Nicholas Palmer, head of international business development at Group-IB

Protecting Ecommerce Sites From Card Data Theft

Suparna Goswami • February 18, 2020

The posting of Indian payment card details for sale on the dark web is increasing. That's why it's so important that ecommerce sites check their systems for vulnerabilities, says Nicholas Palmer, head of international business development at Group-IB.

General Data Protection Regulation (GDPR)

India's Proposed Budget: The Data Security Priorities

Latest

Governance

Dell to Sell RSA to Private Equity Firm for $2 Billion

Scott Ferguson • February 18, 2020

Dell Technologies has agreed to sell its RSA security division to private equity firm Symphony Technology Group in an all cash deal worth more than $2 billion, the companies announced Tuesday. The news comes on the eve of the annual RSA Conference in San Francisco, which starts Monday.

Cybercrime

Unpatched VPN Servers Hit by Apparent Iranian APT Groups

Scott Ferguson • February 18, 2020

Unpatched Fortinet, Palo Alto and Pulse Secure VPN servers, as well as Citrix gateways, continue to be targeted by hackers, who are exploiting critical flaws to install backdoors inside corporate networks. Security firm ClearSky warns that apparent Iranian APT attackers are the latest to join the fray.

General Data Protection Regulation (GDPR)

Plastic Surgery Database Exposed: Researchers

Apurva Venkat • February 18, 2020

An unsecured database belonging to a French technology firm that supplies video and digital equipment to plastic surgery and determatology clinics exposed content on 900,000 patients, according to a report from two independent security researchers.

Account Takeover

Mobile Banking Users Targeted in SMS Phishing Campaign

Ishita Chigilli Palli • February 18, 2020

Cybercriminals targeted mobile banking users by sending malicious SMS messages to their smartphones as part of a phishing campaign to steal account holders' information, including usernames and passwords, according to the cybersecurity firm Lookout.

Events

RSA Conference 2020 Preview

Tom Field • February 18, 2020

"The Human Element" is the theme of the RSA Conference 2020, but there are plenty of technology-rich topics in store for attendees, including session tracks that focus on election security, open source tools, product security and anti-fraud. Britta Glade, a conference director, previews the event.

Cybercrime

Google Removes 500 Chrome Extensions Tied to Malvertising

Apurva Venkat • February 17, 2020

Google has removed 500 Chrome extensions from its online store after researchers found that attackers were using them to steal browser data, according to a new report from security firm Duo Security. The thefts were part of a malvertising campaign that had been active for at least a year, the researchers say.

Business Continuity Management / Disaster Recovery

IBM Exits RSA Conference 2020 Over Coronavirus Worries

Mathew J. Schwartz • February 17, 2020

With IBM and seven other sponsors withdrawing from next week's RSA Conference 2020 - as worries over the China-centered outbreak of the coronavirus continue - will others follow suit?

Cyberwarfare / Nation-State Attacks

US Charges Huawei With Stealing Trade Secrets

Ishita Chigilli Palli • February 14, 2020

The U.S. Justice Department has filed new charges against Huawei and several of its subsidiaries, plus its CFO, accusing them of engaging in a conspiracy to steal trade secrets from American companies.

Application Security

Analysis: Indictments in Equifax Hack

Nick Holland • February 14, 2020

The latest edition of the ISMG Security Report analyzes the indictments of four Chinese military officers in connection with the 2017 Equifax data breach. Also featured: Advice on implementing NIST's new privacy framework; lessons learned in a breach disclosure.

Events

RSA Conference 2020: ISMG Spotlights Security Leaders

Scott Ferguson • February 14, 2020

Information Security Media Group, a premier media partner at the annual RSA Conference, will conduct over 200 video interviews at this year's event with cybersecurity thought leaders, executives, CISOs and sponsors.

Cyberwarfare / Nation-State Attacks

US Has Evidence of Huawei Backdoor: Report

Ishita Chigilli Palli • February 13, 2020

As the U.S. ramps up pressure on its allies to ban equipment from Chinese manufacturer Huawei from their 5G networks, U.S. officials now say they have evidence that the firm has created a backdoor that allows it to access mobile phone networks around the world, the Wall Street Journal reports.

Events

RSA 2020: The Show Must Go On

Scott Ferguson • February 13, 2020

While public health concerns over the spread of the coronavirus are leading to the cancellation of some international events, the RSA Conference 2020 will proceed as scheduled in San Francisco Feb. 24-28.