GDPR: Not heavy-handed yet, but driving data breaches into the open

The GDPR fines issued so far have been small, but breach notifications are up. As GDPR continues to ramp up, it seems likely to achieve its goals of privacy. The original version of this post was published in Forbes. With the European Union’s lan… Continue reading GDPR: Not heavy-handed yet, but driving data breaches into the open

Throwback Thursday: Whatever happened to Anthem?

Whatever happened to Anthem? In 2014–2015, the firm suffered the largest healthcare data breach ever. But healthcare cyber security has improved since then. The data breach of healthcare giant Anthem, which came to light a little more than four y… Continue reading Throwback Thursday: Whatever happened to Anthem?

How to improve software security testing in the auto industry

In the automotive industry, security is safety. And auto software security testing, like all security testing, needs to shift left to be effective. This is Part 3 of a three-part interview about automotive industry cyber security practices. Part 1… Continue reading How to improve software security testing in the auto industry

New software standards aim to slow rampant credit card theft

With the new PCI standards, the Payment Card Industry Security Standards Council intends to reduce credit card fraud. But the new standards may not be enough. The original version of this post was published in Forbes. Anything that could reverse, or ev… Continue reading New software standards aim to slow rampant credit card theft

More resources needed to improve connected car security

Connected car security is a priority of the automotive industry, according to a recent report. But the shortage of resources and skills is a challenge. This is Part 2 of a three-part interview about cyber security practices in the automotive industry. … Continue reading More resources needed to improve connected car security