-
Apple Phone Case Exposes Stubborn Skills Gap
2017-11-13
Like many of us in the cybersecurity industry, I paid close attention to the recent fight between the FBI and Apple over an encrypted phone.
-
Clinton, Encryption And The Trust Problem
2017-11-13
Last week, presumptive Democratic Presidential Nominee Hillary Clinton unveiled a sprawling technology plan that included provisions for encryption and broader cybersecurity. On paper it looks sensible. But there’s a massive trust problem -- not just for Clinton, but for the Federal Government as a whole.
-
EU Data Security: Three Elements of Uncertainty
2017-11-13
Companies responsible for complying with the European Union's General Data Protection Regulation (GDPR) have a lot of uncertainty to process. From Brexit to the demise of Safe Harbor and the unfolding Digital Single Market (DSM), questions abound over how to proceed with compliance efforts. What follows is a breakdown of these developments and a suggestion for the way forward.
-
First Principles of Data Security: The 4 Key Questions You Need to Be Asking
2017-11-13
Looking at the volume of recent data breaches, it appears that malicious hackers are becoming increasingly savvy. Maybe. But the more likely cause is that miscreants are walking through doors left open by a legacy of bad security practices – or they are working with people already inside with access to sensitive data.
-
GDPR Will Dominate 2016 European Legal Security Forum
2018-06-19
A big focus of the 2016 European Legal Security Forum (July 12 at 155 Bishopsgate, London) is on the General Data Protection Regulation (GDPR), which will require companies doing business in the European Union to better secure how they collect, store, and use personal information by 2018. In keeping with the law’s central concepts of “data protection by design” and “data protection by default,” organisations must build stronger data security into their products and services and follow strict guidelines on how personal data may be used. Failure to comply will carry severe penalties of up to 4% of a company’s annual turnover (gross revenue). The law provides specific rules for data processors -- businesses that collect or manage data on behalf of a data controller:
-
How PKWARE Became A Data Encryption Company
2017-11-13
When PKWARE comes up in conversation, people often make the following comments: I didn’t know PKWARE was still around! Encryption? I thought PKWARE was about .ZIP file technology? Thing is, this company has been going strong for a long time, providing encryption and compression solutions to more than 30,000 enterprise customers around the world. Our Smartcrypt technology has become a staple for organizations in the financial services, government, healthcare, retail, and manufacturing sectors. For those unfamiliar with PKWARE’s history and trajectory, the overview below should clear up a few things.
-
Safe and Sound (When No One is Paying Attention)
2017-11-13
The worlds of fantasy and security have collided twice recently, once in practice and the other in principle.
-
The DNC Hack: From Prediction To Reality
2017-11-13
Among the 2016 cybersecurity predictions he made back in January, PKWARE CEO and President V. Miller Newton said a presidential campaign would be hacked before the November election. That prediction has become reality, according to The Washington Post.
-
The Yahoo Breach: Four Lessons
2017-11-13
If the Yahoo data breach has taught us anything, it’s that no enterprise is immune to compromise.
-
Top 3 HIMSS Takeaways
2017-11-13
I recently presented at the Healthcare Information and Management Systems Society – North Carolina Chapter – where I talked about the importance of securing data within the healthcare industry. During my time at the conference, I kept my ear to the ground to better understand broader trends impacting the industry and left with three big takeaways:
-
Understanding Security And The Internet of Things
2017-11-13
The DDoS attack that crippled such major sites as Twitter, Paypal, Netflix and Reddit last week shifted the world's attention to the so-called Internet of Things (IoT). Security experts have discussed the IoT as a target for some time, but the coordinated assault against Dyn, one of several companies hosting the the Domain Name System (DNS), brought the dangers into clearer focus. To better understand what we're dealing with, a deeper dive into the IoT is necessary. Here's a look at how it works, where the vulnerabilities are, and what can be done to improve the security behind the technology.
-
What Does Brexit Mean For Data Security Laws?
2017-11-13
The UK’s vote to break away from the European Union raises many questions about the future of the myriad data security laws affecting the entire continent.
-
When The Security Expert Is The Idiot
2017-11-13
Here at PKWARE, when we describe the types of adversaries our technology is designed to block, we say “thieves, snoops and idiots.” The first two are easy to describe. The thief wants to break into enterprise networks and steal sensitive information and the snoop is either out to invade your privacy or is a trusted employee with access to information that, if shared with the outside world, could cause a lot of damage to the enterprise’s reputation.
-
Why We Are Teaming Up with Google, Facebook and a Few of Our Rivals
2017-11-13
Protecting the world’s information can create strange bedfellows. But sometimes it’s worth the unexpected allegiances with potential rivals or social media companies in an effort for everyone to get a better grasp on data security.
-
With Data Security, Compliance Is The Beginning, Not The End
2017-11-13
Ask PKWARE customers about the biggest challenge they face, and many respond with one word: compliance. Every industry has separate mandates to worry about, such as HIPAA for healthcare, and PCI DSS for financial services. The common denominator in just about every compliance mandate is the need for Data Loss Prevention. Overall, compliance requirements have been good for security. If it weren’t for these regulations and industry standards, many enterprises wouldn’t be doing nearly enough to safeguard sensitive data. But there are risks in how enterprises handle compliance. A checkbox mentality often ensues, where companies put their primary focus on checking off the boxes on a list during a compliance audit.