Data Security & Privacy

The importance of security, data encryption for cloud

As more companies migrate to the cloud, they need to also invest in cybersecurity for their cloud computing, such as through better encryption and authentication tools. Continue Reading

By

• Balaji Karumanchi, Guest Contributor

Microsoft unveils new DLP, 'Double Key Encryption' offerings

Microsoft revealed new security products and features this week, including an Endpoint Data Loss Prevention product as well as "Double Key Encryption" for Microsoft 365. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Citrix data exposed in third-party breach

Citrix CISO Fermin Serna said a third-party organization is investigating a data breach after some of the vendor's customer data ended up on a dark web marketplace. Continue Reading

By

• Arielle Waldman, Features Writer, Dark Reading

Data theft in ransomware attacks may change disclosure game

Many ransomware attacks aren't publicly disclosed. But as ransomware gangs continue to steal, encrypt and threaten to publicly release data, that may be changing. Continue Reading

By

• Arielle Waldman, Features Writer, Dark Reading

5 PCI DSS best practices to improve compliance

Increased rates of PCI noncompliance are worth examining, as are PCI DSS best practices and tips for small and medium-sized companies. Read more in-depth compliance coverage here. Continue Reading

By

• Katie Donegan, Social Media Manager

Privacy-preserving machine learning assuages infosec fears

Implementing privacy-preserving machine learning controls, such as federated learning and homomorphic encryption, can address top cloud security and privacy concerns. Learn how. Continue Reading

By

• Dave Shackleford, Voodoo Security

Risk & Repeat: When will mobile voting be ready?

This week's Risk & Repeat podcast examines the rise of mobile voting apps and how security experts have expressed concerns about the risks deploying the technology for elections. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

GitHub security features tackle data exposures, vulnerabilities

In in effort to curb accidental data exposures in repositories, GitHub unveiled a new 'secret' scanning tool that examines public and private code repositories for sensitive data. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How data loss prevention strategies benefit from UBA

Data loss prevention strategies require unique insight into user activity. Can user behavior analytics capabilities benefit threat management and breach detection? Continue Reading

By

• Kevin Tolly, The Tolly Group

Risk & Repeat: Zoom security comes under fire

This week's Risk & Repeat podcast looks at several security issues Zoom faced over the last week, which led to questions about the company's privacy and security practices. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

FTC calls out VoIP providers over coronavirus robocalls

The U.S. Federal Trade Commission warned nine voice over IP companies that 'assisting and facilitating' illegal robocalls related to COVID-19 is against the law. Continue Reading

By

• Arielle Waldman, Features Writer, Dark Reading

Will nonprofit's evolution of zero trust secure consumer data?

An Australian nonprofit aims to deliver an improved security protocol through what it calls a 'true zero-trust custody layer.' Will the protocol improve consumer data protection? Continue Reading

By

• Mary K. Pratt

Canon breach exposes General Electric employee data

Canon Business Process Services was breached last month, according to an announcement by General Electric, which used Canon for employee document processing. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

How privacy compliance rules will affect IT security

As companies scramble to comply with consumer data privacy compliance mandates, like GDPR, CCPA and others on the horizon, IT security will shoulder much of the process burden. Continue Reading

By

• Ben Cole, Executive Editor

Analyzing the top 2019 data breach disclosures: Hindsight in 2020

Make 2020 the year your company keep its resolution to avoid a data breach. Experts offer lessons learned from the top 2019 data breaches to help stay secure in the year ahead. Continue Reading

By

• Katie Donegan, Social Media Manager
• Sharon Shea, Executive Editor

The future of facial recognition after the Clearview AI data breach

The company that controversially scrapes data from social media sites for law enforcement clients announced a data breach. What does it mean for the future of facial recognition? Continue Reading

By

• Kjell Carlsson

Updating the data discovery process in the age of CCPA

Privacy regulations are changing the enterprise data discovery process. Now, automation is key for fulfilling data discovery mandates, including those for CCPA and GDPR. Continue Reading

By

• Michael Cobb

Privacy controls to meet CCPA compliance requirements

Existing risk management programs are a solid foundation for CCPA compliance requirements. Learn the privacy controls needed to remain CCPA-compliant and improve IT security. Continue Reading

By

• Anne Kimbol

Who wins the security vs. privacy debate in the age of AI?

