Three for Thursday – Interesting Info Security News from Around the Globe

Three for Thursday – Interesting Info Security News from Around the Globe

How one hacker exposed thousands of insecure desktops that anyone can remotely view

by  Zack Whittaker for Zero Day

Badly configured software used on thousands of machines can let hackers into X-ray scanners, industrial control systems, doctors’ servers storing medical records, and more.  Click the article title above to continue reading this piece.

 

Cyber attacks exposed taxpayers’ personal information more than 700,000 times last year

by Eric PianinThe Fiscal Times

A February 2016 “update” showed that another 390,000 accounts had been inappropriately accessed, bringing the new grand total to 720,000 “  Click the article title above to continue reading this piece.

 

Calling All Women: The Cybersecurity Field Needs You And There’s A Million Jobs Waiting 

by  Steve Morgan @cybersecuritysf

“Only 11% of the world’s information security workforce are women, according to the Women’s Society of Cyberjutsu (WSC) — a 501(c)3 non-profit passionate about helping and empowering women to succeed in the Cybersecurity field.” Click the article title above to continue reading this piece.

#infosec #cybersecurity

Visibility: Accurately, discover sensitive data; detect and address broken business process, or insider threats including sensitive data breach attempts.

Protection: Automate data protection, breach prevention and incident response both on and off the network; for example, find and quarantine sensitive data within files exposed on user workstations, FileShares and cloud storage.

Notification: Alert and educate users on violations to raise awareness and educate the end user about cybersecurity and corporate policies.

Education: Start target cyber-security training; e.g., identify end-users violating policies and train them.

  • Employees and organizations have knowledge and control of the information leaving the organization, where it is being sent, and where it is being preserved.
  • Ability to allow user classification to give them influence in how the data they produce is controlled, which increases protection and end-user adoption.
  • Control your data across your entire domain in one Central Management Dashboard with Universal policies.
  • Many levels of control together with the ability to warn end-users of possible non-compliant – risky activities, protecting from malicious insiders and human error.
  • Full data discovery collection detects sensitive data anywhere it is stored, and provides strong classification, watermarking, and other controls.
  • Delivers full technical controls on who can copy what data, to what devices, what can be printed, and/or watermarked.
  • Integrate with GRC workflows.
  • Reduce the risk of fines and non-compliance.
  • Protect intellectual property and corporate assets.
  • Ensure compliance within industry, regulatory, and corporate policy.
  • Ability to enforce boundaries and control what types of sensitive information can flow where.
  • Control data flow to third parties and between business units.