Security

Databases and other data stores hosted across different platforms and providers present an appealing target to threat actors. The sheer volume of information in them can be used to make vast sums either through selling it on the dark market or exploiting it. Depending on the data concerned, exploitation can include using personal and financial information to steal money or commit fraud, or extortion. Suffering a database breach is also very likely to impact compliance with the GDPR and other regulations such as the upcoming California Consumer Protection Act (CCPA), potentially leading to huge fines for the organisation in addition to the cost of the breach.As such, databases in enterprises of all sizes frequently come under sustained attacks, with intrusions often passing undetected for long period of time, meaning that they need to be protected by both reactive and proactive security systems.This is easier said than done. As database infrastructure has become more complex, so too has … [Read more...] about Creating enterprise-level security for databases in the cloud

It’s that time to change your passwords again. Popular on-demand food delivery platform DoorDash has confirmed a data breach affecting 4.9 million customers, workers, and merchants. Have you heard of Hard Fork Summit? TNW’s finance, blockchain, and business event is coming up soon Find out more The data was accessed by an unnamed third-party service provider on May 4, including profile information such as names, emails, delivery addresses, phone numbers, hashed and salted passwords, as well as the driver’s license numbers of nearly 100,000 delivery executives. The leak is also said to have exposed the last four digits of payment cards for some consumers and the last four digits of the bank account numbers for some delivery executives and restaurants. DoorDash, a gig economy giant founded in 2013, connects customers with local restaurants, and relies on independent contractors who use their own vehicles for door-to-door delivery, also known as … [Read more...] about DoorDash leaves door open for data breach, affecting 4.9M people

Credit: ShutterstockVariety reported yesterday that Mac systems throughout Hollywood stopped working on Monday night. The affected users originally blamed video editing software, but in a twist even M. Night Shyamalan would find implausible, the issue was actually caused by Google Chrome. Google said in a forum post that "a Chrome update may have shipped with a bug that damages the file system on macOS machines with System Integrity Protection (SIP) disabled." Devices that don't support SIP, which debuted with OS X El Capitan in 2015, were also affected. Apple explained in a support article that SIP is "designed to help prevent potentially malicious software from modifying protected files and folders on your Mac" by limiting "the actions that the root user can perform on protected parts of the Mac operating system." The good news is that SIP is automatically enabled on all devices running OS X 10.9 or later. (That includes macOS releases, too, because Apple merely rebranded the … [Read more...] about Google Chrome Update Damages macOS File System

Photo Source: Shutterstockreleased this patch via a cumulative update to Windows 10, and saying its track record with those updates has been hit-or-miss lately would be an understatement, given the many problems Windows users have reported over the last few weeks.the vulnerability itself:Microsoft said, but it didn't offer any specifics. There don't appear to be any other changes in the KB4522016 cumulative update released yesterday; problems affecting certain Input Method Editors as well as Windows audio remain in the "known issues" section of the company's support article about the release. … [Read more...] about Microsoft Patches Internet Explorer Security Flaw

Medical records belonging to millions of patients across the world, including echocardiograms and X-rays, are stored on insecure servers that did not have basic security precautions in place, a new investigation by ProPublica has found. “Data from more than 13.7 million medical tests in the US were available online, including more than 400,000 in which X-rays and other images could be downloaded,” the report said. Meet with experts in finance, blockchain, and business Don’t miss Hard Fork Summit in Amsterdam Get tickets The findings — published by the investigative journalism non-profit and German broadcaster Bayerischer Rundfunk — found 187 unprotected servers in the US and five in Germany, which were used to host sensitive data such as patient records, their dates of birth, doctors and the procedures undertaken. Most of the cases of unprotected data unearthed involved independent radiologists, medical imaging centers or archiving services. … [Read more...] about Over 13.7M US medical test records found unsecured on servers