Eric Norlin

Marketing & e-commerce best practices need to evolve. If you have to trick people or withhold information to convert a sale, that should tell you something about the true value of what you're selling.

5

history4feed: creates a complete full text historical archive for an #RSS or #ATOM feed. ...and this one is not solely for those working #threatintelligence. https://lnkd.in/eK4Kgiug

8

1 Comment

💡 How does my PKI’s status compare to that of others? Understanding where your Public Key Infrastructure (PKI) stands compared to others can be a game-changer. It’s not just about identifying benchmarks and best practices but also uncovering areas ripe for improvement. 🌟 While it’s crucial to tailor your PKI evaluation to fit your organization’s unique needs and constraints, benchmarking against industry reports, case studies, and peer-reviewed publications can offer invaluable insights into your PKI’s performance. 📊✨ Though the PKI Consortium doesn’t publish individual maturity assessment results, we provide a vibrant community where you can exchange experiences and learn from others. Join our working groups and tap into a wealth of shared knowledge! 🤝🌐 Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium

13

🚨 **New CPPA Advisory on Dark Patterns: A Step Toward Transparency** 🚨 The California Privacy Protection Agency (CPPA) has issued an important new advisory on dark patterns, which are user interfaces designed to confuse or mislead consumers about their privacy choices. In the digital age, transparency and user-friendly design aren't just best practices—they're legal obligations. Under the CCPA, businesses must ensure that consumers can easily exercise their privacy rights without confusion. As Michael Macko, CPPA's Deputy Director, puts it: *“Dark patterns aren’t about intent, they’re about effect.”* This is a crucial reminder that clear, simple, and transparent language must be at the heart of privacy disclosures. When businesses prioritize intuitive user experience design, they not only meet legal requirements, but also foster trust and respect for consumer privacy. The spirit of the CCPA is clear: consumers deserve to make privacy choices without jumping through hoops. Let's ensure we're building digital experiences that empower users, not mislead them. 🔗 Learn more: https://lnkd.in/gTff_KKZ #DataPrivacy #CCPA #DarkPatterns #UserExperience #Transparency #advertising #adtech #martech Qonsent Precise.ai Adam H.

9

"Marriott’s poor security practices led to multiple breaches affecting hundreds of millions of customers,” said Samuel Levine, Director of the FTC’s Bureau of Consumer Protection... Marriott agreed to pay a $52 million penalty to 49 states and the District of Columbia to resolve similar data security allegations, the FTC said The FTC says that Marriott and Starwood DECEIVED CONSUMERS by claiming to have reasonable and appropriate data security. Despite these claims, the companies unfairly failed to deploy reasonable or appropriate security to protect personal information. Specifically, the proposed complaint alleges that Marriott and Starwood failed to: implement appropriate password controls, access controls, firewall controls, or network segmentation; patch outdated software and systems; adequately log and monitor network environments; and deploy adequate multifactor authentication The FTC alleged that security failures by Marriott and Starwood resulted in at least three separate data breaches wherein malicious actors obtained the passport information, payment card numbers, loyalty numbers, dates of birth, email addresses and/or personal information from hundreds of millions of consumers, according to the proposed complaint The three large data breaches, which took place from 2014 to 2020, affected more than 344 million customers worldwide, the FTC said Let's not forget that much of the problem arose from Marriott's failure to conduct proper due diligence during the 2015/16 Starwood merger negotiations. This created other serious, still unresolved, issues "As indicated in the agreements with the FTC and the state Attorneys General, Marriott makes no admission of liability with respect to the underlying allegations," the statement said. How absolutely pathetic! John Shepherd (Marriott victim and hunger striker) Anthony Capuano David Marriott Rena Reiss #marriott #marriottinternational #marriottbonvoy #corruption #hotelindustry #risk

3

Secure by design. Assume breach. Shift right. TDIR. Threat-informed defense. Anti-fragility. ...I'm liking the trends in defensive thinking that I'm seeing at the moment, fundamental truths of information entropy and the defenders dilemma starting to appear in forward planning. In many ways this harks all the way back to to v1.0 of antivirus, which taught us the fragility of deny-lists, and the resilience of allow-lists. The speed of technology combined with the speed of adversarial innovation necessitates flipping the script.

