Internet Security Auditors News Bulletin
February 2021

twitter facebook linkedin Instagram youtube RSS
 

What's New

ISEcAuditors Partners with Kompleye to Strengthen PCI and SOC 2 Audit Service Offering

Although they are separate and independent legal entities, both companies work together to meet clients' business needs using Kompleye's Kono Platform to harmonize PCI, SOC, ISO 27001, HIPAA, and other compliance and cybersecurity audits, making the audit process smoother and more efficient and increasing the assessment team's productivity.


Internet Security Auditors Sponsors CIBERSEG 2021

For another year, UAH (University of Alcalá de Henares) has organized a new edition of the Cybersecurity and Cyberdefense Conference, this time entirely online, on February 11 and 12. Internet Security Auditors had the pleasure of being one of the event's sponsors.

Highlights

SSL/TLS: A Look at the Breach Attack

To correctly define and understand the BREACH attack, it is necessary to have a basic understanding of compression side-channel attacks and a clear understanding of compression algorithms.

Compression Algorithms

One of the most famous compression algorithms is DEFLATE, which defines the basis of the ZIP file format, the zlib library, gzip, PNGs, etc., and consists of a combination of Huffman coding and LZ77 compression.

In compression algorithms like DEFLATE, two approaches are used:

  • 1st: The most used letters get the shortest representation.
  • 2nd: Any phrase that repeats is only stored once.

 

Focusing on the second approach, if a certain string of characters repeats anywhere in the text, it is only stored the first time along with pointers that indicate where the same sequence is found again. The second time it occurs, a reference to the first occurrence is included.

 

 

Most Read

New Zealand Reserve Bank Suffers Critical Data Breach

The New Zealand Reserve Bank has admitted the existence of an illegal data breach through a third-party file-sharing service that has put a large amount of critical banking information at risk.

Kobalos, the Linux malware that is attacking supercomputers around the world

So far, the malware has been tracked, and attacks have been detected against supercomputers belonging to a major internet service provider (ISP) based in Asia, as well as a US endpoint security provider, among other private servers targeted by Kobalos.

What attacks can we suffer when making a video call and how to avoid them?

Video calling programs have increased considerably in recent times. More and more users are communicating through the Internet by this means. We have a wide range of possibilities at our disposal, although it must be noted that there are also risks.

A WhatsApp message with a link to Google Play: this is the latest malware discovered to infect Android devices

New malware, in the form of a “worm” that spreads through WhatsApp and can infect users of Android-based devices. Possible victims receive a message in the messaging tool from a contact saying they can download an application to get a free mobile phone.

Events

16 and 17/03 2021: I STIC Chapter Colombia Conference (Bogotá, Colombia) .

17-19/03 2021: Cybersecurity and Fraud Prevention Congress (Virtual Event, Panama).

Training

5 April ISO 27001 L.A. Colombia   ISO 27001 L.A.
Synchronous Mode
(Colombia)
12/04 Training in the PCI DSS Standard   Training in the PCI DSS Standard
Non-Presential
(Colombia)
 
8/04 ISO 22301 Lead Implementer Colombia   ISO 22301 Lead Impl.
Synchronous
Mode
(Colombia)
19/4 CHFI   CHFI
Non-Presential
(Spain)
 
12/04 CCSP Colombia   CCSP
Non-Presential
(Colombia)
ISO 27001 L.A. Spain   ISO 27001 L.A.
CLL format
(Spain)

← Back to Newsletters