When trying to maintain balance between security and privacy in an AI-enabled world, who decides which side should tip and when? So continues the security vs. privacy debate. Continue Reading

By

• Ashwin Krishnan, StandOutin90Sec

Benefits of cloud data discovery tools and services multiply

With multi-cloud and privacy regulations becoming the new normal, infosec teams need data discovery tools and services to keep up. Learn more about available cloud options. Continue Reading

By

• Dave Shackleford, Voodoo Security

How to implement a holistic approach to user data privacy

IoT devices flood the market with promises to make daily life more convenient. Learn how to embrace user consent to benefit your organization and enhance user data privacy. Continue Reading

By

• Katie Donegan, Social Media Manager

Protect against evolving data security threats

As data security threats evolve, knowing how to protect your data is more important than ever. Learn about the latest security threats and how to ward them off. Continue Reading

By

• Kevin Tolly, The Tolly Group

AWS leak exposes passwords, private keys on GitHub

UpGuard discovered a public GitHub repository that contained sensitive AWS customer data, including passwords, authentication tokens and private encryption keys. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

2019 data breach disclosures: 10 more of the biggest

Here is a list of 10 of the largest data breaches (mostly) from the second half of 2019, including DoorDash, T-Mobile, Capital One and more. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Improve data security in the modern enterprise

From growing attack surfaces to new regulations, these data security considerations must be on every company's radar. Continue Reading

By

• Ashwin Krishnan, StandOutin90Sec

Lyft's open source asset tracking tool simplifies security

Security teams need information and context about data in order to keep it safe. Learn how Cartography, Lyft's open source asset tracking tool, creates highly comprehensive maps. Continue Reading

By

• Ed Moyle, SecurityCurve

HIPAA compliance checklist: The key to staying compliant in 2020

Putting together a HIPAA compliance program can be fraught with difficulty. Review best practices and a HIPAA compliance checklist to avoid common pitfalls and pass an audit. Continue Reading

By

• Reda Chouffani, Biz Technology Solutions
• Richard Mackey

5 steps to a secure cloud control plane

A locked-down cloud control plane is integral to maintaining cloud security, especially in multi-cloud environments. Here are five steps to a secure cloud control plane. Continue Reading

By

• Dave Shackleford, Voodoo Security

BigID: New privacy regulations have ended 'the data party'

New privacy laws are changing data management practices in the enterprise. BigID co-founder Nimrod Vax discusses the importance of being 'data native' in the era of the CCPA. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Clumio eyes security, BaaS expansion with VC funding

Clumio CTO Chad Kinney and CSO Glenn Mulvaney discuss their company's roadmap and how Clumio addresses ransomware threats in a way that's different from other backup providers. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Use a data privacy framework to keep your information secure

Find out how a data privacy framework gives companies the tools they need to ensure their information is protected -- from both internal and external threats. Continue Reading

By

• Kevin Tolly, The Tolly Group

NSS Labs drops antitrust suit against AMTSO, Symantec and ESET

NSS Labs dropped its antitrust suit against the Anti-Malware Testing Standards Organization, Symantec and ESET, ending a contentious legal battle in the endpoint security market. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

InfoTrax settles FTC complaint, will implement infosec program

InfoTrax settled an FTC complaint over an extensive data breach that lasted two years. Now, it can no longer collect any personal data until it implements its own infosec program. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Microsoft to apply CCPA protections to all US customers

Microsoft said it will apply the California Consumer Privacy Act across the nation and extend the law's data privacy protections to customers in all fifty states. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading
• Rob Wright, Senior News Director, Dark Reading

How and why data breach lawsuits are settled

For all of the talk about data breach class action lawsuits, virtually none of them reach a courtroom. Here's why and how data breach lawsuits almost always end in settlements. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

