November

The latest in information security (in English and Dutch)

Policy

Standards and best practices

Empirical data

David Emm, Maria Garnaeva, Victor Chebyshev, Roman Unuchek, Denkis Makrushin and Anton Ivanov (Kapersky Lab): IT threat evolution Q3 2014 [Full text with link to PDF] | Full text in PDF | Via
Risk Based Security: Data breach quick view - data breach trends during the first nine months of 2014 [PDF] | Via

In depth

Robert Escriva and Emin Gün Sirer: Time for better security for NoSQL
FTC: FTC obtains court orders temporarily shutting down massive tech support scams | Temporary restraining order in PDF | Via
United States Government Accountability Office (GAO): Information security - VA needs to address identified vulnerabilities [PDF] | Via
Tom van Goethem, Frank Piessens, Wouter Joosen and Nick Nikiforakis: Clubbing seals - Exploring the ecosystem of third-party security seals [PDF] | Related blog post | Via
Dan Goodin (Ars Technica): Using a password manager on Android? It may be wide open to sniffing attacks
Sander Hulsman (Computable): Security IoT moet naar hoger niveau | Via
Yonathan Klijnsma, Yun Zheng Hu, Lennart Haagsma, Maarten van Dantzig and Barry Weymes (Fox IT): CryptoPHP - Analysis of a hidden threat inside popular content management systems [PDF] | Related blog post | Via
Brian Krebs (Krebs on Security): Network hijackers exploit technical loophole
Brian Krebs (Krebs on Security): Skimmer innovation - 'wiretapping' ATMs
Mike Pilkington (SANS Digital Forensics and Incident Response Blog): Kerberos in the crosshairs - golden tickets, silver tickets, MITM, and more
Securify (NOS): Hoe springen Nederlandse apps om met onze persoonsgegevens? [PDF] | Nieuwsbericht NOS | Via
John Shier (Naked Security): Two-factor authentication - Understanding the options
Symantec: Regin - Top-tier espionage tool enables stealthy surveillance [PDF] | Related blog post | Via
Dana Tamir (Security Intell): Cybercriminals use Citadel to compromise password management and authentication solutions | Via
Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel and Giovanni Vigna: The dark alleys of Madison Avenue - Understanding malicious advertisements [PDF] | Related blog post | Via

The latest in data breaches (in Dutch)

Added:

Vertrouwelijke persoonsgegevens door systeembeheerder op openbare website gezet (2014-11-19)
Source: NRC (2014-11-19)

The latest in information security (in English and Dutch)

Policy

Standards and best practices

Empirical data

In depth

The latest in information security (in English and Dutch)

Policy

Standards and best practices

Empirical data

In depth