66

17 Comments

Aave hacked via periphery contract — $56K stolen from ‘tip jar’ Quote "The affected periphery contract, ParaSwapRepayAdapter, isn’t part of the core Aave protocol and appears not to have been audited." The new version of CCSS will ensure this does not happen. All smart contracts must be audited before use by stakeholders. There are currently three new CCSS requirements for smart contract audits under review addressing the main threat vectors. #DigitalAssetsFramework #DigitalAssets #VirtualAssets #CryptoCustody #CryptoCompliance #Crypto #CryptoCurrency #ccss #ccssa #informationsecurity #digitalpayments #cryptosecurity #informationsecurity #risk https://lnkd.in/gtt-TG8p

4

A new AD is available for public comments: 3946: NIST SP 800-171 Rev. 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations To post comments, create a FREE account and add comments in the box with the red balloon https://hubs.la/Q02J94Vh0 #unifiedcompliance #cybersecurity #authoritydocuments #riskmanagement

3

It has been 8 years since one of the biggest financial leakes known as "Panama Papers". Even thought that most of the leak data breach occurred via some WordPress plugin leaks and Drupal bugs, the concern is that still there are many companies who relies on their important data to such platforms. #drupal #wordpress #panamapapers #hackable #databreach #dataleak #emailhack

13

The U.S. Department of Defense has an agency with over 75 identity products. 75!!! Just identity! Unbelievable... ...unless you've spent time working in large enterprises. Stuff like this happens all the time. There's a great insight here about what "consolidation" means to buyers. More often than you'd expect, vendor consolidation is just about picking one to standardize on and getting rid of the duplicates. That's it. It's not always about buying multiple products from the same platform to consolidate vendors across product categories. Nope. Just get everyone in my company to use the same thing. That's a lot harder (and a lot more impactful) than it sounds!

34

6 Comments

Zero Trust, SMB and National Security. INTEL CTO Exclusive. Steve Orrin, Federal CTO for Intel, discusses secrets inside zero trust and the latest cyber security concerns. New episode. Available everywhere you get podcasts and on YouTube.

11

1 Comment

How to Protect Your Online Privacy and Stop Stalkers: A Non-Technical Guide Discover effective strategies to safeguard your online presence and prevent stalking. Join us as we explore ways to back up important data, create a new profile, and unlink personal information to stop your ex from constantly monitoring you. #OnlinePrivacy #StopStalkers #ProtectYourself #DigitalSafety #CyberSecurity #StalkingPrevention #DataBackup #CreateNewProfile #PersonalInformationProtection #OnlineSafetyTips

2

Chromium issues a quality ultimatum. In the most recent CA/Browser Forum face-to-face meeting, the Google Chrome root program gave a presentation clearly defining its expectations for quality of incident reporting from CAs with an eye to where many CAs have been failing. Jason Soroko and I relate Chromium's statements and their significance. #pki #security #ssl #cabf https://lnkd.in/ghYPCshs

19

1 Comment

Built to quickly and effectively close vulnerability exposures in a unified solution, Tenable Patch Management has entered the chat: http://ow.ly/OZOM105QJIi

10

You probably heard about BeyondTrust acquiring Entitle for ~$150 million. Here's the part you may not have heard: Co-founder Ron Nissim called his shot about IGA converging with PAM just over a year ago. I had the opportunity to interview Ron last year right before Entitle came out of stealth. One of the topics we talked about was the convergence of IGA and PAM use cases. At the time, he had a theory: "I have a theory that IGA and PAM are converging in the cloud. What's essentially been happening to us is that we've been solving a lot of [PAM] use cases. We can provide a lot of the things that customers need from PAM, like just-in-time, temporary access management." He may not have fully realized it then, but his theory was totally right. This early insight ended up being one of the main strategic drivers for BeyondTrust's acquisition of Entitle. Congratulations to the Entitle team! ___ Thanks again to Elizabeth Safran and Dean Pe’er for making this interview happen. The full discussion from February 2023 is available on my website if you want to revisit Entitle's journey from launch to acquisition.

110

17 Comments

Snowflake's data breach is escalating 🥵 Hackers exploited the lack of multi-factor authentication(MFA)/2FA, stale passwords, and open network access via Infostealer malware. Surprising that basic security controls were absent 😳 If you hold customer data: 💥 enforce MFA across all systems 💥 implement regular password changes 💥 maintain strict network access lists Investing in your company's security posture is critical. Such threats will only increase in the future. https://lnkd.in/e8hRQabU #cybersecurity #cloudsecurity #datasecurity #identity #IAM #MFA #databreach #securitybreach #snowflakebreach #password #startups

21