Assessing the value of personal data for class action lawsuits

Determining the value of consumers' personal data exposed in a breach can be a challenge. Security and legal experts discuss what factors are involved in the equation. Continue Reading

By

• Alexander Culafi, Senior News Writer, Dark Reading

How the future of data privacy regulation is spurring change

Some companies have taken steps to improve data governance in anticipation of data privacy rules. Experts discuss the challenges of compliance in a shifting regulatory landscape. Continue Reading

By

• Mary K. Pratt

5 cloud storage privacy questions to ask potential providers

Data confidentiality in cloud computing is a major enterprise concern, yet providers are often lacking in their details. Here are the questions to ask before adopting a service. Continue Reading

By

• Kevin Tolly, The Tolly Group

The difference between AES and DES encryption

Choosing to encrypt confidential data with AES or DES encryption is an important cybersecurity matter. Learn about the important differences between AES and DES. Continue Reading

By

• Ben Cole, Executive Editor
• Mike Chapple, University of Notre Dame

Imperva breach update puts blame on exposed AWS API keys

Imperva CTO Kunal Anand posted updated information regarding the recent breach affecting Cloud WAF customers and admitted poor security controls led to the compromise. Continue Reading

By

• Michael Heller, TechTarget

How to beef up S3 bucket security to prevent a breach

Security teams have plenty of tools at their disposal to help their organizations achieve and maintain S3 bucket security. Learn about the threats and best practices to stay safe. Continue Reading

By

• Dave Shackleford, Voodoo Security

How can DNS privacy issues be addressed?

Learn two techniques for improving end-user DNS privacy protection that prevent DNS from exposing information about websites users visit and the people users communicate with. Continue Reading

By

• Fernando Gont, SI6 Networks

How PCI DSS compliance milestones can be a GDPR measuring stick

Constantly evolving regulations can cause confusion for security officers, but sometimes, there is process overlap. Here's how achieving compliance with PCI DSS can help meet GDPR mandates. Continue Reading

By

• Daniel Allen, N2 Cyber Security Consultants

New York files lawsuit over Dunkin' breach response

The New York attorney general filed a lawsuit against Dunkin' Brands regarding attacks dating back to 2015 and alleges the company failed to respond or notify victims properly. Continue Reading

By

• Michael Heller, TechTarget

FBI charges former AWS engineer in Capital One breach

The FBI arrested a former AWS engineer who allegedly stole data for more than 100 million Capital One customers and credit card applications, thanks to a misconfigured firewall. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

2019 data breach disclosures: 10 of the biggest -- so far

Enterprises have disclosed a number of significant data breaches in the first half of 2019. Here's a look at some of the biggest and most notable breaches so far this year. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Untangling GDPR fines with Synopsys' Tim Mackey

Tim Mackey of Synopsys tries to clear up some of the mystery around how GDPR regulators determine the fines levied on companies for major data breaches or privacy violations. Continue Reading

By

• Michael Heller, TechTarget

Immunity selling new BlueKeep exploit, defends decision

Immunity CEO Dave Aitel defended his company's decision to sell a full RCE BlueKeep exploit as part of a pen testing tool, saying the exploit is necessary to demonstrate risk. Continue Reading

By

• Michael Heller, TechTarget

Experts: Facebook fine by FTC should be wake-up call for all

Facebook will reportedly be hit with a $5 billion fine by the FTC following an investigation into multiple privacy issues, and experts said other enterprises should take note. Continue Reading

By

• Michael Heller, TechTarget

Zoom vulnerability reveals privacy issues for users

Companies and users around the world were impacted by a Zoom conferencing software flaw that could allow threat actors to forcibly join a video call without interaction. Continue Reading

By

• Michael Heller, TechTarget

GandCrab decryption tool helps victims recover data

The No More Ransom initiative released one last GandCrab decryption tool to help victims recover data after the ransomware was allegedly shut down by its authors. Continue Reading

