Google introduces many G Suite security enhancements

Last week, the big news from Google Cloud Next 2019 was that phones running Android 7.0 or higher can be turned into a security key for G Suite account 2-step verification. But at the event Google also announced a number of G Suite enhancements, many o… Continue reading Google introduces many G Suite security enhancements

WPA3 design flaws affect security of new Wi-Fi standard

Researchers have discovered a number of design flaws affecting the security of the recently introduced WPA3 data transmission protocol. Collectively dubbed Dragonblood (because they affect WPA3’s Dragonfly handshake), they can be exploited to mou… Continue reading WPA3 design flaws affect security of new Wi-Fi standard

European standards org releases consumer IoT cybersecurity standard

The European Telecommunications Standards Institute (ETSI) has released ETSI TS 103 645, a standard for cybersecurity in the Internet of Things, to establish a security baseline for internet-connected consumer products and provide a basis for future Io… Continue reading European standards org releases consumer IoT cybersecurity standard

What You Think You Know about the OWASP Top 10 May Be Wrong

The Open Web Application Security Project (OWASP) is an open community dedicated to the mission of enabling companies to develop, purchase and maintain applications and APIs that can be trusted.  Since 2003, OWASP has been releasing a list of the 10 m… Continue reading What You Think You Know about the OWASP Top 10 May Be Wrong

WPA3: Next generation of Wi-Fi security now available

Wi-Fi Alliance introduced Wi-Fi CERTIFIED WPA3, the next generation of Wi-Fi security, bringing new capabilities to enhance Wi-Fi protections in personal and enterprise networks. As the Wi-Fi industry transitions to WPA3 security, WPA2 devices will con… Continue reading WPA3: Next generation of Wi-Fi security now available

PCI Council sets security requirements for mobile point of sale solutions

The PCI Security Standards Council has announced a new PCI Security Standard for software-based PIN entry on commercial off-the-shelf (COTS) devices such as smartphones and tablets. What are we talking about here? Stores that offer customers the possib… Continue reading PCI Council sets security requirements for mobile point of sale solutions

WPA3 to feature much needed security enhancements

The Wi-Fi Alliance, a non-profit organization that tests and slaps the “Wi-Fi Certified” logo on products that meet certain standards of interoperability, has announced enhancements for WPA2 and the imminent introduction of WPA3. About WPA2… Continue reading WPA3 to feature much needed security enhancements

IoT goods, software and digital services to be evaluated for privacy and security

Consumer Reports, a US non-profit group whose extensive reviews of consumer goods have helped the public make informed and better choices for many decades, has announced that it will start evaluating products and services for privacy and data security. “We think it’s unfair and unrealistic to expect consumers to constantly play defense when the products and services they use aren’t engineered with basic privacy and security protections built in,” the group noted. Why an IoT … More Continue reading IoT goods, software and digital services to be evaluated for privacy and security

London economy hit hard by security breaches

A new report by the Conservative members on the London Assembly, which help scrutinise the work of the Mayor of London, estimates that in 2015 in London 329,515 organizations experienced some form of security breach. “In London specifically, it is possible to estimate conservatively that the cost to the economy from security breaches could be in the region of £35,997,500,000 per year,” the group said, and proposed a new “Mayoral Standard” for data security. Like … More Continue reading London economy hit hard by security breaches