Neil Ford Archive
The SEC (Securities and Exchange Commission) has charged the software company SolarWinds and its CISO (chief information security officer), Timothy G. Brown, with fraud and internal control failures relating to its cybersecurity practices. In a press release dated October 30, …
On July 26, 2023, the SEC (Securities and Exchange Commission) adopted new rules on cybersecurity disclosures. They came into effect on September 5, and begin to apply from December 15 – although compliance dates vary depending on the type of …
If you’re looking for a way to stand out in the information security industry, an ISO 27001 qualification may be the perfect solution. The Standard sets out the specifications for an ISMS (information security management system), helping organizations manage the …
The financial services sector is one of the worst affected by data breaches and cyber attacks. Indeed, according to IBM and Ponemon Institute’s Cost of a Data Breach Report 2023, the average cost of a data breach for financial services …
October 2023 marks the 20th Cybersecurity Awareness Month – an annual campaign designed to raise awareness of cybersecurity, both at home and at work. This year, CISA (the Cybersecurity and Infrastructure Security Agency) has announced a new awareness program called …
A member of Microsoft’s AI research division has accidentally leaked 38 terabytes of data via a misconfigured storage bucket. Researchers from the Cloud security company Wiz.io found the Microsoft employee had shared a URL for the Azure storage bucket in …
The FBI and the Justice Department have announced a multinational operation that has dismantled the infrastructure of the Qakbot botnet and resulted in the seizure of more than $8.6 million in cryptocurrency. Operation ‘Duck Hunt’ took place in the U.S. …
When Russia’s Cl0p gang hacked Progress Software’s MOVEit Transfer app via a zero-day SQL injection vulnerability on May 27, it soon became apparent that the number of organizations and individuals affected would be high. The first known victim was the …
A data breach at Tesla, which affected 75,735 people and saw sensitive company data compromised, was caused by two former employees, the electric car maker said. In a data breach notice filed with Maine’s attorney general, Tesla’s data privacy officer, …
Researchers in the UK have demonstrated a security flaw that allowed them to make a contactless Visa payment of £1,000 ($1,345) via a locked iPhone. According to Bleeping Computer, the hack relies on Apple Pay’s Express Transit mode, a feature …