Not so long ago, medical devices required only physical security considerations—only those who had access to the device could access the device’s data. However, through the Internet of Things (IoT), medical devices’ connectivity to the cloud has put them in the cross-hairs of cyber attackers.
Read MoreThere’s a skills-gap and specialist shortage in the cybercrime industry. You read that correctly. Cybercriminals are looking for new recruits to fill positions in the rapidly growing cybercrime as a service (CaaS) industry. Although it sounds like something out of a low-budget science fiction flick, CaaS is very real and thriving.
Read MoreAs the number of firms that handle patient health care data grows, it has become increasingly more challenging to ensure that data is current, accurate, and correctly matched to the patient. To address this patient-matching problem, the Office of the National Coordinator for Health Information Technology (ONC) has collaborated with the CMMI Institute to develop the Patient Demographic Data Quality (PDDQ) Framework.
Read MoreA recent report from Nielson predicts credit card fraud will result in more than $31 billion in losses by 2020. And, e-commerce fraud attacks increased by more than 30% from 2016 to 2017, according to credit reporting agency Experian. So how are attackers getting away with fraud and how can you protect your business credit cards?
Read MoreSince May 25, when the European Union (EU) began enforcing the General Data Protection Regulation (GDPR), companies of all sizes and across industries have been working to ensure they are in compliance. This scramble has been apparent externally through the updated privacy policy and opt-in messages on websites, but are businesses doing enough internally to protect the security of the personal data they handle?
Read MoreOnline banking has been ubiquitous for some time—and cybersecurity attacks that target business’ banking information are just as common. Stories of companies large and small that have had their banking data and accounts compromised date back to the beginning of online banking. Are you taking all the necessary steps to protect your company’s banking assets?
Read MoreWith General Data Protection Regulation (GDPR) enforced as of May 25, 2018, many healthcare organizations (HCOs) in the United States are working to determine whether they need to be GDPR compliant and whether Health Insurance Portability and Accountability Act (HIPAA) compliance is enough.
Read MoreIn an October 2016 data breach, the email addresses, phone numbers, and names of 57 million customers and personal information of approximately 7 million drivers was stolen from Uber. Although the company immediately worked to secure the data and prevent further unauthorized access, the data breach went unreported to authorities and victims for more than a year, with the company finally coming forward toward the end of 2017. Uber has openly stated that it mishandled the situation, but the attack and response raises the question: How long do companies have to notify regulating bodies and those affected when a data breach occurs?
Read MoreWith the May 25, 2018, enforcement deadline approaching, many businesses are wondering how the General Data Protection Regulation (GDPR) will affect them. Briefly, the GDPR is a joint effort from the Council of the European Union (EU), the European Commission, and the European Parliament to better protect citizens’ personal data, give them greater control over how companies handle and use their personal data, and make it easier for companies to comply with this single personal data oversight regulation.
Read MoreMisinformation relating to cryptocurrency, such as Bitcoin, continues to increase public exposure and vulnerability to cyber crime. Some people have developed an overconfidence in the technology behind cryptocurrency (blockchain), while others have a misunderstanding of how it works entirely. However, the majority of those who trade digital currency have one common characteristic: They don’t fully recognize or mitigate against the risks and threats associated with cryptocurrency holdings.
Read MoreAccording to the 2017 Ponemon Cost of Data Breach Study, the average global cost of a data breach is $3.62 million, and the average cost for each record lost or stolen with sensitive data is $141. The study also found that the size and number of breaches is increasing. And, not surprisingly, many of these incidents, approximately 63%, are the result of third-party vendor breaches. So where does responsibility lie for a vendor-caused data breach that affects your business?
Read MoreWith the growth of bitcoin popularity comes the danger of hacker attention. Industry insiders estimate that cryptocurrency attacks have cost governments and businesses nearly $11.3 billion in the past decade. As more people invest in bitcoins—some less savvy about security than others—there are new avenues for bitcoin attacks.
Read MoreOn May 25th, 2018, the General Data Protection Regulation (GDPR) becomes enforceable for any company that handles the personal data of individuals in the European Union (EU). This regulation, developed as a joint effort by the Council of the EU, the European Commission, and the European Parliament, was adopted in April 2016; however, compliance will be enforced beginning this spring. What does this mean for your company’s data handling processes?
Read MoreSomewhere along the way, it became a best practice for administrators to set up event logs to capture as much data as possible. This big net method provides a sense that nothing will slip through the cracks if all incidents are captured. However, the vast quantities of data generated by this approach make it more difficult—not easier—to spot threats and remain compliant.
Read MoreWhether an organization hasn’t developed a data security plan out of a false sense of security or a lack of expertise, the results will be the same. A security breach will be debilitating. Every business owner, regardless of company size, should develop and implement a concrete data security plan.
Read MoreSocial engineering techniques are not only becoming more common but also more sophisticated. Attackers seem to be taking notes from Marketing 101, ensuring that their lures strike a chord with their victims with emails that include customized messages with very official looking logos and layouts, fraudulent phone calls that cite actual employee names and titles, and even well-rehearsed seemingly innocuous facility access attempts.
Read MoreWe all have sneaking suspicions about security, but as with all assumptions, some of these beliefs are actually myths. And they’re myths that hackers hope stay around as long as Nessie and Yetis. Separating reality from fairytale can help you keep your organization secure.
Read MoreMany users naively believe they can browse the Internet, and as long as they don’t click on anything, they are safe. Unfortunately, that is not the case. Cross-site scripting (XSS) attacks are one of many malicious threats looming in the web world—in fact, XSS vulnerabilities are rampant out there. Read and learn how to browse as safely as possible.
Read MoreThe recent Equifax credit bureau data breach has brought corporate identity (ID) theft to the forefront of our collective conscience; however, it's not just individuals at risk. Organizations, large and small, are tasked with storing an extensive amount of sensitive information in personnel files, human resources (HR) documents, and corporate collateral, putting them at risk for identify theft as well. Read these five tips on how to guard against corporate identity theft.
Read MoreThe broad term "data breach" is spouted regularly in the news, in company communications, and in financial and health care forums. Although this umbrella term was used before the digital age; since then, it has evolved from niche discussions to ubiquity.
Read More