By

• Michael Heller, TechTarget

Why larger GDPR fines could be on the horizon

There haven't been many fines under the General Data Protection Regulation since the EU data privacy law went into effect a year ago. But experts warn that will likely change. Continue Reading

By

• Mekhala Roy

A recent history of Facebook security and privacy issues

Since the start of 2018, Facebook has had a seemingly constant cascade of security issues and privacy scandals. Here's a look back at the social media giant's most serious issues. Continue Reading

By

• Michael Heller, TechTarget

How information sharing can reduce cybersecurity vulnerabilities

Cybersecurity vulnerabilities come from multiple fronts for modern businesses, but information sharing about real-world breaches -- good and bad -- provides valuable intelligence. Continue Reading

By

• Ben Cole, Executive Editor

Study: Cybersecurity professionals taking on more data privacy duties

At the SecureWorld Boston conference, ISSA unveils data that shows cybersecurity professionals are taking on more data privacy duties. Experts sound off on what it signifies. Continue Reading

By

• Mekhala Roy

As compliance evolves, it's time to re-address data classification

Compliance rules like GDPR and the CCPA require a fresh look at companies' data classification policy, and particularly how it defines its wide variety of unstructured data. Continue Reading

By

• Mary K. Pratt

Hundreds of millions of Facebook passwords exposed internally

Facebook learned three months ago that hundreds of millions of passwords were stored internally in plaintext, but it didn't disclose the issue or notify users until the news leaked. Continue Reading

By

• Michael Heller, TechTarget

Find out whether secure email really protects user data in transit

Outside of user perceptions, how safe is secure email in terms of protecting users' data in transit? Our expert explains how much the SSL and TLS protocols can protect email. Continue Reading

By

• Kevin Tolly, The Tolly Group

How can I protect my self-encrypting drives?

Dutch researchers discovered flaws in ATA security and TCG Opal affecting self-encrypting drives. What steps can you take to guard data stored on vulnerable solid-state drives? Continue Reading

By

• Judith Myerson

Cryptography techniques must keep pace with threats, experts warn

Cryptographers at RSAC 2019 discussed personal data protection laws and challenges, future threats and the pressure for tech companies to work with law enforcement on decryption. Continue Reading

By

• Bridget Botelho

MongoDB security head addresses database exposures

Davi Ottenheimer, MongoDB's head of product security, discusses his company's efforts to prevent accidental database exposures and why so many misconfigurations occur. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How to comply with the California privacy act

Organizations that handle California consumer data have a year to comply with CCPA. Expert Steven Weil discusses what enterprises need to know about the California privacy law. Continue Reading

By

• Steven Weil, Point B

Google GDPR fine of $57 million sets record

The Google GDPR fine of $57 million marks the first time a major tech company has been penalized under Europe's new privacy regulations. But the fine is less than the maximum allowable penalty. Continue Reading

By

• Michael Heller, TechTarget

How unsecured Firebase databases put critical data at risk

Unsecured Google Firebase databases are similar to misconfigured AWS S3 buckets, but there are key differences. Expert Rob Shapland discusses the risks of unsecured cloud databases. Continue Reading

By

• Rob Shapland

Marriott data breach exposed 5 million unencrypted passport numbers

Marriott's data breach affected fewer customers than the hotel giant originally estimated, but the breach exposed millions of unencrypted passport numbers. Continue Reading

By

• Mekhala Roy

Government data requests rise, as does Apple's compliance

Apple's latest Transparency Report shows government data requests on the rise around the world, as is Apple's compliance in providing the data being requested by law enforcement. Continue Reading

By

• Michael Heller, TechTarget

CCPA compliance begins with data inventory assessment

In this SearchCIO Q&A, multiple experts sound off on major questions businesses have about CCPA compliance ahead of its January 2020 enforcement date. Continue Reading

By

• Kassidy Kelley

NASA data breach included employee Social Security numbers

Limited details leave questions surrounding a possible NASA data breach that could have compromised Social Security numbers for current and former employees. Continue Reading

