Mar 01, 2025Ravie LakshmananPrivacy / Data Protection Firefox browser maker Mozilla on Friday updated its Terms of Use a second time within a week following criticism overbroad language that appeared to give the company the rights to all information uploaded… Read More "Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language"
The Sender Policy Framework (SPF) is an email authentication protocol that specifies email authorization through Domain Name System (DNS) records. When an email is sent through the Simple Mail Transfer Protocol (SMTP), there is no requirement for authorized messages, which… Read More "Your Sender Policy Framework (SPF) Risk Exposure"
In today’s digital age, protecting sensitive information is crucial, and the need for robust Information Security Management Systems (ISMS) has become urgent due to the prevalence of data breaches and cyber threats. ISO 27001 is a leading international standard that… Read More "Choosing an ISO 27001 Compliance Product"
.png?w=1140&resize=1140,855&ssl=1 "What is the InfoSec Registered Assessors Program (IRAP)?")
The Information Security Registered Assessors Program is a cybersecurity initiative created by the Australian Cyber Security Centre (ACSC), a subsidiary of the Australian Signals Directorate (ASD). IRAP assessments utilize cybersecurity standards set by the Australian Government Information Security Manual (ISM)… Read More "What is the InfoSec Registered Assessors Program (IRAP)?"
Your board of directors expects to be regularly updated about your data breach prevention efforts, but board members often lack the necessary technical insight to understand the cyber risk mitigation processes making up your cybersecurity posture. CISOs are tasked with… Read More "How to Create a Cybersecurity Board Report (3 Best Practices)"
Feb 28, 2025Ravie LakshmananFinancial Fraud / Cyber Espionage The threat actor known as Sticky Werewolf has been linked to targeted attacks primarily in Russia and Belarus with the aim of delivering the Lumma Stealer malware by means of a previously… Read More "Sticky Werewolf Uses Undocumented Implant to Deploy Lumma Stealer in Russia and Belarus"
Should the payment of a ransomware demand be illegal? Should it be regulated in some way? These questions are some examples of the legal minefield that cybersecurity teams must deal with 21 Aug 2024 • , 3 min. read Governments… Read More "How regulatory standards and cyber insurance inform each other"
Smart homes, connected cars, and smart watches: these are examples of consumer-focused devices in the Internet of Things (IoT). But the Internet of Things extends beyond consumer use as new technologies are implemented in industrial settings and critical infrastructure. With… Read More "Internet of Risks: Cybersecurity Risk in the Internet of Things"
Cybersecurity researchers have uncovered a widespread phishing campaign that uses fake CAPTCHA images shared via PDF documents hosted on Webflow’s content delivery network (CDN) to deliver the Lumma stealer malware. Netskope Threat Labs said it discovered 260 unique domains hosting… Read More "Fake CAPTCHA PDFs Spread Lumma Stealer via Webflow, GoDaddy, and Other Domains"
Eine Frage des Geldes: Ist Open Source die Lösung? Beim KI-Gipfel in Paris, der erst kürzlich stattfand, gab es einige Aufregung über das chinesische generative Sprachmodell DeepSeek. Vor allem die rapide Weiterentwicklung, aber auch die Erkenntnis, dass es auch mit… Read More "Security und GenAI – Zwischen Innovation und Sicherheit"
