May 2023 Newsletter

Highlights

What's New

Update PCI DSS to Version 4.0

On March 31, 2022, the PCI Security Standards Council (PCI SSC), the council responsible for overseeing the Payment Card Industry Data Security Standard (PCI DSS), published version 4.0, which will replace version 3.2.1 and whose main objectives are to address emerging threats and technologies, as well as enable innovative methods to combat new threats.     

At Internet Security Auditors, we have a team of experts in PCI DSS who have been sharing the updates of version 4.0 for two years through blog posts and webinars available on our platforms [...]

Update Your ISO 27001 ISMS to the New 2022 Version

The latest version of ISO/IEC 27001, published on October 25, 2022, gives organizations a 3-year transition period to adapt and certify their systems to the new standard.    

At Internet Security Auditors, we have a team of experts in the Implementation and Auditing of ISO/IEC 27001:2022 Information Security Management Systems (ISMS), and we will help and support you throughout the entire update process to the new version.

Journey to the New Versions to Learn About the Present and Future of the ISO 27001 Standard

The webinar: “Journey to the New Versions to Learn About the Present and Future of the ISO 27001 Standard” presented by our colleague Albert Moner is now available, where he explains in great detail what updates we will find in the new versions of the ISO 27001 and ISO 27002 standards.  

Regulatory Changes and Their Impact on Corporate Decision-Making Structures

In May 2017, the authorities that make up the European System of Financial Supervisors, the European Banking Authority (EBA), the European Securities and Markets Authority (ESMA), and the European Insurance and Pensions Authority (EIOPA), published a series of proposals that reaffirmed the need to create a common cooperation framework that would allow a balance between innovation and consumer protections from the perspective of digital service provision.    

What are these regulatory changes and what is their impact on corporate decision-making structures? Our colleague Carmen Areces explains it to us in this article.

Tips: How to Get Started in Hacking

Do you want to get started in the world of hacking and don't know where to begin? In this article, our colleague Héctor Berrocal gives us some ideas and tips for those who want to get started and don't know where.

Fuzzing: Not All That Glitters Is Gold

Fuzzing, or fuzz testing, is a technique used to discover bugs, security vulnerabilities, or code errors in any type of application, website, or software where there is a place to enter data. Our colleague Carlos Mayor explains its main uses and a series of problems that its use can cause in this article.  

Cybersecurity Regulations in the Insurance Sector

With the goal of fighting cybercrime, the European Commission has developed a series of initiatives over the years focused on adopting firm measures so that the economy and the citizens of the EU member states are properly prepared for the emerging scenario. If your company belongs to the insurance sector, don't miss this article! Our colleague Jose Antonio Prieto details the cybersecurity regulations that affect this sector.

Diary of a Ransomware Intrusion. How Could It Have Been Avoided?

During recent years, we have seen intrusion-related incidents increase, mainly due to criminals involved in Ransomware.     

In this article, our colleague Jose Antonio Linio will illustrate us with real examples of intrusions to raise awareness about the dynamics, the time defenders have, and the tactics and events they should look for in their network to detect this type of attack.

Most Read

New Vulnerability in WiFi Networks, They Can See Everything You Do on the Internet

A flaw in the IEEE 802.11 WiFi protocol exposes browsing data. It specifically affects WiFi frames. This is information that contains data such as the source and destination MAC address, as well as control and management data. They are used for orderly transmission and to avoid problems when exchanging data and monitoring access points.  

A Cyberattack ‘Hacks’ Tax Agency Credentials and Locks Government Employees' Computers

The Tax Agency reported another cyberattack that crippled government employees. The cyberattack even managed to block all operating systems that made up the Tax Agency department. Now, they are investigating the possible damage to find out how serious this recent cyberattack has been.  

European Companies, the Main Target of Trojans as Cloud Migration Grows

Cybercriminals try to go unnoticed and spread malicious content by abusing cloud applications to distribute malicious programs that allow them to bypass security controls based on domain blocklists and URL filtering, or that do not inspect cloud traffic.  

The Cyberattack on Hospital Clínic Forces the Suspension of Outpatient Appointments and Operations

Barcelona's Hospital Clínic suffered a cyberattack and was forced to suspend outpatient appointments and operations. The attack has affected laboratory, pharmacy, and emergency services.    

 

Events

Upcoming Courses

This message has been sent pursuant to your authorization for the communication of commercial information from Internet Security Auditors. You can consult our Data Privacy Policy here. You have the possibility to exercise the rights of access, rectification, erasure, restriction, objection, and portability provided for in the “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC” by letter addressed to Internet Security Auditors, Calle Santander, 101. Building A-2. 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com, attaching your request with a copy of your ID card or equivalent document proving your identity. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com    

This email is sent according to your previous authorization for sending commercial information from Internet Security Auditors. You can read our Data Privacy Policy here. You have the possibility at all times to exercise the rights of access, rectification, erasure, restriction of processing, objection, and portability according to the “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC” by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Building A-2. 08030 Barcelona (Spain), or through the following email: legal@isecauditors.com, attaching your request with a copy of your ID card or equivalent document proving your identity. If you only wish to request your cancellation of these communications, click on the following link and send that email from the email address where you received our communication: marketing@isecauditors.com