The Last Watchdog

JANUARY 9, 2023

A Data Privacy Impact Assessment, or DPIA , is a formal assessment of the privacy risks of your data processing activities. The purpose of conducting a DPIA is to identify and assess the potential impact of these risks on individuals’ rights and freedoms from your proposed processing operations.

Data privacy 210

Data privacy Small Business Data collection Cyber Risk 210

Security Boulevard

MARCH 2, 2023

This is blog 2 of 3 in our FAIR model series. The limitations of FAIR’s data collection process are discussed in part 1 of this blog series. Building a lego design and quantifying cyber risk have essential characteristics in common.

Risk 52

Risk Cyber Risk Data collection 52

The Last Watchdog

MAY 20, 2022

Keeping up with new risks, resolving them as soon as they occur, and recovering from incidents identified too late may, as you can certainly imagine, take up valuable resources and cause businesses to lose time, money, and the trust of their clients/partners. But, you may be wondering, what about the hazards of outsourcing cybersecurity?

Marketing 247

Marketing Digital transformation Technology Cybersecurity 247

Thales Cloud Protection & Licensing

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Security Boulevard

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

Security Boulevard

AUGUST 3, 2023

Summary The BloodHound code-convergence project brings some significant and long-desired feature enhancements to BloodHound Enterprise (BHE): Cypher search, including pre-built queries for AD and Azure Built-in support for offline data collection (i.e., Up next in our release blog series is the one everyone has been waiting for.

Data collection 98

Data collection Engineering Risk 98

NetSpi Technical

NOVEMBER 14, 2024

It focuses on distilling data related to shares configured with excessive privileges to better understand their relationships and risk. For those interested in the previous PowerHuntShares release, here is the blog and presentation. Risk Scoring “Be honest, how bad is it?” Let the pseudo-TLDR/release notes begin!

Passwords 145

Passwords Risk Data collection Backups 145

SC Magazine

APRIL 19, 2021

Researchers on Monday reported that cybercriminals are taking advantage of China’s push to become a leader in big data by extracting legitimate big data sources and selling the stolen data on the Chinese-language dark web. The stolen data ranges from lottery and stock data to commercial databases of Canadian and U.S.

Big data 100

Big data Data collection Mobile Risk 100

Troy Hunt

DECEMBER 17, 2017

Before I left DC, I promised the folks there that I'd come back with recommendations on how we can address the root causes of data breaches. I'm going to do that in a five-part, public blog series over the course of this week. For example: I've written before about vBulletin being plagued by SQL injection flaws over the years.

Data breaches 201

Data breaches Education Passwords Penetration Testing 201

IT Security Guru

MAY 24, 2021

Understanding the risk context of every asset helps them decide what requires immediate action, and what can be done incrementally or mitigated with other changes or ignored as too low risk. They need automation when they want it, so that action is taken automatically based on the security risk policies they have put in place.

Cybersecurity 117

Cybersecurity Risk Software Data collection 117

The Last Watchdog

NOVEMBER 21, 2018

International regulations have also played a significant role in the privacy discussion, specifically following enforcement of the GDPR (General Data Privacy Regulation) in the European Union (EU). He has over 10 years of experience with Information Security, Cyber Security, and Risk Management. . If the U.S.

Data privacy 133

Data privacy Data collection Big data Government 133

The Last Watchdog

OCTOBER 17, 2022

To provide even further insight into the data safety and privacy practices of app developers, researchers at Incogni conducted a study of the top 500 paid and top 500 free Google Play Store apps. percent) of the apps share user data with third parties. Greediest data harvesters. percent share approximate location history.

Data privacy 192

Data privacy Media Data collection Data breaches 192

Security Boulevard

JUNE 20, 2023

NIST Privacy Framework - organizations must identify the purposes for collecting and using PII. Federal Trade Commission (FTC) Act, Section 5 - organizations must disclose their data collection practices, including the purposes for which they collect and use PII.

Data collection 52

Data collection IoT Marketing Data privacy 52

Centraleyes

MAY 5, 2024

Murphy’s Law in Modern Risk Management Murphy’s Law is a timeless reminder of life’s unpredictability. In today’s digital age, where cyber attacks are a matter of when rather than if, assessing potential risks and their likelihood of occurrence is only getting more critical.

