fbpx
 

Category: IT Security

Breach Notification Laws
Scott D. RosenbergHIPAA, IT Security, Security AssessmentsLeave a Comment on Breach Notification Laws

Data breach notification laws require companies to implement formal data breach notification polices that cover the procedures for incident reporting and external breach notification. Except just four states – Alabama, Kentucky, New Mexico and South Dakota, every state in the U.S. has passed a breach notification law in the recent past, following the lead of California’s landmark breach disclosure law in 2003. . Breach notification laws require companies to notify their customers about security breaches that involve personal information. Of […]

Web Application Vulnerabilities – way too common!
Sam AlapatiCenter of Internet Security (CIS), Database security, DSS (Data Security Standard), IT Security, Security RiskLeave a Comment on Web Application Vulnerabilities – way too common!

Web applications are common to practically every company that uses the internet. Even if a company uses the well-known Secure Sockets Layer (SSL) and utilizes sophisticated firewall protection, the very fact that it can’t control what users can input into their web forms, introduces several avenues that a malicious person can use to attack the company’s data. Top web application researcher and practitioner Dafydd Studdard and his colleagues have tested thousands of web applications for security assessments over the years. […]

The Recent attacks on PayPal, Visa and MasterCard
Sam AlapatiCenter of Internet Security (CIS), Database security, DSS (Data Security Standard), IT Security, PCI (Payment Card Industry), Security RiskLeave a Comment on The Recent attacks on PayPal, Visa and MasterCard

One of the interesting fallouts from the Wikileaks revelations about U.S. and international diplomatic cables that revealed the inner machinations of foreign policy operatives, secrets is the attacks by Wikileaks supporters on various financial institutions that shut off the processing of monetary contributions to the Wikileaks organization. Of the three major financial giants impacted by the mass internet attacks, PayPal, Visa and MasterCard were the most affected entities. PayPal seems to have weathered the storm pretty well, but Visa and […]

In Archive