Latest news
SANS Webcast - "Legal Liability for Information Security"
SANS brings another complimentary webcast on Wednesday, April 23rd at 1pm EST (1800 UTC) entitled Legal Liability for Information Security: Ask the Experts.
For years, security professionals have claimed that "one day people will be held liable for weak security." That day may have arrived, with class action lawsuits, and HIPAA, and California's new disclosure law and more.
On Wednesday, April 23, three of the nation's top experts on civil liability for cyber crime will be online to provide a brief overview of important cases and trends and to answer your questions:
- Marc J. Zwillinger, Chair of the Information Security & Anti-Piracy Practice Group at Sonnenschein Nath and Rosenthal
- Gregory P. Schaffer, Director of Cybercrime Prevention & Response for PricewaterhouseCoopers
- Orin Kerr, Professor of Law at George Washington University
The experts will first provide an overview of new developments that are reshaping the legal landscape in the area of cyber liability. Then you can ask questions on the topics they discussed or any others that you feel are related. In addition, Hal Pomeranz of the Center for Internet Security will give you an update on the newest Gold Standards for safe configuration agreed to by the US government and industrial leaders, and the legal experts will discuss their potential applicability in limiting liability. As well as Charles Woods, Independent Information Security Consultant & Researcher, InfoSecurity Infrastructure, Inc. will be discussing Clarifying Responsibility For Information Security.
[ Read more ]
Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







