Data Security & Privacy

Three steps to improve data fidelity in enterprises

Ensuring data fidelity has become crucial for enterprises. Expert Char Sample explains how to use dependency modeling to create boundaries and gather contextual data. Continue Reading

By

• Char Sample, ICF International

How Dropbox dropped the ball with anonymized data

Dropbox came under fire for sharing anonymized data with academic researchers after questions emerged about how the data was protected and used. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How to identify and protect high-value data in the enterprise

Protecting data in the enterprise is a crucial but challenging task. Expert Charles Kao shares key steps and strategies to consider to identify and protect high-value data. Continue Reading

By

• Charles Kao, Simply Auri

Cisco's chief privacy officer on the future of data after GDPR

Michelle Dennedy, vice president and chief privacy officer at Cisco, discusses her company's approach to meeting the requirements of the EU's General Data Protection Regulation. Continue Reading

By

• Kathleen Richards

Is the new California privacy law a domestic GDPR?

The difference between data privacy protections afforded to European Union residents and people in the U.S. is more sharply highlighted now that the EU's General Data Protection Regulation has ... Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Risk & Repeat: New concerns about smartphone spying

In this week's Risk & Repeat podcast, SearchSecurity editors discuss research that shows some Android apps record video of users' screens without permission or notifications. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What effect does GDPR have on the WHOIS database?

With GDPR in effect, ICANN proposed redacting information from the WHOIS database. Expert Michael Cobb discusses what this could mean for the domain database. Continue Reading

By

• Michael Cobb

Have I Been Pwned integration comes to Firefox and 1Password

With new Have I Been Pwned integration, Firefox and 1Password users will be able to learn if their email addresses have been compromised in any known data breaches. Continue Reading

By

• Michael Heller, TechTarget

EFF's STARTTLS Everywhere aims to protect email in transit

The EFF's new STARTTLS Everywhere initiative aims to secure email as it transits the internet between mail servers to prevent mass surveillance, as well as email spoofing. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

No more selling mobile location data, promise carriers

Sen. Ron Wyden got all major U.S. wireless carriers to promise not to sell mobile location data to third parties, but experts question the basic security practices in place. Continue Reading

By

• Michael Heller, TechTarget

Q&A: Why data security controls are a hard problem to solve

Feeling less friendly after Facebook? "There is a great deal of power in being able to combine data-sources," says Jay Jacobs, security data scientist. Continue Reading

By

• Marcus J. Ranum

It's GDPR Day. Let the privacy regulation games begin!

GDPR Day -- May 25, 2018 -- has passed and enforcement is now accepting complaints against companies violating the terms of the EU's new privacy regulation. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Reviewing cloud data protection measures: CCSP Domain 2

This practice quiz will assess your understanding of key concepts in Domain 2 of the CCSP exam. This part of the test covers cloud data security strategies, technologies and more. Continue Reading

By

• (ISC) 2

How did Strava's Global Heatmap disclose sensitive U.S. info?

Fitness tracking app Strava released its Global Heatmap that unknowingly disclosed routes of U.S. soldiers. Discover how this happened and how geolocation data can be blocked. Continue Reading

By

• Judith Myerson

Android P security improves authentication trust and data privacy

Android P security features, which were previewed at Google I/O, include notable improvements for data privacy and encryption and preventing malicious apps from spying on users. Continue Reading

By

• Michael Heller, TechTarget

Google I/O's security and privacy focus missing on day one

It's fairly easy to find stories sparking security and privacy concerns regarding a Google product or service — Search, Chrome, Android, AdSense and more — but if you watched or attended Google ... Continue Reading

By

• Michael Heller, TechTarget

Twitter bug exposes passwords of all 336 million users

On none other than World Password Day, a Twitter bug was announced that led to the passwords of all 336 million users being stored in plaintext in an internal log. Continue Reading

By

• Michael Heller, TechTarget

What is included in the mPOS security standard from PCI SSC?