Risk 52

Risk Data collection Cyber Risk Cybersecurity 52

CyberSecurity Insiders

SEPTEMBER 11, 2021

Security industry blogs, magazines, and websites frequently report that many security teams are frustrated by the limitations of their SIEM tool. Analysts find dealing with data collected from numerous hosts within an enterprise to be a daunting task. In that case, additional risk must be assumed by the organization.

Threat Detection 126

Threat Detection Data collection Software Engineering 126

Troy Hunt

DECEMBER 20, 2017

All I know at this point is that a website is leaking customer data that puts both the customers and the site owners themselves at risk. Or how about CloudPets who exposed a Mongo DB of data collected from teddy bears with microphones in them (yes, you read that right). That has to change.

Data breaches 216

Data breaches Risk Accountability Data collection 216

The Last Watchdog

OCTOBER 13, 2021

Check out the examples below from Forrester’s blog. First-party” data is different from zero-party data. First-party data is based on inference collected from either implicit or explicit events that are collected internally. Data collection red flags. All of this leads us to “third-party” data.

eCommerce 113

eCommerce Data collection Consumer Protection Advertising 113

Centraleyes

MAY 28, 2024

Every link in your supply chain and each third-party relationship carries inherent risks. While eliminating all third-party risks is impractical, you can focus on identifying, managing, and mitigating them. Third-party risk management is critical in today’s interconnected business environment.

Risk 52

Risk Software Government Cyber Risk 52

Cisco Security

JULY 5, 2021

IDENTIFY – Risk Assessment (vulnerabilities identified; threat intelligence received; threats identified; threats, vulnerabilities and impacts to determine risk). This enables quick transition from analysing a threat in Malware Analytics to searching for hosts that is at risk in the environment. 3 and ID.RA-5] 2 and ID.RA-3]

Malware 128

Malware Risk Mobile Technology 128

Security Boulevard

JANUARY 6, 2023

Introduction By reducing information risks and vulnerabilities, a process called information security, also referred to as infosec, protects electronic data. Data collection, organization, processing, and deletion are all included in the definition of data management. InfoSec […].

Computers and Electronics 52

Computers and Electronics InfoSec Data collection Mobile 52

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

There are three major threat vectors that harm IoT deployments: Devices are hijacked by malicious software; Data collected and processed in IoT ecosystems is tampered with and impacts the confidentiality, integrity and availability of the information; and, Weak user and device authentication.

IoT 96

IoT Manufacturing Energy and Utilities Data collection 96

Thales Cloud Protection & Licensing

SEPTEMBER 5, 2019

The report found that for IoT in Europe, the primary data security threats lie with attacks on IoT devices, loss or theft of IoT devices, and more broadly a lack of established security frameworks for IoT – all of which ranked higher in Europe than in our global sample. Overall, these track closely to the global sample. Blockchain.

Technology 91

Technology Digital transformation IoT Big data 91

CyberSecurity Insiders

SEPTEMBER 21, 2021

This blog was written by a colleague from Tenable. Many organizations have opted to converge their IT and OT environments, which can yield many benefits such as efficiency and more elegant architecture; at the same time, these decisions are not without risk. What is OT vs. IT? For organizations that have implemented an Industry 4.0

Energy and Utilities 101

Energy and Utilities Threat Detection Manufacturing Technology 101

Malwarebytes

AUGUST 4, 2023

From the Meta blog: We will share further information over the months ahead, because it will take time for us to continue to constructively engage with regulators to ensure that any proposed solution addresses regulatory obligations in the EU, including GDPR and the upcoming DMA.

Advertising 98

Advertising Data breaches Data collection Marketing 98

CyberSecurity Insiders

OCTOBER 28, 2021

This blog was written by an independent guest blogger. Many security professionals spend hours each day manually administering tools to protect enterprise data. For many organizations, spending so much time collecting data is not conducive to innovation and growth. Data privacy. Implement zero trust protocols.

