Mark Young and Joseph Jones report: As we summarized last fall, the EU Commission published a new Cybersecurity Communication in September that, among other things, sets out proposals for an EU cybersecurity certification framework as part of an EU “Cybersecurity Act” (see our post here and a more detailed summary here). Just before the holidays, on December 20, 2017, the UK Government…
Category: Commentaries and Analyses
How to Assess a Vendor’s Data Security
Cooper Quintin and Soraya Okuda of EFF collaborated with Jonah Sheridan of Information Ecology to come up with a helpful guide: Perhaps you’re an office manager tasked with setting up a new email system for your nonprofit, or maybe you’re a legal secretary for a small firm and you’ve been asked to choose an app…
Shoot/Sue the Messenger, Indian style: An Indian journalist exposed a huge breach in a government database. Now she’s facing a police complaint.
Vidhi Doshi reports: An Indian government agency has filed a police complaint against a journalist who exposed a possible security breach in the country’s vast biometric database that contains the personal details of more than 1 billion citizens, raising fresh concerns about shrinking press freedom in India. The complaint against journalist Rachna Khaira came after she wrote…
Shafer’s attorney files motion to dismiss federal charges of cyberstalking an FBI agent’s family and court personnel
I haven’t had time to really read this carefully yet, but Tor Ekeland has filed a motion to dismiss U.S. v. Shafer, a case that may leave you scratching your head and wondering why the government is devoting so many precious resources to persecuting and harassing one of the good guys. And for all this…
Hackers Go on a Magento Attack Spree Using a Helpdesk Extension
Rafia Shaikh reports: Cybercriminals are targeting Magento sites running Mirasvit Helpdesk – a popular helpdesk extension. The extension enables site owners to add a “Chat with us” widget on their Magento shops. Mirasvit was vulnerable to security flaws that affect every version of the extension up until version 1.5.2. Security firm WebShield had first published details about these security…
A tale of three leaks, Wednesday edition
On December 6, DataBreaches.net was contacted by researchers who requested help notifying two entities that they were exposing health information due to misconfigured AWS S3 buckets. They would turn out to be a delight to deal with, unlike a third entity that was also leaking information from a misconfigured S3 bucket. So let’s start with…