Top American banks have significant gaps in GDPR website compliance
GDPR affects all companies that engage with EU citizens, even if they have no physical presence in the EU, but a new study reveals that some major US firms still have websites that don’t comply.
The research by digital threat management company RiskIQ looks at 25 of the 50 largest banks in the US (as of 2017) and finds significant security gaps in personally identifiable information (PII) collection.
Open source developers make progress in adopting secure practices
Secure software development practices are increasingly being adopted by open source software (OSS), and are underscoring the importance of managing OSS risk.
The latest report from development platform Synopsys uses results from the free Coverity Scan static analysis solution to assess the quality of development practices and the overall maturity of the OSS ecosystem.
Password cracking tool helps admins test security
Weak or reused passwords are a common cause of security breaches but are something that it’s hard for administrators to police.
Intelligence-led security company FireEye is releasing a new password cracking tool to enable security professionals to test password effectiveness, develop improved methods to securely store passwords, and audit current password requirements.
Four in five companies aim to change the way they manage IT security in the next year
According to a new study, 80 percent of businesses across the US and UK will change how they deal with security in the coming 12 months.
The survey of more than 400 SMEs and enterprises by service management company SolarWinds MSP finds that 17 percent of companies intend to switch their current service provider in the next 12 months, 10 percent want to cease outsourcing in favour of in-house management, and 49 percent planning to outsource their security for the first time.
UK hosting firm launches free GDPR guide
With GDPR coming into force in May next year, worrying numbers of businesses are still unprepared for the impact of the new legislation which represents a major shake up in data protection.
UK hosting firm UKFast wants to help get businesses on the right track and is launching a free pocket guide to GDPR along with a downloadable toolkit.
HomeHack vulnerability could allow your LG robot vacuum to spy on you
Researchers at threat prevention specialist Check Point have uncovered a vulnerability which could allow hackers to gain control of the LG Hom-Bot robot vacuum cleaner's video camera.
The camera normally sends live video to the associated LG SmartThinQ app as part of its HomeGuard Security feature. Once in control of a specific user's LG account, any LG device or appliance associated with that account could be controlled by the attacker -- including the robot vacuum cleaner, refrigerators, ovens, dishwashers, washing machines and dryers, and air conditioners.
82 percent of security professionals worry about nation-state attacks
Nation-state attacks and hacktivists are among the biggest worries for IT security professionals according to a new study.
The report by AI security company Cylance and the Enterprise Strategy Group shows that 82 percent of respondents are concerned or extremely concerned by the threat posed by nation-states, and 79 percent are by the threat of hacktivists.
Traditional antivirus fails to protect 40 percent of users
Conventional antivirus solutions are failing to protect users from attacks according to a Malwarebytes report.
The study is based on real-world clean up scans performed by Malwarebytes. Nearly 40 percent (39.18percent) of all malware attacks cleaned on endpoints with an AV installed occurred on endpoints that had two or more traditional AV solutions registered.
New cross-channel tool helps businesses understand customers
While it's easier than ever to collect information about customers, businesses often struggle to extract meaningful information from it in order to drive sales.
The latest tool from customer data platform Segment lets enterprises build a record of their entire relationship with a customer, and use it to create personalized experiences everywhere they interact with their users.
Virtual reality could attract new talent to security careers
The cyber security industry continues to face a skills crisis, but a new study from security vendor ProtectWise and analyst ESG suggests that the adoption of new technologies could be instrumental in attracting new talent.
The survey of over 500 16 to 24 year-olds finds that 74 percent say that the use of gaming and VR technology in the fight against cyber crime would increase the likelihood of them pursuing a cyber security career.
Cyber criminals turn to messaging apps following dark web crackdown
The recent crackdown on popular dark web markets AlphaBay and Hansa is driving cyber criminals to migrate to messaging apps like Discord, ICQ, Skype, Telegram and Whatsapp, according to a new report.
The study from threat management company IntSights analyzed thousands of black markets, text storage/paste sites, hacking forums, IRC channels, apps and social media pages, and uncovers a steady increase in threat actors inviting cyber crime forum users to join their chat groups.
Gender divide opens up as mobile apps become the preferred way of booking travel
The latest annual Mobile App Engagement Index from app marketing platform Liftoff shows that travel reservation bookings on mobile have finally hit critical mass adoption.
Users are becoming accustomed to doing more on mobile and reservation apps are increasingly popular. This year's data shows that for businesses the cost-per-first-booking has dropped. In 2017, the peak cost to acquire a mobile user who made a reservation was $36.95, nearly half of last year's peak cost of $61.09. What's more, the average cost-per-reservation in 2017 ($27.98) was $16 less than the 2016 average ($43.88).
CyberScout launches one-stop marketplace for identity management
Recent breaches like that at Equifax have highlighted the importance of supporting victims with identity management services in the aftermath of an attack.
Identity and data defense firm CyberScout is launching a comprehensive marketplace for identity management, privacy, and cyber security education products and services, aimed at providing individuals with a one-stop-shop solution for all services relating to cyber protection.
Industrial and infrastructure networks are prime targets for attackers
Operational technology networks are used with specialized Industrial Control Systems (ICS) to monitor and control physical processes such as assembly lines, mixing tanks, and blast furnaces. These networks are ripe targets for adversaries according to a new study from industrial cyber security company CyberX.
Many of these networks are exposed to the public internet and easy to crack using simple vulnerabilities like plain-text passwords. Lack of even basic protections like antivirus can enable attackers to quietly perform reconnaissance before sabotaging physical processes.
One in three businesses can't keep up with cloud security
Maintaining security in the cloud and container environments is an increasing problem according to a new survey.
The study by intrusion detection platform Threat Stack finds that 31 percent of those interviewed say they are unable to maintain security as their cloud and container environments grow. As a result, 62 percent say that they’re seeking greater visibility into their public cloud workloads.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.