Cybersecurity 134

Cybersecurity Data privacy Small Business Threat Detection 134

Cisco Security

JUNE 30, 2021

Secure Network Analytics uses flow telemetry such as NetFlow, jFlow, sFlow, IPFIX, and packet-level data and helps in reducing the risk to an organisation. This helps in improving regulatory compliance, reducing operational risk, and reducing operating costs by improving operational efficiency. How much data was exchanged? [NB:

Threat Detection 81

Threat Detection Risk Data collection Internet 81

The Last Watchdog

JULY 30, 2018

Security analysts need the ability to view attacks as they unfold by enriching data collected from across the business with contextual and behavioral insights. Security analysts will build on the work of AI, machine learning, and behavioral analytics by making the data more consumable and understanding risk thresholds based on context.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

Thales Cloud Protection & Licensing

JULY 12, 2018

But making the IoT work requires trust in the devices and the data they collect. In this blog, and in one by my colleague Julie Lassabliere from Safelayer Secure Communications , we explore the need for trusted device identification and data integrity in the IoT.

IoT 72

IoT Data collection Encryption eCommerce 72

Centraleyes

NOVEMBER 27, 2024

This blog explores these aspects in detail to help you make an informed decision for your organization’s cloud security risk management. This agent continuously collects data and monitors the resource for potential threats. Two major strategies in this domain are agent-based and agentless security.

Risk 52

Risk Data collection Software Healthcare 52

CyberSecurity Insiders

NOVEMBER 24, 2021

This blog was written by an independent guest blogger. Many security professionals spend hours each day manually administering tools to protect enterprise data. For many organizations, spending so much time collecting data is not conducive to innovation and growth. Data privacy. Implement zero trust protocols.

Cybersecurity 122

Cybersecurity Data privacy Small Business Threat Detection 122

Duo's Security Blog

MARCH 18, 2022

We recently explored in the blog the National Cyber Security Center’s (NCSC) newly revised Cyber Essentials scheme , and how its specific post-pandemic “Bring Your Own Device” policies have led to some publications labeling the change “BYOD 2.0.” You can learn more about this topic in Duo’s Two-Factor Authentication Evaluation Guide.

Authentication 73

Authentication Mobile VPN Risk 73

Centraleyes

OCTOBER 10, 2024

Automating GDPR compliance can help organizations streamline processes, reduce risks, and ensure continuous adherence to the regulation. This blog will explore the key steps to automate GDPR compliance, best practices, and the tools available to facilitate this automation. Why Automate GDPR Compliance?

Data collection 52

Data collection Data breaches Data privacy Risk 52

SC Magazine

APRIL 9, 2021

Developers often never know when the author of a malicious module has copied the blog of a well-meaning author, changed the code in the blog to import a typosquatted malicious module, and then used some SEO tactics to ensure their malicious tutorial gets ranked higher in searches.

Software 86

Software Data collection Malware Risk 86

Malwarebytes

JANUARY 16, 2024

Apple released a security update to protect users against FruitFly, Malwarebytes published a blog post with technical details about the malware, and the FBI knocked on the door of the house linked to the IP address used by the malware. The IP address was linked to the malware using data collected by CWRU, Malwarebytes, and AT&T.)

Malware 127

Malware Passwords Identity Theft Data collection 127

Thales Cloud Protection & Licensing

MAY 22, 2024

The GDPR's new requirements necessitated a fundamental overhaul of CIAM approaches, a relevance that persists today: Key GDPR principles reshaping CIAM Explicit Consent : Before collecting data, businesses should obtain clear and affirmative consent from users.

Data collection 62

Data collection Data privacy Encryption Authentication 62

Anton on Security

NOVEMBER 17, 2022

Phil’s 8 megatrends blog reminds us about this by calling one of his cloud megatrends “Simplicity: Cloud as an abstraction machine.” Think well-implemented zero trust , that helps users, simplifies IT and reduces risk. Metrics and associated data collection? 10X fun assured! This means we need simplicity even more.

Engineering 100

Engineering Software Data collection Architecture 100

Thales Cloud Protection & Licensing

MAY 31, 2022

Data controllers are accountable to the persons (consumers, citizens) or other organisations (customers) they serve as part of their purpose. Whilst Cloud service providers, as data processors, are responsible for actions they are contracted to deliver by controllers (data collection, modification, storage, transmission, deletion etc).

Data privacy 71

Data privacy Digital transformation Accountability Data collection 71