Many incidents occur through access control and authentication vulnerabilities. Just consider the recently reported Fruit of a Loom incident that allowed easy access to 1,006 names and Social Security numbers of former employees. It is likely poorly constructed and inadequately tested applications controls resulted in this breach, not unlike so many other breaches that have occurred.
Posts Tagged ‘privacy’
Addressing Web-Based Access and Authentication Challenges
Friday, March 2nd, 2007Punitive Actions Pursued Against Professor in Japan Who Had PII About 8,800 on Disk That Was Stolen
Thursday, March 1st, 2007The differences throughout the world with which personally identifiable information (PII) privacy breaches are penalized is always interesting to me.
Today it was reported that the
RINBOT/DELBOT Virus Running Rampant In the Wild: Exploits Anti-Virus Software Vulnerabilities Allowing Access to Business Networks
Thursday, March 1st, 2007U.S. Federal CIOs More Concerned About Information Security and Privacy Than In the Past
Wednesday, February 28th, 2007Monday (2/26) the ITAA issued a press release reporting the resuults of a survey of 47 government CIOs.
They found that:
Legislation Passed to Strengthen Bush’s Privacy and Civil Liberties Oversight Board
Tuesday, February 27th, 2007On February 15 the Senate Homeland Security and Governmental Affairs Committee approved legislation with provisions to strengthen President Bush’s Privacy and Civil Liberties Oversight Board. The provisions were part of a bill, the “Improving America’s Security Act of 2007” (S. 4), aimed at implementing unfulfilled recommendations of the 9/11 Commission. Full text of the 227-page S. 4 bill is available online.
U.S. Privacy Related Bills Introduced February 15 & 16
Monday, February 26th, 2007Before the U.S. House adjourned Febuary 16 and the Senate adjourned February 17 for a week-long recess, they submitted some bills with privacy impacts.
U.S. Privacy Related Bills Introduced February 15 & 16
Monday, February 26th, 2007Before the U.S. House adjourned Febuary 16 and the Senate adjourned February 17 for a week-long recess, they submitted some bills with privacy impacts.
Exploring Identity Verification Solutions and Identity Theft Prevention
Friday, February 23rd, 2007Audit Reveals Poor Computer & Data Disposal Practices At Idaho National Laboratory
Thursday, February 22nd, 2007Yesterday Government Computer News reported bad computer disposal methods at the Idaho National Laboratory that leaves confidential and restricted data, including nuclear details, vulnerable.
Free Access, For a Limited Time, to Great Information Security, Privacy and Compliance Information
Wednesday, February 21st, 2007For a limited time you can get free access to a ton of great EDPACS papers.
