PCI & Compliance - News - CSO | The Resource for Data Security Executives

Inside job: Trend Micro employee sold customer details to tech support scammers

If you use Trend Micro consumer anti-virus and you've been getting scam tech support calls, now you know why.

Liam Tung | 07 Nov | Read more

Google Chrome on Android gets ‘site isolation’ shield against Spectre CPU attacks

Google brings site isolation to Chrome on Android and improves the defense for Chrome on the desktop.

Liam Tung | 18 Oct | Read more

NAS devices in the firing line: After QNAP, Synology, Iomega devices attacked

Attackers claim to be wiping devices and asking for a ransom from Iomega NAS users.

Liam Tung | 30 Jul | Read more

Huge rock, cracked windshield helps hacker land a $10k Tesla security bug

If you have the right information, a cracked windshield on a Tesla can be worth five times its cost of replacement.

Liam Tung | 16 Jul | Read more

Employers recognise the need for cyber skills – and they’re willing to pay big

The employment market is hungry for “future focused” executives with the ability to manage cybersecurity risk at the board level, according to a recent jobs market update that also found employers put a premium on executives who understand the need to continually test systems through regular red-teaming and penetration testing.

David Braue | 29 May | Read more

The week in security: BEC, scams netting billions for cybercrims

Online scammers took $US2.7b ($A3.7b) from their victims last year, according to new FBI figures that found business email compromise (BEC) attacks accounted for more than half of all losses.

David Braue | 30 Apr | Read more

Telstra survey: Half of Australian firms pay to unlock ransomware

It's common for businesses to pay ransomware attackers and may would do it again.

Liam Tung | 16 Apr | Read more

Cisco fixes broken RV320/RV325 router patches as more exploits emerge

Admins managing Cisco's RV320 and RV325 routers should definitely install new firmware available today.

Liam Tung | 05 Apr | Read more

G Suite admins can now ban staff from using insecure SMS for two-factor authentication

G Suite admins demand a way to prevent staff from using SMS codes to sign into Google accounts.

Liam Tung | 15 Mar | Read more

Managing Australian data breaches got a lot more expensive in 2018

The cost of data breaches to Australian companies has surged over the past year to be well above global averages, according to new research in which 47 percent of Australian CISOs said breaches had costed them more than US$5m (A$7m).

David Braue | 08 Mar | Read more

Microsoft: phishing email to Office 365 accounts doubled over 2018

Phishing threats aren't disappearing any time soon, warns Microsoft.

Liam Tung | 06 Mar | Read more

How Cisco built a security framework that rolls with the changes

Threat intelligence has become a nice-to-have for many vendors seeking to improve their security offerings, but for the executives leading Cisco’s Security Business Group it’s just the framework for a product-development process that is focused on maintaining a consistent, end-to-end network security architecture while supporting all manner of front-facing customer innovation.

David Braue | 06 Mar | Read more

Enterprises should use RFPs to force industry to improve security

Organisations are leaving themselves exposed by failing to demand adequate security protections when buying new technology, according to a senior Cisco executive who warned that security and networking specialists must work together better to close persistent gaps.

David Braue | 05 Mar | Read more

Cybersecurity may not be “sexy” but smart engagement can still catch executives’ eyes

Businesses wanting to improve their security practice need to reconsider the way they position cybersecurity within their business philosophy, a security analyst has told an audience of security practitioners while warning that the persistence of “terrifying” images of cybersecurity practitioners had challenged the progression of cybersecurity into becoming a mainstream business concern.

David Braue | 05 Mar | Read more

Networking and security conversations are completely coupled

Asia-Pacific companies are struggling more than their global peers to get their heads around cyber fatigue, John Maynard, vice president for global security sales with Cisco, has warned in kicking off the Cybersecurity Innovation Day at this week’s Cisco Live! conference.

David Braue | 05 Mar | Read more

The week in security: RSA fuels new hopes as cybercriminals ready new attacks

The annual RSA security conference draws the industry together from around the world, with hot startups rubbing shoulders with the biggest cybersecurity giants as they position their products and strategies for the coming year.

David Braue | 05 Mar | Read more

The week in security: Cybercriminals celebrate NDB’s first anniversary with... more breaches

David Braue | 25 Feb | Read more

Insights: CSO Security Capabilities Survey 2019

While spending on cybersecurity expertise would seem to be a no-brainer, the large number of companies without formal inhouse expertise suggests another ongoing, underlying challenge in finding and securing those skills within the current competitive market.

By CSO staff | 22 Feb | Read more

DevOps may accelerate your cloud journey, but stolen credentials could cost your business

Conventional views of credential compromise may focus on external activities such as mass credential-stuffing attacks and password-stealing malware, but new breach-compromise statistics suggest that the fast-paced adoption of cloud and associated DevOps techniques has created other vulnerabilities that CISOs still don’t fully appreciate.

David Braue | 08 Feb | Read more