September

The latest in information security (in English and Dutch)

2013-09-11

• NOREA: Bijeenkomst over DigiD-assessments

2013-09-19

• Luc Gommans (Security.nl): Security tip van de week - Gebruik privénavigatie voor internetbankieren

2013-09-25

• KrebsOnSecurity: Data broker giants hacked by ID theft service [Via]

2013-09

• IID: Sharing the wealth, and the burdens, of threat intelligence [PDF] [Via]
• Mr Neil Robinson, Ms. Veronika Horvath, Prof Jonathan Cave, Dr Arnold P. Roosendaal and Dr Marieke Klaver (European Parliament): Data and security breaches and cyber-security strategies in the EU and its international counterparts [PDF] [PDF leaflet with links to this and related publications] [Via]

2013

• Compuware / Intellitrends: Measuring the business impact of [failed] technology performance - A global perspective - 2013 [PDF] [Via]
• F-Secure Labs: Threat report H1 2013 [PDF] [Via]

Undated

• FIRST: A complete guide to the Common Vulnerability Scoring System version 2.0 [Via]

[Permalink]

The latest in information security (in English and Dutch)

2013-08-28

• Simon Rice (ICO): Encryption is important to data security [Additional information on the ICO's approach to encryption] [Via]

13-09-11

• KPMG: Mobile security - from risk to revenue [PDF linked from this page] [Via]

2013-09-13

• Homme Bitter (Security.nl): Met je hoofd in de wolken
• Out-law.com: PCI DSS update should better define risk assessment requirements, says information security expert

2013-09-17

• Stephen Doherty, Jozsef Gegeny, Branko Spasojevic and Jonell Baltazar (Symantec): Hidden Lynx - Professional hackers for hire [PDF][Via]

2013-09-18

• Limor Kessem (RSA): Now registering for classes at Cybercrime U #INTH3WILD [Via]

2013-09-19

• ENISA: ENISA Threat landscape mid-year 2013 [PDF linked from this page] [Press release]

[Permalink]

This week in information security

2013-09-02

• Andrew Zammit Tabona (GFI): Top 20 free digital forensic investigation tools for sysadmins [Via]

2013-09-04

• Lee Munson (Naked Security): Another 5 tips to help keep you safe on Facebook

2013-09-05

• Monika Kuschewsky (Inside Privacy): Data breach notification within 24 in the electronic communication sector - an example to follow in the reform of the EU Data Protection Directive?
• Lee Rainie, Sara Kiesler, Ruogu Kang and Mary Madden (Pew Internet): Anonymity, privacy, and security online[PDF] [Web page with additional information] [Via]

2013-09-08

• Paul Ducklin (Naked Security): Anatomy of a phish - a "generic mass targeted attack" against WordPress admins

2013-09-09

• Vaste commissie voor Veiligheid en Justitie (Tweede Kamer): Verslag [bespreking wetsvoorstel meldplicht datalekken] [link naar PDF op pagina]
• Jens van den Brink (Media Report): Publeaks - wel of niet toe te juichen?
• Henk-Jan Buist (WebWereld): Nederlandse leksite nog lang geen Wikileaks
• Jaap-Henk Hoepman: Is cryptografie nog wel veilig?
• Wolfgang Kandek (Security.nl): Security tip van de week - gebruik een evergreen-browser

2013-09-10

• Arnoud Engelfriet (Ius Mentis): Klokkenluidersplatform Publeaks gelanceerd, hoe legaal is dat?

2913-09-11

• Arnoud Engelfriet (Security.nl): Juridische vraag - is SSL verplicht voor contactformulier?
• Tomas Weermeijer (SOLV): Klokkenluiden op z'n Hollands - Publeaks, anoniem of niet?

Undated / updated continuously

• Verizon: 2013 Data breach investigations report [PDF linked from this page] [Additional information] [Via]

[Permalink]

This week in information security

Links (English):

• EMV: Confidential information theft cases reach record high [Via]
• European Commission: Commission Regulation on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC on privacy and electronic communications [PDF linked from this page] [Press release] [Via]

Links (Dutch):

• Arnoud Engelfriet (Security.nl): Juridische vraag - zijn jeugdige hackers strafbaar?
• NVB: Fraude internetbankieren daalt met meer dan de helft [Via]

[Permalink]

Information security

Links (English):

• NIST: Discussion draft of the preliminary cybersecurity framework [PDF] [Illustrative examples | PDF] [Via]
• Rapid7: You're only as strong as your weakest link - securing the endpoint [PDF] [Accompanying web page with links to this and earlier reports] [Via]
• Symantec: Francophoned - A sophisticated social engineering attack [Via]
• Claudio Guarnieri (Rapid7): Upcoming G20 summit fuels espionage operations [Via]

Links (Dutch):

• Matthijs van Bergen (Securityrecht): Anonieme VPN aanbieden - en de bewaarplicht dan? (deel 2)
• Francois Gratiolet (Security.nl): Security tip van de week - hou een cyberbeveiligingsspreekuur
• Anke Verhoeven (SOLV): Blogserie - Het probleem van authenticatie (III)

[Permalink]