Newsletter

Newsletter 2018-2

News Bulletin
March- April 2018

 

What's New

Journalist Luis Herrero analyzes the Facebook data leak alongside Vicente Aguilera

On Tuesday, March 20, Vicente Aguilera was interviewed on the esRadio program “En casa de Herrero” to discuss the leak that has affected more than 50 million Facebook users, in which the data analysis company Cambridge Analytica was implicated and which, allegedly, helped Trump in his 2016 campaign.

ISec Auditors on the INCIBE list of institutions offering cybersecurity training

INCIBE has included us in the catalog of institutions providing cybersecurity training in Spain in its February 2018 edition.

New version of Vicente Aguilera's Tinfoleak v2.3 tool released

A new version of the Tinfoleak tool has been released, incorporating several new features. In this version 2.3, five new functionalities have been added.

 

Highlights

PCI DSS v3.2 more demanding since February 1

Although the PCI DSS standard has not changed since version 3.2 was published, it included certain requirements that were considered "optional" or "desirable" until January 31 of this year. After this date, those requirements are mandatory and, therefore, any company affected by compliance with the standard must have them implemented or will be in non-compliance.

New deadline to register personal databases in Colombia

Social networks are an essential source of information in analysis and research processes for various purposes. Among these networks, Twitter stands out for the activity of its users due to its ease of use and simplicity. In this version 2.1 "SHA2017 Edition", four new functionalities have been incorporated:

    1. Analysis based on the global timeline
    2. Followers and friends analysis
    3. Word frequency analysis
    4. Likes analysis

There are also “minor” changes, mainly:

  1. Slight changes in the aesthetic aspects of the HTML report
  2. Bug fixes.

How does the new version of the OWASP Top Ten affect PCI DSS v3.2 compliance?

Within the information security community, the OWASP project (The Open Web Application Security Project - https://www.owasp.org) is widely recognized due to its contributions to improving controls for protecting web applications. One of its most important projects is the “OWASP Top Ten Project” (https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project), which periodically lists the 10 most critical risks in this type of applications.

Mandatory documentation in ISO 22301.

All Management Systems that wish to be certified under an ISO standard must meet a series of requirements, many of them focused on the documentation of the System. In the documentary scope, and focusing on ISO 22301 for the definition of a Business Continuity Management System (BCMS), the International Organization for Standardization does not impose limits on the number of documents that an Organization wishing to be certified presents to the auditor, although it does require minimum documentation that must be considered.

Most Read

Your mobile phone can reveal your location, even if you tell it not to.

Apps can use sensors to track a user's movements turn by turn through the streets of a city. U.S. military authorities were recently caught by surprise by the revelation that digital activity trackers of soldiers were storing the location of their training sessions.

Study warns that health apps put millions of personal data at risk

Researchers from three Spanish universities demonstrated that only 20% of applications store data on users' smartphones, and one in two requested and managed login passwords without using a secure connection.

WhatsApp will allow companies to send ads to users

The new terms were discovered in the latest beta of WhatsApp for Android, where the company states that it will find useful ways for users to connect with companies to receive information and marketing messages, according to WaBetaInfo.

Cyberattacks are costly and could worsen, according to U.S. report.

A study by the White House Council of Economic Advisers highlighted concerns about cyberattacks against the financial and energy sectors, which are "interdependent" and "strongly connected to the internet".

Events

11-12/04 2018: ASLAN Congress&Expo 2018. Madrid (Spain).

22/05 2018: OPEN DAY. Madrid (Spain).

23-24/05 2018: InfoSecurity Mexico. Mexico City.

Training


9
APR
 
   ISO 27001 IMPL..
Bogotá

23
APR
 
   ISO 22301 L.A.
Barcelona
 

16
APR
 
   PCI DSS
Virtual

7
MAY
 
   CSSP
Bogotá
 

23
APR
 
   CSSLP
Barcelona

7
MAY
 
   CEH
Barcelona
 
Internet Security Auditors
C. Santander, 101. Edificio A, 2º. E-08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 / Fax: +34 93 278 22 48
C. Arequipa, 1. E-28043 Madrid (Spain) | Tel.: +34 91 763 40 47 / Fax: +34 91 382 03 96
Calle 90 # 12-28. 110221 Bogotá (Colombia) | Tel.: +57 (1) 638 68 88 / Fax: +57 (1) 638 68 88

In compliance with Organic Law 15/1999 (LOPD), we inform you that your personal data has been included in Internet Security Auditors' files, whose exclusive purpose is customer management and commercial communication actions. You have the possibility of exercising the rights of access, rectification, cancellation, and opposition provided for by law by sending a letter addressed to Internet Security Auditors, c. Santander, 101. Edif. A. 2º, E-08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you want to unsubscribe from the Internet Security Auditors Newsletter, send an email to marketing@isecauditors.com.

According to the Spanish Organic Law 15/1999 on personal data protection (LOPD), we inform you that your personal data will be added to files owned by Internet Security Auditors S.L. with the only purposes of customer management and advertising communication. In accordance with the law and regulations you have the possibility at all times of exercising the rights of access, rectification, cancellation and taking exception by sending a letter addressed to Internet Security Auditors, c. Santander, 101. Edif. A. 2º, E-08030 Barcelona (Spain), or through the following email: legal@isecauditors.com. If you want to unsubscribe from the Newsletter of Internet Security Auditors, send an email to marketing@isecauditors.com.

← Back to Newsletters