 |
|||||||||
Highlights |
What's New |
||||||||
Our Latest Media AppearancesIn recent weeks, our Head of Cyber Intelligence, Carlos Seisdedos, has been very busy. Several media outlets have wanted to feature him as an expert. Here is a summary of his appearances/participations [...] View Our Latest Published WebinarsIf you missed any of our latest webinars, you can now access our academy and view the information and recordings. Mapfre Expands the PCI DSS Certification of its Data Processing Center in Alcalá de HenaresInternet Security Auditors, as a PCI SSC accredited company through its QSA certificate, is proud to be able to award the PCI DSS Certification (Payment Card Industry Data Security Standard) to a major company like Mapfre. |
PCI DSS Updates in Version 4.0The PCI SSC has been working since late 2019 on an update to the PCI DSS standard, which brings a series of updates and changes that have long been requested by both QSAs and merchants and service providers, with the aim of clarifying certain requirements, establishing new guidelines on previously ambiguous areas, and updating or evolving certain minimum requirements to reflect current realities. All these changes aim to address the evolving risks to which payment card data is exposed in today's market. Report on the III ISMS Forum Regional Forum BarcelonaThis year we had the opportunity to attend the third edition of the ISMS Forum Barcelona Regional Forum, organized by ISMS Forum on March 17 at the Casa Convalescència of the Autonomous University of Barcelona (UAB). In Track 1: Cyber Security Strategy, Toni Garcia, Board Member of ISMS Forum Barcelona, opened the event by welcoming more than 300 participants to the first in-person edition of the forum since the start of the pandemic, and celebrating ISMS Forum's 15th anniversary this January 2022. Below, you can find a summary of the main presentations held in Tracks 1 and 2 of the event. Changes in OWASP Top 10 2021OWASP published a new list of vulnerabilities for the Top 10 Web Applications on September 24, 2021. It introduced several changes in how the main risks are ranked and their order on the list, with the aim of reclassifying vulnerabilities that have held the same position in the Top 10 for three editions. Extended Risk Analysis for SSFWith the evolution of various regulations and standards within the cybersecurity industry, the importance of implementing risk analysis methodologies that serve as a foundation for protecting so-called critical assets is becoming increasingly clear. Following this trend, the PCI SSC has sought to incorporate these methodologies into the "update" of the PA-DSS standard, which has been completely replaced by the PCI SSS standard within the PCI SSF framework (you can find more information in this comparison article and in this other article analyzing the transition between both standards). Updates in the ISO/IEC 27002:2022 Standard UpdateThe established lifecycle for the ISO standard family is designed so that each standard is reviewed every five years with the aim of aligning it with the reality of the companies that use it as a reference framework to secure their information. However, this cycle was not synchronized in the case of the ISO/IEC 27001 and ISO/IEC 27002 standards, which were published on the same date in 2013, creating some issues in the consistency between these standards [...] |
||||||||
Most Read |
|||||||||
How to detect bad practices in privacy policiesWe are increasingly concerned about security and privacy. What should a privacy policy contain? How can we detect bad practices? Qbot malware that steals your financial information returns against Windows users in phishing modeQbot operators are back at it, and this time with malware-laden Windows installers. Their goal is to infect systems by installing malware payloads in emails. The tactic Qbot now uses to infect our computers is different from the one it has used in various incidents in recent years. Cyberattacks against routers: what types there are and how to prevent themProtecting the router is essential to achieve a good internet connection. There are many cyberattacks that can target this device, and therefore it is advisable to know them and be prepared. |
|||||||||
Events |
Upcoming Courses |
||||||||
|
|
||||||||
| Internet Security Auditors C. Santander, 101. Building A, 2nd Floor. E-08030 Barcelona (Spain) | Tel.: +34 93 305 13 18 C. Arequipa, 1. E-28043 Madrid (Spain) | Tel.: +34 91 763 40 47 Transversal 22 # 98-82 Porta 100 Building, Office 1003 110221 Bogotá (Colombia) | Tel: +57 601 638 6888 |
|||||||||
     
|
|||||||||
|
This message has been sent pursuant to your authorization for the communication of commercial information by Internet Security Auditors. You can consult our Data Privacy Policy here. You have the possibility to exercise the rights of access, rectification, erasure, restriction, objection and portability provided for in the “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC” by letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030. Barcelona (Spain), or by email to the following address: legal@isecauditors.com, attaching your request with a copy of your ID card or equivalent document proving your identity. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address at which you received our communication: marketing@isecauditors.com |
|||||||||
Newsletter
