBER 21, 2022

Ransomware derails big businesses as the Australian cyberattack spree and student loan forgiveness scam highlight a disturbing week in the cybersecurity world. Here are the latest threats and advisories for the week of October 21, 2022. Threat Advisories and Alerts FBI Warns That Fraudsters May Target Beneficiaries of Student Loan Forgiveness Individuals seeking US federal student loan forgiveness should be cautious of potential scams related to the Student Loan Debt Relief Plan introduced in August of this year. Scammers are using a variety of digital tools – including websites, email, mobile phones and more – to trick victims into giving... Read more →