The PCI SSC developed an mPOS security standard to improve mobile payment and PIN systems. Expert Michael Cobb looks at what the requirements are and how they help. Continue Reading

By

• Michael Cobb

GDPR deadline: Keep calm and GDPR on

With the GDPR deadline looming, companies may still be scrambling to do "something" about it, but with less than 30 days to go the best move for many may be to wait and watch, and perhaps just ... Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

IBM's Cindy Compert cooks up a batch of GDPR preparation

GDPR preparation, with practical tips and recipes, was on the menu at RSAC 2018, as IBM CTO Cindy Compert offered practical advice for compliance with the EU privacy regulation. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Risk & Repeat: Breaking down the Verizon DBIR 2018

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the '2018 Verizon Data Breach Investigations Report' and its findings about ransomware, phishing and more. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Cost of data privacy breach may not be enough

While the European Union is taking major steps to protect residents' data privacy, little has happened in the United States, even after Equifax and Facebook. Continue Reading

By

• Kathleen Richards

Privacy protections are needed for government overreach, too

Following the Facebook-Cambridge Analytica controversy, major tech companies pledged to defend users from corporate data misuse, but they're ignoring a more serious privacy threat. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Apple GDPR privacy protection will float everyone's privacy boat

With its embrace of new tools for protecting consumer privacy, Apple GDPR privacy protection will be available to all users as the EU's new privacy protection legislation is set to start ... Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

New Facebook privacy features and bug bounty aim to repair damage

News roundup: New Facebook privacy features and updates to the company's bug bounty program are being rolled out. Plus, Drupalgeddon 2.0 threatens over 1 million sites, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

CLOUD Act stirs tension between privacy advocates and big tech

Privacy advocates criticize Congress for passing the CLOUD Act as part of the omnibus spending bill, while big tech companies have expressed support for the controversial legislation. Continue Reading

By

• Michael Heller, TechTarget

Watson's Law: IBM preaches data stewardship as A.I. advances

At IBM's Think conference, executives discussed the importance of protecting and managing data as artificial intelligence offerings like Watson grow and touch more information. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

When does the clock start for GDPR data breach notification?

As new GDPR data breach notification rules go into effect, companies must be ready to move faster than before. Mimecast's Marc French explains what will change and how to cope. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

GDPR compliance requirements and how to best fulfill them

Learn the details of the European Union's new regulations for data security and what your company needs to do now to meet them and avoid expensive penalties. Continue Reading

What will GDPR data portability mean for enterprises?

Enforcement of the EU's Global Data Protection Regulation is coming soon. Mimecast's Marc French discusses the big questions about GDPR data portability for enterprises. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Following Equifax data breach, executive charged with insider trading

News roundup: A CIO has been charged with insider trading after the Equifax data breach. Plus, Trump blocked Broadcom's acquisition of Qualcomm, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

AIR-Jumper: How can security camera lights transmit data?

Researchers developed aIR-Jumper, an exploit that leverages lights within security cameras to extract data. Learn how this attack works and how to prevent it with expert Nick Lewis. Continue Reading

By

• Nick Lewis

How can users deal with app trackers that collect customer data?

App trackers were found in hundreds of Google Play apps. Expert Michael Cobb explains the threat they pose and how GDPR has the potential to reduce the risk. Continue Reading

By

• Michael Cobb

How hard will the GDPR right to be forgotten be to get right?

Under GDPR, the right to be forgotten is granted to all EU data subjects. Mimecast's Marc French explains why enterprises will need to be careful about how they manage the process. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Uber breach: How did a private GitHub repository fail Uber?

The recent Uber breach calls into question the use of code repositories. Expert Matt Pascucci explains how the breach of GitHub and Amazon Web Services occurred. Continue Reading

By

• Matthew Pascucci

GDPR data breach notification is just one piece of EU privacy puzzle

With the EU's General Data Protection Regulation looming, Qualys' Darron Gibbard discusses GDPR data breach notifications, and more with the EU's new privacy law. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Equifax breach worsens, additional consumer data exposed

The Equifax breach compromised even more consumer data, including tax identification numbers, than originally reported. But the credit rating agency didn't disclose the update. Continue Reading

By

• Madelyn Bacon, TechTarget

GDPR breach notification: Time to focus on the requirements

Some large U.S. companies have been working behind the scenes on GDPR requirements for more than a year, but there's strong evidence that many have not been as diligent. Continue Reading

By

• Steve Zurier, ZFeatures

Data protection compliance costs less than noncompliance

Smaller companies -- with fewer than 5,000 employees -- in particular may be hit hard by GDPR requirements and other data compliance hurdles. A new report does the math. Continue Reading

By

• Kathleen Richards

Information security certification guide: Advanced level

Part three of this information security certification guide looks at vendor-neutral advanced security certifications for more experienced IT professionals. Continue Reading

By

• Ed Tittel

Advanced Protection Program: How has Google improved security?

