The Rise of Insider Threats in Verizon’s DBIR

Each year, Verizon releases its Data Breach Investigation Report (DBIR). These reports evaluate the state of security each year, providing detailed statistics around leading vulnerabilities, which industries face the most breaches, and much more. In 2… Continue reading The Rise of Insider Threats in Verizon’s DBIR

AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web

Names, addresses, phone numbers, call and text message records and account PINs were all caught up in a cloud misconfiguration. Continue reading AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web

Verizon’s 2019 Payment Security Report – Not Just for PCI

If you are responsible for cybersecurity or data protection in your organization, stop what you are doing and read this report. Actually, first, go patch your servers and applications and then read this report. Much like Verizon’s Data Breach Inv… Continue reading Verizon’s 2019 Payment Security Report – Not Just for PCI

Verizon and AWS announce 5G Edge computing partnership

Just as Qualcomm was starting to highlight its 5G plans for the coming years, Verizon CEO Hans Vestberg hit the stage at AWS re:Invent to discuss the carrier’s team up with the cloud computing giant. As part of Verizon’s (TechCrunch’s parent company, disclosure, disclosure, disclosure) upcoming focus on 5G edge computing, the carrier will be […] Continue reading Verizon and AWS announce 5G Edge computing partnership

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

On Nov. 23, one of the cybercrime underground’s largest bazaars for buying and selling stolen payment card data announced the immediate availability of some four million freshly-hacked debit and credit cards. KrebsOnSecurity has learned this latest bat… Continue reading Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

PCI Pal urges businesses to remove ‘tick box’ mentality to ensure year-round PCI DSS compliance

With just 36.7% of organisations actively maintaining PCI DSS programmes in 2018, PCI Pal®, the secure payments provider to contact centres, is urging security and compliance bosses to embrace modern cloud strategies combined with rigorous updates… Continue reading PCI Pal urges businesses to remove ‘tick box’ mentality to ensure year-round PCI DSS compliance

IoT is an ecosystem, as secure as its weakest link

Remember when, three years ago, several Mirai botnets hit DNS provider Dyn and caused part of the Internet to be unreachable for most users in North America and Europe? For a moment there it really seemed that IoT security would become an indisputable … Continue reading IoT is an ecosystem, as secure as its weakest link