Newsletter

December 2019 Newsletter

	News Bulletin December 2019

Latest News

Gonzalo Carrasco's Outstanding Participation at the National Congress of Computer Engineering in Buenos Aires

The National Congress of Computer Engineering – Information Systems (CoNaIISI) was held on November 14 and 15 at the National University of La Matanza in San Justo (Argentina), where Gonzalo Carrasco, from the audit department, participated as a speaker.

The General Directorate of the Civil Guard Invites Carlos Seisdedos to the Mentoring Program of the 1st National Interuniversity Cyber Challenge League

On the occasion of the celebrations for the 175th Anniversary of the Foundation of the Civil Guard Corps (1844-2019), the General Directorate of the Civil Guard has launched an ambitious project by organizing the 1st National Interuniversity Cyber Challenge League, and for this purpose, they invited Carlos Seisdedos, from the cyber intelligence department, to participate in the mentoring program, due to his personal and professional qualities.

Carlos Seisdedos and Vicente Aguilera Speakers at the XIII STIC CCN-CERT 2019 Conference

This year, in its thirteenth edition, Carlos Seisdedos and Vicente Aguilera will participate as a practical workshop: "OSINT - From Information to Intelligence". Where techniques and tools that help in open-source investigation processes will be shown [...]

Featured

How to Combine Nessus with Metasploit

This article clearly and simply explains how we can combine the two tools to analyze and exploit system vulnerabilities.

CIS Controls: New Features in Version 7.1

Last April, version 7.1 of the CIS Controls was published, a security framework that is still little implemented in Spain, but very interesting due to the transversality and the demands of its requirements.

In this article we will review the controls that compose it and, especially, the new features introduced in its latest update.

No cON Name 2019 Chronicle

Another year we have had the opportunity to attend the latest edition of the No cON Name congress, the longest-running public security congress in Spain (born in 1999, in Palma de Mallorca), which in this edition turns 20 years. During the opening speech, the organization presented the new changes of this edition, as a result of its commitment to move towards a more international congress format, with parallel talks in self-managed spaces, and that depends mainly on the income derived from the tickets of the participants.

In this article you can find a summary of the presentations that took place during its second day.

CEO Fraud

Every day more, the digital exposure of the social and business fabric makes information security potentially exposed to cybercrime, both at the corporate level and at the private level. This makes individuals or even organized mafias try to exploit the existing weaknesses in very different ways with the ultimate goal of making an economic profit.

Some of the attacks that such organizations and individuals can be exposed to are, according to the European Union's law enforcement agency (EUROPOL), the following:

CEO Fraud: deceiving employees who have access to the financial resources of a company, so that they make transfers or payments of fake invoices from corporate accounts.
Investment scam: promises of high profitability and quick gains in lucrative investment products such as stocks, bonds, cryptocurrencies, rare metals, foreign investments or alternative energy.
Invoice fraud: deception by which they pose as representatives of a supplier, provider or creditor to change the bank details of the beneficiary of the invoices.
[...]

First big GDPR fines (British Airways and Marriott)

The Information Commissioner's Office (ICO), which is the data protection authority of the United Kingdom (equivalent to the "Spanish Data Protection Agency" in Spain) made public yesterday that it intends to sanction British Airways with a fine of 183.39 million pounds (more than 203 million €), and today, it has also made public the intention to sanction the hotel chain Marriott with 99 million pounds (more than 110 million €), both for non-compliance with data protection regulations (GDPR / RGPD).

Cadena SER and Everis suffer a ransomware attack that has disabled their systems.

Following the established protocol in cyberattacks, SER saw the need to disconnect all its operating computer systems.

A vulnerability in smart speakers is discovered: lasers.

Vulnerability in smart speakers. Laser pointers capable of deceiving smart speakers, introducing into them, all types of voice commands silently and without users' knowledge.

A large ASP.NET hosting company infected with ransomware.

The ASP.NET hosting provider, with almost half a million customers, has been infected by ransomware during the weekend of November 9 and 10.

Massive hack of the Cayman National Bank and Trust.

This leak, similar to PanamaPapers in 2016 (among others), has been due to misconfigurations in the web portal. Among the leaked data are around 3,800 companies, trusts, individual accounts (of businessmen and possibly politicians) from around the world.

Events

31/01 - 1/02 of 2020: H-c0n - Hackplayers conference. Madrid (Spain).

24-27/02 of 2020: Mobile World Congress. Barcelona (Spain).

Training

ISO 27001 L.A.
Madrid

ISO 27001 Implementation
Madrid

CISSP
Madrid

ISO 22301 L.A.
Barcelona

CEH
Madrid

CSSLP
Madrid

Internet Security Auditors C. Santander, 101. Edificio A, 2º. E-08030 Barcelona (Spain) \| Tel.: +34 93 305 13 18 / Fax: +34 93 278 22 48 C. Arequipa, 1. E-28043 Madrid (Spain) \| Tel.: +34 91 763 40 47 / Fax: +34 91 382 03 96 Calle 90 # 12-28. 110221 Bogotá (Colombia) \| Tel.: +57 (1) 638 68 88 / Fax: +57 (1) 638 68 88
This message has been sent pursuant to your authorization to receive commercial communications from Internet Security Auditors. You can view our Data Privacy Policy here. You have the right to exercise the rights of access, rectification, erasure, restriction of processing, objection, and data portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by writing a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com This email is sent pursuant to your previous authorization to receive commercial communications from Internet Security Auditors. You can read our Data Privacy Policy here. You have the right at all times to exercise the rights of access, rectification, erasure, restriction of processing, objection, and data portability under the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2. 08030 Barcelona (Spain), or by using the following email address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com

← Back to Newsletters