Google added a layer to its account security system with Advanced Protection Program. Matt Pascucci explains how individuals can better defend themselves from malicious actors. Continue Reading

By

• Matthew Pascucci

A DHS data breach exposed PII of over 250,000 people

News roundup: A DHS data breach exposed PII of 250,000 federal employees, as well as investigative data from 2002 to 2014. Plus, a new bill aims to nix paperless voting, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

After 2017, data breach fatigue should be a thing of the past

Data breach fatigue should be put on hold after the Equifax data breach and Uber hack taught us painful lessons about enterprise security shortcomings. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What is emotional data and what are the related privacy risks?

SearchSecurity talks with UC Berkeley professor Steven Weber about the concept of emotional data, where it comes from and how it can potentially be used -- and abused. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

A look at the key GDPR requirements and how to meet them

Meeting the most important GDPR requirements is a great first step to compliance with the new regulation. Expert Steve Weil outlines how to get started on GDPR compliance. Continue Reading

By

• Steven Weil, Point B

Half of business leaders admit to hiding data breach information

News roundup: Data breach information is kept from customers 50% of the time, according to a report. Plus, the FBI director continues to preach against encryption, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

NSA data leak exposed Army INSCOM project information

Yet another publicly accessible cloud storage bucket exposed government data; this time it was an NSA data leak which included information on an Army intelligence project. Continue Reading

By

• Michael Heller, TechTarget

Data breach litigation: What enterprises should know

Data breach litigation can be highly detrimental to an organization that just suffered a major security incident. Find out what kinds of legal action enterprises could face in the event of a data breach. Continue Reading

By

• Christopher Hart, Foley Hoag LLP

Uber data breach raises unsettling questions for infosec

The Uber data breach episode is another black eye for the ride sharing company, but the cover up raises troubling implications for the infosec community. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Risk & Repeat: App store security measures falling short

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the recent discovery of a fake WhatsApp app in the Google Play Store and what that means for app store security. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Following Equifax breach, CEO doesn't know if data is encrypted

News roundup: Following the massive Equifax breach, the CEO said he doesn't know if customer data is encrypted or not. Plus, flaws were found in IEEE's P1735 standard, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Monitoring employee communications: What do EU privacy laws say?

The European Court of Human Rights recently placed strict regulations on monitoring employee communications. Matt Pascucci compares EU privacy laws to the U.S.'s standards. Continue Reading

By

• Matthew Pascucci

Is "responsible encryption" the new answer to "going dark"?

"Three may keep a Secret, if two of them are dead." So wrote Benjamin Franklin, in Poor Richard's Almanack, in 1735. Franklin knew a thing or two about secrets, as well as about cryptography, given ... Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Microsoft mum on 2013 database breach of bug tracking system

News roundup: Former employees reveal a 2013 database breach exposed Microsoft's bug tracking system, DHS sets new rules for federal agencies on web, email security, and more. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

How app libraries share user data, even without permission

A new study shows how app libraries can share data among apps, even without permission. Michael Cobb explains how library collusion works and what users can do about it. Continue Reading

By

• Michael Cobb

Risk & Repeat: Scope of Equifax, Yahoo breaches expands

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the expanding scope of the Equifax and Yahoo breaches and the long-term effects of these major security incidents. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

No customer data leaks? Companies look down the rabbit hole

When Yahoo finally disclosed a massive 2014 data breach to up to five hundred million affected account holders in September 2016, some already had legal representation. Continue Reading

By

• Kathleen Richards

Growing data protection risks and how to manage them

Companies today collect more data from more sources than ever before. Often the data is distributed across on-premises environments, cloud systems and third-party networks. The network perimeter behind which most enterprise data once resided is gone, and users now have the ability to access data from anywhere and at any time via laptops, smartphones and other mobile devices. Managing these data protection risks creates unique challenges for CISOs and their security teams.

"Security must be able to protect the data wherever it is being used, viewed or saved," said Christopher Pierson, executive vice president, general counsel and CSO at Viewpost, an electronic payments and invoicing service, based in Maitland, Fla.

For organizations covered by regulations such as PCI DSS, HIPAA, the Gramm-Leach-Bliley Act and, soon, the European Union General Data Protection Regulation, the trends pose enormous compliance headaches. The distribution of data and the many ways in which it can be accessed has made handling data protection risks especially challenging.

At the same time, many companies have network-level security models that prevent their security teams from transitioning to data-level controls. In this issue of Information Security magazine, we look at data-centric security models and better ways to manage data protection risks.

