2 сделки существенно влияющих на рынок сетевой безопасности.
1.
OpenNews: Компания F5 Networks полготила NGINX за 670 млн долларов
https://www.opennet.ru/opennews/art.shtml?num=50297
1.
OpenNews: Компания F5 Networks полготила NGINX за 670 млн долларов
https://www.opennet.ru/opennews/art.shtml?num=50297
www.opennet.ru
Компания F5 Networks поглотила NGINX за 670 млн долларов
Компания NGINX объявила о заключении сделки по продаже своего бизнеса компании F5 Networks, специализирующейся на предоставлении облачных приложений и сетей доставки приложений (ADN). Сумма сделки составит 670 млн долларов. F5 Networks продолжит развитие…
agenda_plenary_meeting_march_2019_publicversion_en.pdf
81 KB
agenda_plenary_meeting_march_2019_publicversion_en.pdf
Посмотрите, о чем твитнул(а) @DespinaSpanou: https://twitter.com/DespinaSpanou/status/1105436250205507584?s=09
Twitter
Despina Spanou
The #EP has just voted the #Cybersecurity Act establishing a stronger #ENISA and the first ever #EU framework on security certification for connected products and services - next step for Council to finalize adoption and implementation will start https:/…
Courtney’s Third Law: “There are no technical solutions to management problems, but there are management solutions to technical problems.”
Marriott CEO shares post-mortem on last year's hack | ZDNet
https://www.zdnet.com/article/marriott-ceo-shares-post-mortem-on-last-years-hack/
https://www.zdnet.com/article/marriott-ceo-shares-post-mortem-on-last-years-hack/
ZDNET
Marriott CEO shares post-mortem on last year's hack
Marriott investigators found Mimikatz and a remote access trojan (RAT) on hacked Starwood IT system.
"latest stats surrounding the Marriott breach:
383 million guest records
18.5 million encrypted passport numbers
5.25 million unencrypted passport numbers (663,000 from the US)
9.1 million encrypted payment card numbers
385,000 card numbers that were still valid at the time of the breach"
383 million guest records
18.5 million encrypted passport numbers
5.25 million unencrypted passport numbers (663,000 from the US)
9.1 million encrypted payment card numbers
385,000 card numbers that were still valid at the time of the breach"
Первый прецедент когда мнение одного локального регулятора по GDPR существенно отличается от мнения других. По мнению голландского регулятора требование согласиться с использованием cookies для доступа к сайту - нарушает GDPR.
Dutch Data Protection Authority says cookie walls violate GDPR
http://www.scmagazine.com/home/security-news/dutch-data-protection-authority-chips-away-at-cookie-walls-declaring-they-violate-gdpr/
Dutch Data Protection Authority says cookie walls violate GDPR
http://www.scmagazine.com/home/security-news/dutch-data-protection-authority-chips-away-at-cookie-walls-declaring-they-violate-gdpr/
SC Media
Dutch Data Protection Authority says cookie walls violate GDPR
Websites that restrict visitors from viewing content unless they first accept the use of cookies are violating GDPR, the DDPA has determined.
Nist обязали разработать стандарт минимальных требований по ИБ IoT которыми будут обязаны руководствоваться ФОИВ США.
Lawmakers introduce bipartisan bill for 'internet of things' security standards | TheHill
https://thehill.com/policy/cybersecurity/433519-lawmakers-introduce-bipartisan-bill-to-set-security-standards-for
Lawmakers introduce bipartisan bill for 'internet of things' security standards | TheHill
https://thehill.com/policy/cybersecurity/433519-lawmakers-introduce-bipartisan-bill-to-set-security-standards-for
TheHill
Lawmakers introduce bipartisan bill for 'internet of things' security standards
A bipartisan group of lawmakers on Monday unveiled legislation that would create cybersecurity standards for internet-connected devices, often known as the “internet of things.”
Премия SANS за лучшие статьи в области кибербезопасности за 2018 год.
Top Cyber Security Journalist Award Winnners | SANS Institute
https://www.sans.org/top-journalists/2018
Top Cyber Security Journalist Award Winnners | SANS Institute
https://www.sans.org/top-journalists/2018
www.sans.org
Top Cyber Security Journalist Award Winnners | SANS Institute
Read about the 2018 Top Cyber Security Journalists as voted by their peers.
Использующим продукты Citrix рекомендуем держать руку на пульсе и планировать апдейт в течении года на новые версии, в случае если появятся подозрения на их компрометацию.
Citrix investigating unauthorized access to internal network | Citrix Blogs
https://www.citrix.com/blogs/2019/03/08/citrix-investigating-unauthorized-access-to-internal-network/
Citrix investigating unauthorized access to internal network | Citrix Blogs
https://www.citrix.com/blogs/2019/03/08/citrix-investigating-unauthorized-access-to-internal-network/
Инициатива по разработке единых подходов к раскрытию уязвимостей.
Cyber group calls for coordinated vulnerability disclosure policies -- FCW
https://fcw.com/articles/2019/03/07/vulnerability-disclosure-coalition.aspx?m=1
Cyber group calls for coordinated vulnerability disclosure policies -- FCW
https://fcw.com/articles/2019/03/07/vulnerability-disclosure-coalition.aspx?m=1
FCW
Cyber group calls for coordinated vulnerability disclosure policies -- FCW
A group led by a former top federal cybersecurity official is seeking to make policies that enable outside researchers to work with organizations to find and mitigate IT flaws 'standard' in the public and private sectors.
Германия выпустила требования по кибербезопасности для поставщиков телекома.
Germany planning 'trustworthy' supplier requirement for all networks and 5G | ZDNet
https://www.zdnet.com/article/germany-planning-trustworthy-supplier-requirement-for-all-networks-and-5g/
Germany planning 'trustworthy' supplier requirement for all networks and 5G | ZDNet
https://www.zdnet.com/article/germany-planning-trustworthy-supplier-requirement-for-all-networks-and-5g/
ZDNet
Germany planning 'trustworthy' supplier requirement for all networks and 5G
A draft of updated security requirements is set to appear in Northern Hemisphere's spring.
Forwarded from ZLONOV security
ИБ новинки, представленные на RSA Conference 2019 https://www.crn.com/slide-shows/security/30-hot-new-cybersecurity-products-announced-at-rsa-conference-2019
CRN
30 Hot New Cybersecurity Products Announced At RSA Conference 2019
From blockchain implementation testing and identifying suspicious users in real-time to hunting for advanced threats on mobile devices, here's a look at 30 key security offerings unveiled at the RSA Conference this year.
Forwarded from ZLONOV security
Если вы, как и я, не мониторите Реестр каждый день, а пользуетесь им по необходимости от случая к случаю, то, возможно, пока не обратили внимание на недавние нововведения. Мне они, к слову, очень даже понравились. https://blog.zlonov.ru/better-fstec-registry/