The holiday season in 2016 will see many of these large enterprises up their game in terms of protecting customer data. It’s not as if they have much choice, data breaches in the past have reduced public trust in online retailers – but the latest approaches to ensuring data security go some way to restoring that trust.
Organisations which have chosen the long run tackling digital transformation over the prompt adoption strategy and try to mate it with their established internal tactics have experienced fewer ransomware attacks.
A recent survey by the SANS Research Program showed 58% of respondents identified IT compromises as a leading initial attack vector for ICS/OT incidents. This reflects the increasingly interconnected nature of IT and OT environments and highlights the risks associated with this convergence.
Only one third of respondents to a recent survey include business-critical systems, like SAP, in cybersecurity monitoring. And one third of those who do include SAP in security monitoring do not review SAP logs for potential cyber threats.
While the Facebook Cambridge Analytica scandal has created its share of problems for Facebook, it’s clear that the scale and scope of the scandal extends to every corner of Silicon Valley. After all, most tech giants are collecting staggering amounts of user data and comprehensive new privacy regulations seem imminent.
Mobile spyware is not a threat that will lessen anytime soon. Mobile devices present an attack surface that is ripe for threat actors. To mitigate the mobile security risk at its root, organizations need to employ an agent on the devices they manage that analyzes applications installed and the SDKs within them.
Security defenses, almost by definition, are frequently one step behind threat actors as we often must see what we are up against before mounting an effective counterstrategy. Despite this, it’s important to begin with the right foundational layers, and then evolve those layers and defenses as rapidly as possible.
A Security Information and Event Management (SIEM) can play an important role in GDPR compliance. It can serve as a centralized point for all data collection and analysis, and offer intelligent insights into malicious behavior so you can be alerted of security incidents before they become an impactful data breach.
How can well-intentioned companies avoid employing dark patterns by mistake? And how can privacy professionals, particularly attorneys, effectively counsel their clients away from this common, yet all too prevalent, practice?
RF-enabled devices are now prevalent in the enterprise and RF security is getting harder to enforce in secure facilities that require more nuanced electronic device policies.









