What does the EU's General Data Protection Regulation mean to me as a DBA supporting databases holding PII, PHI, and FTI?
http://www.eugdpr.org/http://ift.tt/1krgNIrSorry if this isn't the right place to post this. I'm trying to understand how this new regulation might affect my work and responsibilities.The company I work for, Company X, is a multinational company with holdings in the EU and US. I'm trying to stay ahead of the curve (and workload) by trying to understand what the EU's GDPR going into effect May 25 2018 might mean for me.I think I understand some of the implications such as reporting data breaches, but TBH I can't say I really understand how directly this affects me (a DBA - database administrator) and those in similar roles.There is a security team at my workplace, but I'm hesitant to start fires under people and freak out management without understanding more about this.Can anyone help me understand what this means for someone in my or a similar role?
Submitted October 20, 2017 at 04:40AM by penguindba
via reddit http://ift.tt/2gnU5mT
http://www.eugdpr.org/http://ift.tt/1krgNIrSorry if this isn't the right place to post this. I'm trying to understand how this new regulation might affect my work and responsibilities.The company I work for, Company X, is a multinational company with holdings in the EU and US. I'm trying to stay ahead of the curve (and workload) by trying to understand what the EU's GDPR going into effect May 25 2018 might mean for me.I think I understand some of the implications such as reporting data breaches, but TBH I can't say I really understand how directly this affects me (a DBA - database administrator) and those in similar roles.There is a security team at my workplace, but I'm hesitant to start fires under people and freak out management without understanding more about this.Can anyone help me understand what this means for someone in my or a similar role?
Submitted October 20, 2017 at 04:40AM by penguindba
via reddit http://ift.tt/2gnU5mT
Spear Phishing with Go phish Framework
http://ift.tt/2yAV9Ot
Submitted October 20, 2017 at 04:16AM by ju1i3k
via reddit http://ift.tt/2xRn48Z
http://ift.tt/2yAV9Ot
Submitted October 20, 2017 at 04:16AM by ju1i3k
via reddit http://ift.tt/2xRn48Z
Cobalt.io
Spear Phishing with Go phish Framework
What is Spear Phishing?
Facebook is struggling to meet the burden of securing itself, security chief says
http://ift.tt/2yywJDn
Submitted October 20, 2017 at 06:55AM by RandomCollection
via reddit http://ift.tt/2x9wzku
http://ift.tt/2yywJDn
Submitted October 20, 2017 at 06:55AM by RandomCollection
via reddit http://ift.tt/2x9wzku
Ars Technica
Facebook is failing to meet the burden of securing itself, security chief says
Chief Security Officer described security report as a “very painful process.”
Facebook's initiative to protect the Canadian elections
http://ift.tt/2zn8XcO
Submitted October 20, 2017 at 08:17AM by securitynewsIO
via reddit http://ift.tt/2gw2Ija
http://ift.tt/2zn8XcO
Submitted October 20, 2017 at 08:17AM by securitynewsIO
via reddit http://ift.tt/2gw2Ija
Security News iO
Facebook initiative to Protect Canadian Politics | Security News iO
The Facebook initiative builds on lessons learned from the 2016 U.S. elections, and they are working on protecting the 2019 Canadian elections.
A butt plug could be controlled remotely
http://ift.tt/2ipnm4R
Submitted October 20, 2017 at 09:13AM by securitynewsIO
via reddit http://ift.tt/2gvTCTD
http://ift.tt/2ipnm4R
Submitted October 20, 2017 at 09:13AM by securitynewsIO
via reddit http://ift.tt/2gvTCTD
Security News iO
Hack A Butt Plug: Device Could be Controlled Remotely | Security News iO
An Italian researcher found a security flaw in a Bluetooth controlled sex toy that would allow someone to hack a butt plug.
