Endpoint/Device Security

This month's news briefs include bits on Android, spammers, breach penalties, crime networks, hacktivism and more.

January is a good time to plan. It's the start of a new year and those things that seemed so far away in December are suddenly right around the corner.

There's no denying that CSOs will have to deal with bring-your-own-device sooner or later, but ultimately it will lead to an enhanced workforce.

The ESPN ScoreCenter app is vulnerable to cross-site scripting (XSS) and also could allow an attacker to easily access usernames and passwords when users set up accounts.

I encountered something on a penetration test today that I thought was kinda neat. I’m sure that others have encountered this before, but it was the first time I stumbled upon it and thought that this might be a good place to share the experience and keep notes for future use. The scenario goes like […]

This time, an employee for a Medicaid contractor lost an unencrypted USB drive containing personal data.

The personal information of patients at three health systems in Virginia, New Jersey and Michigan was exposed.