Uncategorized



The U.S. Federal Trade Commission on Tuesday settled charges against two companies, Ceridian Corporation and Lookout Services, Inc., provided they implement an ample information security program and agree to have audits performed on their company every other year for 20 years.

We write a lot about sophisticated, targeted attacks and zero day vulnerabilities aside. But the fact is that most security breaches hinge on easy to prevent security holes – such as insecure passwords. Indeed, even as headlines blare about data breaches and hacks at prominent firms, password management remains a weak spot in the defense of many businesses.

Apple may be trying to change the spin on its controversial location tracking, err…harvesting feature. The company issued a FAQ this week and pulled CEO Steve Jobs off of medical leave to argue the company’s case and quell concerns about the little known feature that include calls for an explanation from Capitol Hill lawmakers. 

In a letter to the chairman of the Federal Trade Commission, Jay Inslee (D-Wash.) expressed concerns regarding recent revelations that Apple products have been continuously tracking and recording user location information with questionable consent and without an easy way to opt out of such tracking.

By B.K. DeLong

In following the Apple
iPhone location tracking conversation, I’ve thought of another interesting
point not quite raised or being examined, similar to the issue of making
potential high-value targets out of high-profile executives at Fortune 500
firms simply by using
email addresses and other information contained within the Epsilon breach.

By Andrew StormsNo doubt you read about the huge email security breach Epsilon announced earlier this month. You may have received letters from companies that use Epsilon services about the possible loss of your email information. A lot of people are justifiably concerned that spear phishing and other nefarious attacks will be launched against millions of people as a result of that breach.