October

The latest in information security (in English and Dutch)

2014-10-27

• GfK Intomart bv: Rapportage van een kwantitatief onderzoek in opdracht van DPC en NCTV - Resultaten van de 2014 meting [PDF] | Persbericht | Via

2014-10-24

• Pearse Ryan, Paddy Buckenham and Niall Donnelly (SCL): EU Network and Information Security Directive

2014-10-15

• Fox-IT: New torrentlocker variant active in the Netherlands | Via
• Lee Munson (Naked Security): South Korean ID system faces overhauls following 10 years of data thefts

2014-10-14

• The Associated Press (CBC News): South Korea at a crossroads with ID card, data theft losses | Via
• Pim van der Beek (Computable): 'Amsterdam is walhalla voor Wi-Fi-criminelen'
• Council of Europe: Proposal for a Directive [...] on payment services in the internal market [...] - Presidency compromise [PDF] | Via
• European Commission: Q&A - Electronic Identification and Trust Services (eIDAS) Regulation | Full text of the Regulation in PDF
• Suzanne Hartholt (BoF): Cybersecurity en werkcomputers - werkt niet altijd
• Woodrow Hartzog (Wired): Don't listen to Snapchat's excuses. Security is its job | Via
• Bodo Möller, Thai Duong, and Krzysztof Kotowicz (Google): This POODLE bites - exploiting the SSL 3.0 fallback [PDF] | Via

2014-10-13

• NCSC: Help! Mijn website is kwetsbaar voor SQL-injectie [link naar PDF op pagina] | Via

2014-10-08

• Joseph Bonneau (Freedom to Tinker): Guessing passwords with Apple's full-device encryption
• René Schoenmaker (Webwereld): AIVD mag zero-days niet meer geheim houden | Stemmingen Privacy en toezicht op de inlichtingen- en veiligheidsdiensten

2014-10-07

• Philip N. Howard (Central European University): Data breaches in Europe - Reported breaches of compromised personal records in Europe, 2005-2014 [PDF] | News release | Via

2014-10-03

• Vicente Diaz (Securelist): OPSec for security researchers | Via

Earlier / undated

• Axel Arnbak, Hadi Asghari, Michel van Eeten, and Nico van Eijk (ACM): Security collapse in the HTTPS market [PDF] | Related blog post
• ENISA: Public private partnerships in network and information security education - Case studies [PDF linked from this page] | News release
• European Banking Authority: Consultation paper on the implementation of draft EBA guidelines on the security of internet payments prior to the transposition of the revised Payment Services Directive [PDF] | Via
• Europol European Cybercrime Centre: The Internet Organised Crime Threat Assessment (iOCTA) | Via
• Dinei Florencio, Cormac Herley and Paul C. van Oorschot: An administrator's guide to internet password research [PDF] | Via
• Imperva: Web application attack report #5 [PDF] | Via
• PwC: The global state of information security survey 2015 | Via
• W.F.R. Rinzema en F.B. Melis (Computerrecht): Hoe kan de kwaliteit van ICT-systemen juridisch meetbaar worden gemaakt? [PDF] | Gerelateerd blogbericht
• Ruud Verbij: Dutch e-voting opportunities, Risk assessment framework based on attacker resources [PDF] | Joop Bautz Information Security Award website in Dutch | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-09-30

• Kim Zetter (Wired): How RAM scrapers work - the sneaky tools behind the latest credit card hacks

2014-09-29

• ENISA: Flash Note - The BASH shellshock bug [PDF linked from this page] | Press release
• Europol: The Internet Organised Crime Threat Assessment [PDF linked from this page] | Press release | Via
• Tom Fox-Brewster (The Guardian): Londoners give up eldest children in public Wi-Fi security horror show | Via

2014-09-27

• Robert Graham (Errata Security): The shockingly obsolete code of bash | Do shellshock scans violate CFAA?