ATT&CK Matrix: Persistence - .bashrc / .bash_profile
http://ift.tt/2inZgYy
Submitted October 20, 2017 at 07:28AM by tmsteen
via reddit http://ift.tt/2guiVFt
http://ift.tt/2inZgYy
Submitted October 20, 2017 at 07:28AM by tmsteen
via reddit http://ift.tt/2guiVFt
The Random Adventure That Is Life (RATIL)
ATT&CK Matrix: Persistence - .bashrc / .bash_profile
This is the first in a series that is centered on the MITRE ATT&CK Matrix. This seemed like a good way to give myself some content to write about and to learn about all the different ways attackers work. Each post will focus on a specific technique going
WordPress DNS servers are actually a man in the middle
http://ift.tt/2yBubpW
Submitted October 20, 2017 at 01:12PM by mr-gaiasoul
via reddit http://ift.tt/2xS2cyD
http://ift.tt/2yBubpW
Submitted October 20, 2017 at 01:12PM by mr-gaiasoul
via reddit http://ift.tt/2xS2cyD
Gaiasoul
The autobiography that WordPress and the Norwegian Secret Police broke the law to read
I have just published my autobiography. Generally, most people would probably find this fact pretty boring, if it hadn’t been for the extremely well planned out cyber attack, I found out abou…
Malware in firmware can be as equally creative as it can be destructive
http://ift.tt/2yTRs7K
Submitted October 20, 2017 at 12:55PM by goretsky
via reddit http://ift.tt/2zo5xXp
http://ift.tt/2yTRs7K
Submitted October 20, 2017 at 12:55PM by goretsky
via reddit http://ift.tt/2zo5xXp
WeLiveSecurity
Malware in firmware can be as equally creative as it can be destructive
Malware in firmware can be both creative and destructive and runs before the OS loads and target components in order to modify or subvert their behavior
Purism Librem Laptops Completely Disable Intel’s Management Engine
http://ift.tt/2l1pAs8
Submitted October 20, 2017 at 12:16PM by casabanclock
via reddit http://ift.tt/2l2pHDL
http://ift.tt/2l1pAs8
Submitted October 20, 2017 at 12:16PM by casabanclock
via reddit http://ift.tt/2l2pHDL
reddit
Purism Librem Laptops Completely Disable Intel’s... • r/security
1 points and 0 comments so far on reddit
WordPress DNS servers are acting as a man in the middle, to steal credential cookies
http://ift.tt/2zCnen3
Submitted October 20, 2017 at 02:32PM by mr-gaiasoul
via reddit http://ift.tt/2zn4fvI
http://ift.tt/2zCnen3
Submitted October 20, 2017 at 02:32PM by mr-gaiasoul
via reddit http://ift.tt/2zn4fvI
Gaiasoul
WordPress’ DNS servers are stealing my cookies
I have a lot of respect for WordPress, they’re the only organisation I have ever encountered that has never censored me among other things. However, about a week ago I discovered that they we…
Why a risk assessment should be in your future
http://ift.tt/2l0e7JA
Submitted October 20, 2017 at 02:24PM by MicheeLengronne
via reddit http://ift.tt/2zAEqsR
http://ift.tt/2l0e7JA
Submitted October 20, 2017 at 02:24PM by MicheeLengronne
via reddit http://ift.tt/2zAEqsR
CSO Online
Why a risk assessment should be in your future
Eugene Kaspersky Addresses the allegations against Kaspersky Lab
https://www.youtube.com/watch?v=xKiHka4qzIc
Submitted October 20, 2017 at 02:16PM by giomke
via reddit http://ift.tt/2zn4jLY
https://www.youtube.com/watch?v=xKiHka4qzIc
Submitted October 20, 2017 at 02:16PM by giomke
via reddit http://ift.tt/2zn4jLY
YouTube
Eugene Kaspersky Addresses the allegations against Kaspersky Lab
Eugene Kaspersky discusses the latest allegations against Kaspersky Lab.
Read the blog: https://kas.pr/x78t
Read the blog: https://kas.pr/x78t
Security flaws in child smartwatches mean hackers can use them to spy on kids' locations
http://ift.tt/2kYgGvD
Submitted October 20, 2017 at 01:49PM by GemmaJ123
via reddit http://ift.tt/2znAxXl
http://ift.tt/2kYgGvD
Submitted October 20, 2017 at 01:49PM by GemmaJ123
via reddit http://ift.tt/2znAxXl
Business Insider
Security flaws in child smartwatches mean hackers can use them to spy on kids' locations
The devices could be hijacked and used to eavesdrop on children — or even send them messages, researchers found.