 Continue Reading

Government data requests on the rise for Apple and Google

One expert is concerned about the large increase of government data requests received by Apple and the effects this surveillance activity has on user privacy. Continue Reading

By

• Michael Heller, TechTarget

Deloitte hack compromised sensitive emails, client data

News roundup: During the Deloitte hack, attackers had access to client data and internal email servers. Plus, the U.S. asks China not to enforce its Cybersecurity Law, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

What a data protection officer can offer enterprises subject to GDPR

The EU GDPR requires that organizations appoint a data protection officer, but is that really necessary for security? Expert Francoise Gilbert examines the compliance requirement. Continue Reading

By

• Francoise Gilbert, Greenberg Traurig

PINLogger: How does this exploit steal PINs?

The proof-of-concept PINLogger attack exploits mobile device sensors to steal PINs. Nick Lewis explains how the attack works and offers advice on how to stop it. Continue Reading

By

• Nick Lewis

Undocumented Word feature could lead to system information theft

An undocumented Word feature found by Kaspersky Lab could lead to system information theft and affects users on both PCs and mobile devices. Continue Reading

By

• Michael Heller, TechTarget

Symantec Data Loss Prevention: Product overview

Expert Bill Hayes checks out the Symantec Data Loss Prevention suite, featuring an architecture consisting of content-aware detection servers, endpoint agents and unified management. Continue Reading

By

• Bill Hayes

SHA-1 hashes recovered for 320M breached passwords

Security researchers once again proved how easy it can be to recover SHA-1 hashes by cracking the hashes on nearly 320 million passwords related to data breaches. Continue Reading

By

• Michael Heller, TechTarget

Enterprise compliance with PCI DSS is up, says Verizon

News roundup: More than half of enterprises are in compliance with PCI DSS, according to a Verizon report. Plus, Turla is on the attack again with a new campaign, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

CISSP Domain 2 quiz: Data security control, asset protection

Domain 2 of the CISSP exam, known as asset security, covers data security control, classification, ownership and more. Test your knowledge with this 10-question practice quiz. Continue Reading

By

• (ISC) 2

Mobile data theft a risk from shared app libraries

Researchers claim malicious actors could commit mobile data theft by using shared third-party libraries and abusing elevated privileges that the permissions granted. Continue Reading

By

• Michael Heller, TechTarget

Why data fidelity is crucial for enterprise cybersecurity

Cybersecurity teams can't be effective if they don't trust their data. Expert Char Sample explains the importance of data fidelity and the threat of cognitive hacking. Continue Reading

By

• Char Sample, ICF International

Protecting Patient Information

In this excerpt from chapter two of Protecting Patient Information, author Paul Cerrato discusses the consequences of data breaches in healthcare. Continue Reading

By

• Syngress and SearchSecurity

Mobile Security and Privacy

In this excerpt from chapter 11 of Mobile Security and Privacy, authors Raymond Choo and Man Ho Au discuss privacy and anonymity in terms of mathematics. Continue Reading

By

• Syngress and SearchSecurity

What data loss prevention systems and tactics can do now

Setting up systems to preventing data loss is a must for companies of all sizes. Learn the basics of and what's new in data loss prevention and how to keep your DLP system humming. Continue Reading

Tools to transfer large files: How to find and buy the best

Need to transfer files within headquarters or between branches? Managed file transfer tools now offer some interesting new features. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

As privacy requirements evolve, CISSPs must stay informed

Just as technology constantly changes, so too do the laws and regulations that govern data privacy. CISSPs must remain aware of their organization's individual requirements. Continue Reading

By

• (ISC) 2

Google tackles Android app privacy with machine learning

Google will use machine learning and automated peer review scans to improve Android app privacy and limit app permissions overreach. Continue Reading

By

• Michael Heller, TechTarget

Risk & Repeat: RNC voter database left open to the public

In this week's Risk & Repeat podcast, SearchSecurity editors discuss how the Republican National Committee's voter database was accidentally exposed in an Amazon S3 bucket. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How intelligence data leaks caused collateral damage for infosec

Alvaka Networks' Kevin McDonald looks at the real-world damage caused by data leaks at the CIA and NSA, which have put dangerous government cyberweapons in the hands of hackers Continue Reading

By

• Kevin McDonald, Alvaka Networks

How does a privacy impact assessment affect enterprise security?

A privacy impact assessment can help enterprises determine where their data is at risk of exposure. Expert Matthew Pascucci explains how and when to conduct these assessments. Continue Reading

By

• Matthew Pascucci

EU GDPR compliance puts focus on data tracking, encryption

The EU's General Data Protection Regulation is less than a year away. Experts explain why data tracking, encryption and other measures are crucial for GDPR compliance. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

What MongoDB security issues are still unresolved?

