Tag Archives: risk

“…our own policies were not followed…”; Apple and Amazon Hacks

Posted on August 8, 2012 by

This past week, tech writer Matt Honan (of Wired) had his Amazon and Apple accounts hacked and his “…digital life destroyed”.  You can read his first hand account here.  The hacker did not use any special technology rather was able … Continue reading →

Posted in Data Breach, InfoSec & Privacy | Tagged , , , , , , , , , , | 2 Comments

“Tell me, Show me, Convince me”; Policies, Enforcement, and Auditing

Posted on August 7, 2012 by

I was speaking with a client yesterday about policies and auditing.  He asked me a question and it reminded me of what I told my clients for years regarding policies.  First, it is important to remember that a policy is … Continue reading →

Posted in cybersecurity, Risk & Risk Management | Tagged , , , , , , , , | Leave a comment

“I know it’s true because I got it from the Internet!” – Reuters Hacked by Pro-Assad Group to publich Propaganda

Posted on August 6, 2012 by

Reuters acknowledged that on August 3rd, their blogging platform was hacked and a false, pro-Assad post was published.  “Reuters.com was a target of a hack on Friday,” the company said in a statement. “Our blogging platform was compromised and fabricated … Continue reading →

Posted in competitive intelligence, cyberespionage, cybersecurity | Tagged , , , , , , , , | Leave a comment

“Money Laundering May Support Drugs and Terror Funding?” – US Senate says of HSBC

Posted on July 17, 2012 by

According to a US Senate Report issued today and major news outlets including MSNBC, Europe’s largest bank, HSBC, has  “A “pervasively polluted” culture at HSBC allowed the bank to act as financier to clients moving shadowy funds from the world’s … Continue reading →

Posted in Industry News, Risk & Risk Management, terrorism | Tagged , , , , , , , | Leave a comment

“123456, password, welcome” – Yahoo Password Posted Online

Posted on July 12, 2012 by

A story today on MSNBC says that Yahoo Voices was compromised and 450,000 usernames/password posted online.  Not surprisingly, the passwords were not hashed or otherwise protected using encryption.  While the posting of passwords is nothing new what is interesting is … Continue reading →

Posted in News, PCI DSS, Risk & Risk Management | Tagged , , , , , , , , | Leave a comment