Security In 5: Episode 94 - Tips, Tricks and Tools (TTT Episode) - VirusTotal
http://ift.tt/2hTBtLQ
Submitted October 20, 2017 at 06:32PM by BinaryBlog
via reddit http://ift.tt/2yVIbw9
http://ift.tt/2hTBtLQ
Submitted October 20, 2017 at 06:32PM by BinaryBlog
via reddit http://ift.tt/2yVIbw9
Libsyn
Security In Five Podcast: Episode 94 - Tips, Tricks and Tools (TTT Episode) - VirusTotal
Going forward, each Friday I will do a TTT Episode. Tips, Tricks and Tools will highlight one of the many, many tools and tricks I use daily in my security profession. In security you can never have too many tools because there is no single tool that can…
Detecting KRACK Attack using KISMET in Kali Linux
http://ift.tt/2gnYI0u
Submitted October 20, 2017 at 07:32PM by hackersgrid
via reddit http://ift.tt/2gwZc8c
http://ift.tt/2gnYI0u
Submitted October 20, 2017 at 07:32PM by hackersgrid
via reddit http://ift.tt/2gwZc8c
Root Said
KISMET - KRACK Test in Kali Linux - Root Said
Detect KRACK vulnerability using KISMET in WIFI Routers using Kali Linux IDS. Learn how to install and configure kismet in Kali Linux.
rev.ng is a suite of tools for binary analysis based on QEMU and LLVM
https://rev.ng/
Submitted October 20, 2017 at 07:18PM by grajagandev
via reddit http://ift.tt/2yvpFtV
https://rev.ng/
Submitted October 20, 2017 at 07:18PM by grajagandev
via reddit http://ift.tt/2yvpFtV
reddit
rev.ng is a suite of tools for binary analysis based on... • r/netsec
1 points and 0 comments so far on reddit
RSA SecureID SID700 Fips 140-2 compliant?
Just curious if anyone has any insight to this? I can find documentation on the SID800 being FIPS 140-2 compliant but the 700 datasheet does not include this and I can not find this information from RSA.
Submitted October 20, 2017 at 07:12PM by ProfFrnswrth
via reddit http://ift.tt/2yWITsY
Just curious if anyone has any insight to this? I can find documentation on the SID800 being FIPS 140-2 compliant but the 700 datasheet does not include this and I can not find this information from RSA.
Submitted October 20, 2017 at 07:12PM by ProfFrnswrth
via reddit http://ift.tt/2yWITsY
reddit
RSA SecureID SID700 Fips 140-2 compliant? • r/security
Just curious if anyone has any insight to this? I can find documentation on the SID800 being FIPS 140-2 compliant but the 700 datasheet does not...
IoT reaper - a new IoT botnet spreading using exploits, not password brute force
http://ift.tt/2l4DERS
Submitted October 20, 2017 at 07:46PM by cybergibbons
via reddit http://ift.tt/2l2zVUZ
http://ift.tt/2l4DERS
Submitted October 20, 2017 at 07:46PM by cybergibbons
via reddit http://ift.tt/2l2zVUZ
reddit
IoT reaper - a new IoT botnet spreading using exploits,... • r/netsec
12 points and 0 comments so far on reddit
DDEAUTO Root Cause Analysis
http://ift.tt/2yEOPph
Submitted October 20, 2017 at 08:38PM by billbillthebillbill
via reddit http://ift.tt/2gol8hS
http://ift.tt/2yEOPph
Submitted October 20, 2017 at 08:38PM by billbillthebillbill
via reddit http://ift.tt/2gol8hS
Endgame
The Bug or Feature Debate is Back Yet Again: DDEAUTO Root Cause Analysis
Over the last few years, macro-based document attacks have been growing in popularity. With the rising cost of memory corruption based exploitation due to the required level of expertise and resources, attackers understand that they can accomplish similar…
Poorly Secured SSH Keys Exposing Firms to Breaches
http://ift.tt/2xOjYaC
Submitted October 20, 2017 at 09:09PM by speckz
via reddit http://ift.tt/2yC7r92
http://ift.tt/2xOjYaC
Submitted October 20, 2017 at 09:09PM by speckz
via reddit http://ift.tt/2yC7r92
Infosecurity Magazine
Poorly Secured SSH Keys Exposing Firms to Breaches
Poorly Secured SSH Keys Exposing Firms to Breaches. Venafi finds 90% of orgs don’t even know what they have
Google PDFium Tiff Code Execution
http://ift.tt/2yvnxSS
Submitted October 20, 2017 at 03:38AM by Cartosho
via reddit http://ift.tt/2ywxyPB
http://ift.tt/2yvnxSS
Submitted October 20, 2017 at 03:38AM by Cartosho
via reddit http://ift.tt/2ywxyPB
Talosintelligence
Vulnerability Spotlight: Google PDFium Tiff Code Execution
A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group