November

The latest in information security (in English and Dutch)

13-11-13

• Arnoud Engelfriet (Security.nl): Juridische vraag - hoe waarschuw je de eigenaar van een lek systeem?

2013-11-11

• John Hawes (Naked Security): Who is to blame for hacker-phobia?

2013-11-07

• Ladar Levison (Ars Technica): Op-ed - Lavabit's founder responds to cryptographer's criticism | Via

Earlier / undated

• Microsoft: Microsoft security intelligence report - Volume 15 - January to June, 2013 [PDF linked from this page] | Via
• Payment Card Industry (PCI) Security Standards Council: [PCI] Data Security Standard - Summary of changes from PCI DSS version 2.0 to 3.0 [PDF] | Via
• ThreatTrack Security: Malware analysts have the tools to defend against cyber-attacks, but challenges remain [PDF] | Via

[Permalink]

The latest in information security (in English and Dutch)

2013-11-05

• Moxie Marlinspike: A critique of Lavabit | Via

2013-11-04

• Paul Ducklin (Naked Security): Anatomy of a password disaster - Adobe's giant-sized cryptographic blunder

2013-11-01

• NIST: NIST initiating review of cryptographic standards development process | Via

2013-10-31

• Dan Goodin (Ars Technica): Meet "badBIOS," the mysterious Mac and PC malware that jumps airgaps | Analysis by Robert Graham (Errata Security) | Analysis by Paul Ducklin (Naked Security) | Analysis by Philip Jaenke (Rootwyrm)

2013-10-30

• ENISA et al: Stop - Think - Connect - Mobile safety tips [PDF linked from this page] | PDF

Earlier / undated

• Prof. dr. ir. Herbert Bos, prof. dr. Sandro Etalle, ir. Frank Fransen and dr. ir. Erik Poll: National cyber security research agenda II [PDF] | Press release, in Dutch | Via
• Mark Greisiger (NetDiligence): Cyber liability & data breach insurance claims - A study of actual claim payouts [PDF] | Via
• KPMG: Global profiles of the fraudster - White-collar crime - present and future [PDF linked from this page] | Full text (PDF) | Via
• Nederland ICT: Gedragscode responsible disclosure [PDF] | Persbericht met aanvullende informatie | Via
• Perkins Coie: Security breach notification chart | Via
• Vincent Rijmen, Daniel De Cock, and Nigel P. Smart (ENISA): Recommended cryptographic measures - Securing personal data [PDF linked from this page] | Full text (PDF) | Press release

[Permalink]

The latest in information security (in English and Dutch)

2013-10-31

• Dawn Monaghan (ICO blog): Data leaks in local government - where are the cracks in your system?

2013-10-29

• Securiteam Blogs: It's what's on the inside that counts
• Nigel P. Smart, Vincent Rijmen, Bogdan Warinschi and Gaven Watson (ENISA): Algorithms, key sizes and parameters report - 2013 recommendations [PDF linked from this page] | Via

2013-10-28

• Richard Bejtlich (TaoSecurity): Mozilla Lightbeam add-on shows risk of third party sites | Via
• Marcia Nieuwenhuis (AD): Staatsveiligheid sinds 2010 tien keer in geding | Incidenten publieke sector (PDF) | Incidenten private sector (PDF) | Via

2013-10-23

• Robert Siciliano (McAfee): Oversharing on social media common amongst 50+ | Via

2013-10-04

• NCSC: DNS-amplificatie - Laat uw deur niet wagenwijd openstaan [link naar PDF op pagina] | Volledige tekst (PDF) | Via

Earlier / undated

• Paul van Kessel and Ken Allan (EY): Under cyber attack - EY's Global information security survey 2013 [PDF linked from this page] | Full text (PDF) | Via
• Raytheon / National Cybersecurity Alliance: Preparing Millennials to lead in cyberspace - A Raytheon-commissioned study of attitude, behaviors and career aspirations among young American adults online [PDF] | News release | Via
• Minister van Veiligheid en Justitie: Nationale cybersecurity strategie 2 - Van bewust naar bekwaam [link naar PDF op pagina] | Kamerbrief [link naar PDF op pagina] | Rapportage onderzoek [link naar PDF op pagina] | Persbericht
• Verbond van Verzekeraars: Virtuele risico's, echte schade - Over het verzekeren van cyberrisico's [link naar PDF op pagina] | Volledige tekst (PDF) | Via

[Permalink]