A new version of the Payment Card Industry Data Security Standard, PCI DSS 4.0, was released on March 31, 2022, the first major update to the standard since 2018. As the news release states, the update “brings major changes to the payments ecosystem” and “places an increased focus on targeted risk analysis, organizational maturity and governance.
A microchip engineer was recently accused of stealing trade secrets using a clever technique. He allegedly sent data to his personal computer by hiding schematics in image files named for Pokémon characters.
A former Tesla employee is accused of taking a less technical approach, downloading trade secrets to his personal computer and submitting a different laptop for inspection to hide his activity.
Despite months of dire warnings about the threat potential, researchers say the vast majority of vulnerabilities in the widely used Apache Log4j logging utility for Java software remain unpatched and actively exploited. New research suggests that more than 90,000 Internet-facing Java applications and nearly 70,000 servers remain exposed to the flaw that enables attackers to remotely execute code on compromised systems.
The smartphone is a remarkable device — a telephone, computer, web browser, camera, fitness tracker, personal assistant, navigation system and media player all wrapped up in a pocket-sized package. It’s no wonder that surveys regularly find that people would rather go without cars, televisions or even food than give up their smartphones.
The international hacktivist group Anonymous recently claimed it hacked hundreds of unsecured printers throughout Russia, using them to distribute anti-war messages. Despite their good intentions, the incident is just another reminder that printers, fax machines and multifunction devices are far more vulnerable to malicious exploits than most people realize.
Billions of Internet of Things (IoT) devices are being compromised each year as malicious actors exploit a variety of security gaps to organize botnets, steal data and mine cryptocurrency. While the IoT now represents the single largest attack surface for most organizations, few have taken steps to adequately secure their IoT environment.
There’s a lot to like about email. It’s fast, cheap, easy and reliable. With the touch of a button, you can simultaneously send messages or documents to dozens of contacts located just about anywhere on the planet. You can also use it to sort, file and filter important personal and professional information.
Phishing attacks are one of the most significant threats organizations face. According to the Verizon 2021 Breach Investigations Report, 36 percent of breaches are connected in some way to a phishing attack, up 11 percent from the previous year. What’s more, threat actors continue to refine their techniques to increase the odds that a user will fall for the attack.
File-sharing technologies are essential for the efficient exchange of information in the digital age. However, a recently resolved class-action lawsuit against the provider of a well-known file-sharing service illustrates the risks these solutions can introduce.
A fast, reliable and secure Wi-Fi network is a business imperative, providing the connectivity necessary to support mobility, collaboration, IoT, edge computing and other important IT initiatives. It is such an entrenched technology that analysts say it now generates an annual global economic value approaching $5 trillion.