2014-09-25

• Paul Ducklin (Naked Security): Bash "Shellshock" vulnerability - what you need to know
• Brian Krebs (Krebs on Security): 'Shellshock' bug spells trouble for web security

2014-09-23

• Susan Pandy and Marianne Crowe (Federal Reserve Bank of Boston): Mobile payments industry workgroup meeting - Discussion on tokenization landscape in the U.S. - June 2-3, 2014[PDF] | Via

2014-09-15

• Andy Greenberg (Wired): Three things Apple can do to fix iCloud's awful security

2014-09-09

• Forum Standaardisatie: Beveiligingsstandaard TLS op 'pas toe of leg uit'-lijst

2014-09-06

• Jaap-Henk Hoepman: Improving (i)Cloud security

2014-09-03

• Nishant Kaushik (Talking Identity): Yes, Apple iCloud wasn't breached. The problem is actually much deeper
• John McCash (SANS Digital Forensics and Incident Response Blog): Copier forensics in 2014 - The good, the bad, and the ugly

2014-09-02

• J. van Groenendaal: De gestolen naaktfoto's van Kate Upton, Jennifer Lawrence en tientallen anderen [link naar PDF op pagina]

2014-09-01

• Graham Cluley: Naked pictures of Jennifer Lawrence and other celebrity starlets leak online

2014-08-27

• EDRi: Canadian data broker tries to sell hacked online customer data

2014-08-26

• [Diverse vertegenwoordigers hackerspaces]: Open brief aan het OM [PDF] | Via
• Louisa Hardwick (Naked Security): How to improve your Twitter security and privacy

2014-08-22

• Brenno de Winter (Nu.nl): Een huiszoeking na aanschaffen omstreden software | Via

2014-08-21

• Sara Peters (DarkReading): Heartbleed not only reason for Health Systems breach | Via
• Henk-Jan Buist (Webwereld): Lees terug - Rechtszaak tegen Rotterdamse webcamhacker
• Brian Krebs (Krebs on Security): Stealthy, razor thin ATM insert skimmers
• Dimitri Tokmetzis (De Correspondent): Zo raakten duizenden mensen tijdens het downloaden hun paspoort kwijt | Via

Earlier / undated

• Alcatel-Lucent: Kindsight security labs malware report - H1 2014 [PDF] | All Kindsight Security labs malware reports | Via
• CEN/CENELEC/ETSI - Cyber Security Coordination Group (CSCG): Recommendations for a strategy on European cyber security standardisation [PDF] | News release
• Check Point: Check Point Security report 2014 [PDF] | Via
• Department of Homeland Security (DHS): Backoff - New Point of Sale malware [PDF] | Via
• Anne Edmundson, Anna Kornfeld Simpson, Joshua A. Kroll and Edward W. Felten: Security audit of Safeplug 'Tor in a box' [PDF] | Related blog post
• F-Secure: Threat report H1 2014 [PDF] | Via
• Forum Standaardisatie: Betrouwbaarheidsniveaus voor authenticatie bij elektronische overheidsdiensten (versie 3) [PDF] | Nieuwsbericht
• John Gruber (Daring Fireball): Security trade-offs | Via
• Thoufique Haq, Ned Moran, Sai Vashisht and Mike Scott (FireEye Labs): Operation quantum entanglement [PDF] | Related blog post | Via
• Vadim Kotov (Br Labs): Optimized mal-ops - Hack the ads network like a boss [PDF] | Abstract with link to slides | Via
• NATO: NATO and cyber defence | Via
• Nederland ICT / Keala Consultancy: Nederland ICT cyber security zomeronderzoek 2014 [PDF] | Via
• Office of the Australian Information Commissioner: Data breach notification guide - A guide to handling personal information security breaches [PDF] | Via
• Ponemon Institute LLC: Is your company ready for a big data breach? The second annual study on data breach preparedness [PDF] | Via

[Permalink]