Newsletter

August 2021 Newsletter

	News Bulletin August 2021

Internet Security Auditors Strengthens Its Alliance with (ISC)² as an OTP in Portugal and Ecuador

(ISC)², the world's largest non-profit association of certified cybersecurity professionals, has announced that Internet Security Auditors continues to strengthen its alliance, dating back to 2006, with a new step as an OTP (Official Training Provider) in Portugal and Ecuador (added to Spain and Colombia). Becoming the first OTPs to offer official courses in these two countries

First Company in Ibero-America to Gain Access to the PCI SSC Card Production (CPSA) Program

The Card Production Security Assessor (CPSA) program was one of the last to be incorporated into the PCI SSC security standards ecosystem and defines the physical and logical requirements that all payment card manufacturers and personalizers must meet.

Internet Security Auditors becomes, marking a new milestone as a leading regional reference in consulting and auditing, the first company in Spain and Latin America to enter the CPSA program.

Highlights

The National Security Framework and Risk Reduction in Office 365

Some of the most commonly used tools today, in the field of information management and exchange, are those provided by the Microsoft Office 365 suite. Depending on the plan contracted by the user or organization (home or business), the suite of programs offered is different, however, in this article the security risks associated with some of the services offered by the business plan will be analyzed.

The article focuses on the analysis of the dimensions of confidentiality, integrity, and availability of information, through the main information exchange tools offered by the business plan, such as Microsoft Teams, SharePoint, Exchange, and the Office 365 management platform itself, according to the security parameters analyzed by the National Security Framework (ENS).

Impact of COVID-19 on the PCI DSS Standard (I)

The unprecedented immersion, in our society, of the coronavirus, turned into a Global Pandemic, has made us all reconsider and review the way business was being conducted and the way we live in general. This has resulted in the obligation to substantially modify the work environment and the processes that companies had established with strong roots.

In this new paradigm, in which most of the workforce works remotely, and companies and consumers make purchases online instead of in a physical store, the opportunity for cybercriminals seeking to carry out phishing attacks, defraud, and steal money or data increases. We are going to address this topic in a series of 3 articles.

API Testing, preparing a good analysis

When we set out to audit a website we have clear what we are going to find menu, options, forms, search boxes, and a lot of text, however, when we go to audit an API, we must understand several essential points with the goal of performing an audit with an adequate methodology.

PCI SSC Publishes Version 3.1 of the PCI PIN Standard

On March 12, PCI SSC published version 3.1 of the PCI PIN security standard. This publication, categorized as a minor revision, adds a series of clarifications and updates to the standard based on the feedback received. The objective of this article is to comment on the main changes introduced.

Along with the publication of the new version of the standard, a post has been published on the PCI SSC blog with a couple of questions answered by Emma Sutcliffe, Standards Officer at PCI SSC, as well as a document summarizing the changes.

United States Will Give Ransomware Attacks a Priority Similar to Terrorism

The U.S. Department of Justice has decided to equate the priority of ransomware attacks to terrorism threats, after several hacks in American companies and organizations.

Browser fingerprint: What your browser tells about you

In the debate about security, there is a lot of talk about cookies, but the browser fingerprint is often forgotten. Many times we are not aware that we are not talking about just another application, much less. As the main interface for accessing the Internet, it is one of the applications we spend the most time on and, therefore, one of the most susceptible to having more identifying elements than we normally think.

Colonial Pipeline Admits Being a Victim of a Ransomware Attack

The largest oil pipeline network in the United States has been forced to suspend its activities after suffering a cyberattack whose authorship and scope have not been communicated. It stated that it was a 'ransomware' attack and that it has been forced to hire the services of a cybersecurity provider.

WhatsApp, Target of 89.6% of Attack Attempts Against Messaging Apps Worldwide

A study reveals which messaging applications are most used by cybercriminals to launch phishing attacks. The largest proportion of fraudulent links detected between December 2020 and May 2021 have been identified in WhatsApp, with 89.6%; followed by Telegram, Viber, and Hangouts.

Events

5, 6 and 7/10 of 2021: Securmática (Madrid, Spain).

5/10 of 2021: InfoSecurity Mexico (Mexico City, Mexico).

20-21/10 of 2021: SECURITY FORUM 2021 (Barcelona, Spain).

Upcoming Courses

Official CCSP Course
(Spain)

ISO 27001 Lead Auditor
(Spain)

CEH Official Course
(Spain)

PCIP™ Preparatory Course
(Spain)

PCI DSS Standard Training
(Spain)

OSINT Techniques Course
(Spain)

Internet Security Auditors C. Santander, 101. Edificio A, 2º. E-08030 Barcelona (Spain) \| Tel.: +34 93 305 13 18 C. Arequipa, 1. E-28043 Madrid (Spain) \| Tel.: +34 91 763 40 47 Carrera 13 # 90-17. 110221 Bogotá (Colombia) \| Tel.: +57 (1) 638 68 88
This message has been sent pursuant to your authorization to receive commercial communications from Internet Security Auditors. You can view our Data Privacy Policy here. You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com This email is sent pursuant to your previous authorization to receive commercial communications from Internet Security Auditors. You can read our Data Privacy Policy here. You may at all times exercise your rights of access, rectification, erasure, restriction of processing, objection, and portability pursuant to the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2. 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com

← Back to Newsletters