On the back of the Microsoft Vulnerabilities Report (2017) findings, Dr. Eric Cole, CEO of Secure Anchor Consulting and SANS Instructor, considers how companies can become more secure simply by removing admin rights from their users, without losing functionality...
There is no exact method laid out before you, you have a ton of work ahead to make this work and even when you do figure it all out; you then need to get people to listen to you; to buy in to your vision and to invest in it to bring it to fruition and make it a true success.
The National Cyber Security Centre (NCSC) this week marked its first year of operation by revealing a snapshot of its findings from the past 12 months.
The U.S. Securities and Exchange Commission (SEC) has revealed that it’s fallen victim to a hack. In its recent “Statement on Cybersecurity, published by its Chairman, Jay Clayton, it was revealed that its controversial Electronic Data Gathering, Analysis, and Retrieval (EDGAR) system had been compromised last year and "may have provided the basis for illicit gain through trading".
One of England’s biggest police forces has revealed that more than one in five of its computers runs on Windows XP.
The popular PC cleanup tool, CCleaner has been hijacked by hackers in the latest widespread malware attack. The hack, identified by security researchers at Cisco Talos, found that anyone who downloaded or updated the CCleaner app between mid-August to mid-September also potentially downloaded malware without realising.
The credit monitoring company Equifax has revealed a breach exposed the personal details of up to 143 million Americans.
CeX, the second-hand electronics, and video games retailer has reportedly had the details of two million customers compromised by hackers. The information stolen included names, addresses, email addresses and some phone numbers, as well as a small number of encrypted credit card details.
So many times, I have seen security become an afterthought, rather than being an integral part of a design from the outset. Good security design is not always visible and therefore often not very well understood by the c-suite, who pile on the pressure to release systems or improve user freedom.
Last November I attended Pulse Europe: The EMEA Customer Success Conference. I was actually a speaker at the event, but I’ll save a wrap up of my topic “Code Red why your at risk meetings aren’t resulting in an epic save” for another blog.
As an industry, people who develop software and online services have taken great leaps over recent years in developing attractive, usable products. But there can still be a reluctance to test things early and often with users – especially if you’re developing for internal or enterprise users.