By

• Michael Heller, TechTarget

Twitter bugs expose user data and direct messages

Two Twitter bugs led to questions about the platform's user privacy and security, while the company said one of the bugs opened the door to possible state-sponsored attacks. Continue Reading

By

• Michael Heller, TechTarget

How Big Star Labs was able to use data collecting apps

The ad-blocking vendor AdGuard found browser extensions and apps from Big Star Labs collecting browser history data. Discover how this was accomplished with Nick Lewis. Continue Reading

By

• Nick Lewis

Marriott Starwood data breach notification de-values customers

The Marriott Starwood data breach exposed half a billion customers' data, but the hospitality giant seems to have learned from recent megabreaches that the standard response to a breach can be the ... Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Second Google+ data exposure leads to earlier service shutdown

Another Google Plus data exposure -- this time potentially affecting more than 52 million users -- will cause the service to be shut down four months earlier than scheduled. Continue Reading

By

• Michael Heller, TechTarget

How the SHA-3 competition declared a winning hash function

NIST tested competing hash functions over a period of five years for the SHA-3 algorithm competition. Learn the details of what they discovered from Judith Myerson. Continue Reading

By

• Judith Myerson

Facebook app permissions skirted rules to gather call logs

New email messages revealed that Facebook app permissions were carefully implemented to avoid alerting users to the fact that the Android app was gathering call log and SMS data. Continue Reading

By

• Michael Heller, TechTarget

What are the security risks of third-party app stores?

Unlike most apps developed in app stores, users can download Fortnite from Epic Games' website. Expert Michael Cobb explains the security risks of third-party app stores. Continue Reading

By

• Michael Cobb

Ponemon study shows data valuation discrepancies in enterprises

A new study from the Ponemon Institute shows enterprises are underestimating the value of their data, including critical and confidential information assets. Continue Reading

By

• Kathleen Richards

How Google's cloud data deletion process can influence security policies

Understanding the process behind Google's cloud data deletion can help influence stronger enterprise security policies. Expert Ed Moyle explains the process and how to use it. Continue Reading

By

• Ed Moyle, SecurityCurve

USPS website flaw exposed data for one year

The U.S. Postal Service inadvertently exposed the data of 60 million users and has only just fixed the underlying website flaw, despite being notified of the issue one year ago. Continue Reading

By

• Michael Heller, TechTarget

Android Ecosystem Security Transparency Report is a wary first step

Reading through Google's first quarterly Android Ecosystem Security Transparency Report feels like a mix of missed opportunities and déjà vu all over again. Much of what is in the new Android ... Continue Reading

By

• Michael Heller, TechTarget

Risk & Repeat: Facebook breach raises regulatory questions

This week's Risk & Repeat podcast discusses new developments regarding Facebook's recent data breach, as well as the social networking giant's response to the incident. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Healthcare.gov breach exposes data on 75,000 people

Malicious actors attacked a back-end insurance system and the resulting Healthcare.gov breach exposed an unknown amount of data on 75,000 people. Continue Reading

By

• Michael Heller, TechTarget

Pentagon data breach exposed travel data for 30,000 individuals

The Department of Defense said a Pentagon data breach exposed travel records for approximately 30,000 military and civilian personnel, but the investigation is still in progress. Continue Reading

By

• Michael Heller, TechTarget

How does Apple's Quick Look endanger user privacy?

Apple's Quick Look feature previews thumbnails that are not encrypted. Learn how this poses a security threat to enterprises from expert Michael Cobb. Continue Reading

By

• Michael Cobb

How entropy sources interact with security and privacy plans

NIST published a draft of its 'Risk Management Framework for Information Systems and Organizations.' Learn what this report entails, as well as how entropy source controls play a key role. Continue Reading

By

• Judith Myerson

Facebook GDPR fate uncertain following data breach

Facebook's GDPR consequences are still up in the air following a data breach, as Irish regulators are waiting on more information before determining if the social network will face a fine. Continue Reading

By

• Michael Heller, TechTarget

Facebook breach affected nearly 50 million accounts

Nearly 50 million accounts were affected in a Facebook breach, but it is still unclear what data attackers may have obtained and who might have been behind the breach. Continue Reading

