NIST Special Publication 800-184 Guide for Cybersecurity Event Recovery Michael Bartock Jeffrey Cichonski Murugiah Souppaya Matthew Smith Greg Witte Karen Scarfone Abstract: In light of an increasing number of cybersecurity events, organizations can improve resilience by ensuring that their risk management processes include comprehensive recovery planning. Identifying and prioritizing organization resources helps to guide effective…
Category: Uncategorized
TalkTalk hack: Co Antrim schoolboy loses legal challenge over identification
Alan Erwin reports: A Co Antrim schoolboy arrested over the TalkTalk cyber attack has lost his High Court challenge to an alleged failure to implement legislation that would protect him from media identification. The 15-year-old took action against the Department of Justice over claims it has done nothing about a law prohibiting the press from…
Court Authorizes Service of John Doe Summons Seeking the Identities of U.S. Taxpayers Who Have Used Virtual Currency
The government’s press release on an issue mentioned previously: a broad warrant for records on everyone who used Coinbase. The government appears to be going on a fishing expedition with court authorization. Oh well, the Fourth Amendment had a good run, I guess. A federal court in the Northern District of California entered an order today authorizing the…
ADT Hacking Vulnerability Class Action Trimmed to Fraud Claim
Ashley Milano reports: In a partial win for ADT, a California federal judge has trimmed claims in a proposed class action lawsuit alleging the security company failed to inform customers their wireless home security systems were vulnerable to hacking. U.S. District Judge Jon S. Tigar tossed claims brought by plaintiff Michael Edenborough, stating he failed…
Privacy+Security Forum this week in D.C.!
I’m happy to say that I’m heading out for what promises to be a terrific event in D.C. Updates to this blog will be sporadic, at best, until I’m back, so if you submit a comment or article and it’s not approved, please be patient. If you’re attending the forum, please come find me to…
This Tool Lets You Check If Your Personal Info Is on the Dark Web
Joseph Cox reports: It’s pretty hard to know when your data might have been compromised. Over the last few years, an industry of threat intelligence firms has popped up that offer to monitor criminal forums, paste sites, and Tor hidden services for stolen intellectual property or customer information. Now, one of these companies is letting…