Category Archive for "Data Protection Fridays"

What White House Workers and Others Wished They Had Known About Ashley Madison

The carnage continues with the Ashley Madison data breach. Turns out now that White House workers and even Josh Duggar has been cited as users of the adult cheating site. People have the right to do whatever they want with

Read More

What You Can Learn from the Ashley Madison Hack

You might have heard that the adult cheating site Ashley Madison was hacked recently and that the initial thought from Ashley Madison was that the data compromised did not contain real data. Today there were reports that the data stolen (all

Read More

How to fix the POODLE SSL issue on IIS

There was a recent SSL vulnerability reported called POODLE (Padding Oracle On Downgraded Legacy Encryption), whereby if a user is connected to your Web server using SSL v3, there is a risk that an attacker can conduct a man-in-the-middle attack. 

Read More

JPMorgan Chase & Co. Data Breach

After a good summer break, we’re back for Data Protection Fridays and this story was too big to pass up.  On Thursday, JPMorgan Chase & Co. reported that they suffered a compromise of customer information for about 76 million households

Read More

Help Prevent and Prepare for Your Next Business Data Breach

I hope everyone had a great July the 4th weekend.  We’re back with another Data Protection Friday article. So here we go … The LA times published an article about how small businesses are at high risk for data breach.

Read More

Is it Time to Uninstall Your Anti-Virus?

During my session at the NetDiligence and HB Litigation conference in Philadelphia earlier this month, one of the audience members asked our panel if we should still use anti-virus software.  The reason they were asking was because in May, Brian

Read More

Data Breach? How to Keep Your Local Attorney General Happy

Last week I attended the NetDiligence and HB Litigation conference in Philadelphia. One of the most interesting panels (and there were lots) that I sat in on was one by some of attorney generals who shared their experiences and how

Read More

How to Get an A+ Security SSL Rating Fast

Qualys has a great SSL testing tool that lets website owners test their sites to see how well they’ve configured SSL on their servers. Unfortunately, the bad guys are also using this tool too to see if you’re low-hanging fruit.

Read More

Why Stolen Medical Records are Worth So Much

Ever wonder why healthcare organizations are so frequently targeted by malicious hackers? Or why criminals prefer stolen medical records as opposed to other types of sensitive data like credit card numbers, financial information and social security numbers? Here’s quick introduction

Read More

Key Lessons from the Avast Hack

Last week eBay reported they were hacked in February, and this week Avast the anti-virus company also reported that they were hacked. Yes, even security companies themselves are exposed to malicious attack. While everyone is busy laughing at Avast, I

Read More