Corporate Counsel (registration) |
CrowdStrike Hires Laurel Finch as New Head of Legal
Corporate Counsel (registration) In emailed responses sent to Corporate Counsel, Finch said she took the new job for two reasons: because data breaches and emerging legal requirements for cybersecurity are top of mind for C-suite executives and board members, and because … |
At the IEEE Symposium on Security and Privacy 2017, researchers from the College of Management Academic Studies in Israel presented an interesting paper on bad password reset processes, “The Password Reset MitM Attack” (pdf). It explains how a weak attacker could take over accounts by exploiting vulnerabilities in password reset procedures.
They dubbed the attack: password reset man-in-the-middle (PRMitM). The researchers said Google is “extremely vulnerable” to PRMitM, but Facebook, Yahoo, LinkedIn, Yandex and other sites and email services are also vulnerable as well as mobile apps like Whatsapp, Snapchat and Telegram.
To read this article in full or to leave a comment, please click here
|
United States: Yet Another Target Settlement Highlights Data Breach Costs
Mondaq News Alerts (registration) In what appears to be the closing act of the saga that is the Target data breach, on May 23 the retailer announced it had reached a settlement agreement with a coalition of 47 states' attorneys general. Pursuant to the settlement, Target will pay $ 18.5 … |
|
The Italian Data Protection Authority releases its Report on 2016 Activities: Data breaches and commercial …
Lexology (registration) It emerged that cyber security compliance is particularly under the spotlight, with the DPA conducting proactive investigations and receiving 15 data breach notifications from public administration bodies and 43 from private bodies (see DPA's … |