Welcome to the first anniversary edition of This Week’s [in]Security. This week we take a look back at the last year in security, the big stories, the surprises, and as always we’ve collected and grouped together a selection of this week’s news, opinions, and research. Quickly skim these annotated links organized by topic: compliance and payment security, breaches, regulation, bugs, privacy, hacking/malware, other security & risk, and more. We hope you enjoy and find them useful.
Our first issue debuted on April 3rd, 2017 and covered 27 articles taken from 13 web sites. After 52 issues plus a special issue on the Facebook/Cambridge Analytica scandal (https://controlgap.com/blog/cambridge-analytica-facebook-scandal/) we've summarized and served up links for 2391 articles taken from 300 websites!
This last year we've seen a number of big and surprising stories and trends:
Breaches of payment acceptance systems (https://controlgap.com/?s=%22card+breach%22)), at least massive ones, were not front and center in the news until Sak's (this issue). Healthcare breaches (https://controlgap.com/?s=Healthcare)) were almost epidemic in numbers but tended to be smaller in scale. The major breach stories involved information brokers and surveillance capitalism collecting a wide range of data (possibly including cards) where people are the product not the customer:
There's a lot more including coverage of cyber-research, new tools and techniques, the ongoing war against encryption, GDPR, AI, blockchain, and more.
We've brought you insightful articles about understanding PCI, including:
We covered a number of developments over the year that have compliance implications:
More on Cambridge Analytica
More on Facebook
Companies quitting Facebook or pulling advertising
[poll id="1"]