By

• Michael Heller, TechTarget

UN exposes sensitive data on public Trello boards

News roundup: The U.N. accidentally exposed credentials on public Trello boards. Plus, Uber is set to pay $148 million settlement following its 2016 data breach cover-up, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

CrowdStrike responds to NSS Labs lawsuit over product testing

CrowdStrike and the Anti-Malware Testing Standards Organization responds the allegations made by NSS Labs in a bombshell antitrust suit over product testing practices. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

State Department data breach exposes employee info

A State Department data breach involving the agency's unclassified email system may have been due to a lack of multi-factor authentication, according to one expert. Continue Reading

By

• Michael Heller, TechTarget

What the GAO Report missed about the Equifax data breach

The Government Accountability Office investigated the Equifax data breach, but the GAO's report leaves out several important points about the infamous incident. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Laura Noren advocates data science ethics for employee info

Expert Laura Norén believes companies should be held to standards of data science ethics both when it comes to customer data and also for the data collected about employees. Continue Reading

By

• Michael Heller, TechTarget

Google's 'My Activity' data: Avoiding privacy and compliance risk

Google's Activity Controls create privacy and compliance risks for organizations, as well as a potential gold mine for social engineering hacks. Here's how to avoid those threats. Continue Reading

By

• Daniel Allen, N2 Cyber Security Consultants

Facebook user data: How do malicious apps steal user data?

Malicious apps collected Facebook user data through Facebook APIs. Expert Michael Cobb explains how social networking platforms can monitor third-party apps' access to data. Continue Reading

By

• Michael Cobb

Meltdown and Spectre disclosure suffered "extraordinary miscommunication"

During a panel discussion at Black Hat 2018 on Meltdown and Spectre, Google explained how miscommunication left the company's incident response out of the early disclosure process. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Security data scientists on how to make your data useful

Data science and machine learning can reveal valuable security information that would otherwise remain hidden in large data sets. Security data scientists can be hard to find and may be out of reach for most organizations. Even without these skill sets, companies can make strides to take advantage of advanced analytics to improve their security posture.

In August 2017, Google data scientists revealed that they had worked in conjunction with academic researchers from Princeton and other universities to create a model for tracking ransomware payments on the bitcoin blockchain. The researchers tallied roughly 20,000 payments worth $16 million.

"Very large organizations can often build their own data storage and data analysis solutions, because they will often have security data scientists on staff to write code and identify patterns," said Joshua Saxe, chief data scientist at security software firm Sophos. "The vast majority of organizations do not have the resources to do that."

Data analytics and machine learning can help companies quickly reduce the amount of data they need to parse in order to highlight potential threats. Too much data noise can quickly overwhelm human analysts, however. In this issue of Information Security magazine, we talk to CISOs and security data scientists about effective use of data analytics, machine learning and their strategies for managing this information to advance threat research.

 Continue Reading

Fannie Mae CISO calls for more data on security incidents

Chris Porter's years as a lead analyst and author of Verizon's Data Breach Investigations Report helped prepare him for the chief of security role at the primary housing lender. Continue Reading

By

• Alan R. Earls

Overwhelmed by security data? Science to the rescue

Security teams increasingly use large data sets from their networks to find hidden threats. Why companies should embark on their own data science and machine learning initiatives. Continue Reading

By

• Robert Lemos

Why third-party access to data may come at a price

Google and other platform companies dangled not only APIs but access to user data from unwitting customers to attract third-party developers and other partners. Continue Reading

By

• Kathleen Richards

Yale data breach discovered 10 years too late

A Yale University data breach from 2008 was only just discovered, and the school has released details on the compromised information, including Social Security numbers. Continue Reading

By

• Michael Heller, TechTarget

Citrix's Peter Lefkowitz on impact of GDPR privacy requirements

New consumer privacy laws are changing the global privacy landscape. Citrix's Peter Lefkowitz explains how Citrix is approaching GDPR compliance and privacy issues in general. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor