Collaborate Disseminate
23 NYCRR 500, also known as NYDFS Cybersecurity Regulation, is a law issued by the New York State Department of Financial Services (NYDFS) that mandates the enforcement of optimal data security standards to safeguard websites and apps. 23 NYCRR 500 […]… Continue reading A New York special: NYDFS cybersecurity regulation (23 NYCRR 500)
With COVID-19 still very much amongst us, online activity is continuing its global ascend. The security implications are also clear. Third-party applications running on websites are creating numerous risks and blind-spots that are becoming harder to de… Continue reading 3 Web Third-Party Related Events You Don’t Want to Miss From October-December 2020
The shopping season which begins on Black Friday rolling over to Cyber Monday, is actually one of the most critical times for online retailers. During this period promotions are offered, new products are launched, and the shopping websites themselves i… Continue reading How Black Friday and Cyber Monday Can Go From a Retailer’s Dream Into a CiSO’s Worst Nightmare
Akamai today launched Page Integrity Manager, an in-browser threat detection capability that discovers compromised instances of JavaScript running on a client. Patrick Sullivan, CTO for security strategy at Akamai, said this type of cyberattack is bec… Continue reading Akamai Tool Detects Suspicious JavaScript Code
A recent slew of skimming attacks have been linked back to Magecart Group 12. Continue reading Magecart Gang Attacks Olympic Ticket Reseller and Survival Food Sites
Salesforce Commerce Cloud, also known as Demandware, is used by some of the worlds largest brands for marketing, customer interaction, and to process online shopping transactions. Given the importance of the platform, and the sensitivity of the data it… Continue reading Protection against Magecart with new Instart Web Skimming Protection for Salesforce Commerce Cloud
An unfortunate truth of doing business online today — attackers will try to break into your web apps. It’s only a matter of time. In fact, according to research, a new online attack occurs every 39 seconds. Hardly a week goes by without ano… Continue reading Browser-side security — the blindspot you need to prioritize
Adobe Systems fixed a critical vulnerability in Flash Player that was publicly disclosed by a researcher earlier this month. The vulnerability, tracked as CVE-2018-15981, is a type confusion issue that can lead to arbitrary code execution. It was fixe… Continue reading Adobe Patches Zero-Day Flaw in Flash Player