There are some MongoDB security issues that have yet to be resolved. Expert Matthew Pascucci discusses the risks and how to protect your enterprise from them. Continue Reading

By

• Matthew Pascucci

Target data breach settlement requires security improvements

News roundup: The Target settlement following the 2013 data beach requires the company to adopt a stronger security program. Plus, experts knock the FCC's DDoS claim, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

GDPR compliance help is on the way for Microsoft cloud customers

With GDPR compliance set to be mandatory in one year, Microsoft will help get its cloud customers ready for the new data protection regulation. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Trustwave Data Loss Prevention: Product overview

Expert Bill Hayes examines Trustwave Data Loss Prevention and how the product addresses data at rest, endpoint data in use and network data in transit for enterprises. Continue Reading

By

• Bill Hayes

Q&A: GDPR compliance tips from CSPi's Gary Southwell

With one year left, it's time to prioritize GDPR compliance; Gary Southwell, CSPi's general manager, offers advice for protecting personal data under the EU's new privacy regulation. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Q&A: Time to get GDPR compliant, CSPi's Gary Southwell says

Companies doing business in EU face challenge to get GDPR compliant as enforcement of the strict new General Data Protection Regulation is just one year away. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Cognitive hacking: Understanding the threat of bad data

Bad data can create more than just 'fake news.' Expert Char Sample explains how cognitive hacking and weaponized information can undermine enterprise security. Continue Reading

By

• Char Sample, ICF International

How should companies prepare for EU GDPR compliance?

Companies that don't meet GDPR compliance standards by May 2018 will be fined. Expert Matthew Pascucci looks at how Microsoft is preparing, and what other companies should do to comply with GDPR. Continue Reading

By

• Matthew Pascucci

Verizon DBIR 2017 loses international contributors

Looking at the overall numbers for the contributors to the Verizon Data Breach Investigations Report (DBIR) from the past five years, it would seem like the amount of partners is hitting a plateau, ... Continue Reading

By

• Michael Heller, TechTarget

AWS promises to be GDPR compliant by May 2018 deadline

Amazon promises all AWS cloud services will be GDPR compliant before enforcement of the new EU data privacy regulation starts in 2018, offers customers assistance. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

1024-bit encryption keys: How 'trapdoored' primes have caused insecurity

Encryption algorithms using 1024-bit keys are no longer secure, due to the emergence of 'trapdoored' primes. Expert Michael Cobb explains how the encryption backdoor works. Continue Reading

By

• Michael Cobb

Is encryption one of the required HIPAA implementation specifications?

When it comes to encryption, the HIPAA implementation specifications are complicated. Expert Joseph Granneman explains whether it's required or addressable. Continue Reading

By

• Joseph Granneman, Illumination.io

Securing big data is a growing infosec responsibility

Learn the ins and out of securing big data, from the key risks facing big data environments to the skills infosec pros need to master to handle this growing responsibility. Continue Reading

RSA Data Loss Prevention Suite: Product overview

Expert Bill Hayes examines the RSA Data Loss Prevention Suite, which covers data in use, in transit and at rest for corporate networks, mobile devices and cloud services. Continue Reading

By

• Bill Hayes

Responsible vulnerability disclosure lacking by CIA and WikiLeaks

Experts criticize both WikiLeaks and the CIA for failing responsible vulnerability disclosure around the Vault 7 documents, and question the CIA's use of the VEP. Continue Reading

By

• Michael Heller, TechTarget

Top three steps to ensure security in big data environments

Ensuring security in big data implementations remains a problem for most enterprises. Learn about the reasons why this is, and how your company can protect sensitive data. Continue Reading

By

• John Burke, Nemertes Research

Microsoft commits to GDPR compliance in the cloud by 2018 deadline

Microsoft vows GDPR compliance in all cloud services when enforcement of the new EU data privacy regulation begins in May 2018, but companies still must take action to avoid fines. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Q&A: Digging into darknet technology with Farsight's Andrew Lewman

At RSAC, former Tor Project CEO Andrew Lewman explains the latest research into darknet technology and how that tech continues to evolve as an attack vector. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Do IoT security risks require new legislation or will standards suffice?

In a panel discussion about current IoT security risks, experts at RSA Conference 2017 weigh government legislation options against industry self-regulation. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Bruce Schneier: It's time for internet-of-things regulation

Speaking at RSA Conference 2017, security expert Bruce Schneier called for the creation of a new government agency to oversee internet-of-things regulation. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What caused the ClixSense privacy breach that exposed user data?

A privacy breach at ClixSense led to user account details being put up for sale. Expert Michael Cobb explains how companies should be held accountable for their security practices. Continue Reading

By

• Michael Cobb