Newsletter

November 2021 Newsletter

Internet Security Auditors Newsletter
November 2021

twitter facebook linkedin Instagram youtube RSS
 

We Changed Our Phone Numbers to Colombia's National Single Numbering Plan

As of September 1, 2021, Colombia has implemented a national single numbering plan to standardize landline and mobile phone numbers to 10 digits, simplifying access to services and promoting the transformation and modernization of the country's fixed networks.

Highlights

The Impact of COVID-19 on the PCI DSS (II) Standard

As we mentioned in the previous article in this series, the emergence of COVID-19 has introduced new risks that we did not face before, which must be addressed with effective security measures to prevent potential security breaches.

In addition, this new paradigm has prevented QSAs from physically traveling to the locations that must be assessed under the PCI DSS standard, leading to a proliferation of remote audits or assessments. To conduct this type of audit, we must consider a number of factors for the PCI SSC to deem them valid.

Below, we will analyze some of the security measures we can implement to mitigate the risks posed by remote work, and we will also examine the factors to consider when conducting remote PCI DSS assessments properly.

Payment Fraud. Part I: Card Data and Different Types of Attacks

This publication consists of three articles. In this first introductory article, basic information is provided about payment cards, payment types, and the data required to make payments. It is necessary to introduce this information to the reader to ensure a minimum level of knowledge. Once this point has been covered, the different types of attacks to which cardholders are exposed when using their cards will be introduced.

XSS, An Evil That Never Ends

Let's start by asking: What is Cross-Site Scripting or XSS?

Simply put, it is a type of injection. Cross-Site scripting is ultimately the execution of malicious code that can be JavaScript, HTML, or any other language, provided that the environment where it is to be executed is compatible with the platform on which it is running and affects the platform by performing malicious actions that the platform does not expect, caused by improperly filtered input.

To define the terms a bit and get us familiar with them, JavaScript is an interpreted programming language that allows code to be compiled during execution and is currently used by many websites.

Most Read

Microsoft Discovers a Phishing as a Service Campaign with Templates to Customize Attacks: What PhaaS Is and How It Works.

Microsoft discovered a large-scale phishing-as-a-service (PhaaS) operation. The platform would allow users to customize campaigns and develop their own phishing strategies, then use the PhaaS platform to obtain phishing kits, email templates, and the hosting services needed to launch the attacks.

5 Common Scam Models on Instagram

Instagram is one of the most popular social networks. However, these figures also attract cybercriminals like bees to honey, who see such a large number of potential users as targets, from timeless deceptions such as phishing to scams offering to verify your account.

The Janeleiro Trojan Returns with a Few Changes

After the GitHub repository where they hosted their C&C servers was removed, the operators behind the Janeleiro banking Trojan are back at it with a new code update and a new repository targeting corporate users in Brazil.

IoT Device Attacks Double in Just Six Months

In just six months, infection attempts have jumped from nearly 640 million to over 1.5 billion. Connected devices are growing in popularity and variety. These include wearable gadgets such as smartwatches and devices that make up smart homes. Their increasing availability attracts not only users but also cybercriminals.

Most Read

Microsoft Discovers a Phishing as a Service Campaign with Templates to Customize Attacks: What PhaaS Is and How It Works.

Microsoft discovered a large-scale phishing-as-a-service (PhaaS) operation. The platform would allow users to customize campaigns and develop their own phishing strategies, then use the PhaaS platform to obtain phishing kits, email templates, and the hosting services needed to launch the attacks.

5 Common Scam Models on Instagram

Instagram is one of the most popular social networks. However, these figures also attract cybercriminals like bees to honey, who see such a large number of potential users as targets, from timeless deceptions such as phishing to scams offering to verify your account.

The Janeleiro Trojan Returns with a Few Changes

After the GitHub repository where they hosted their C&C servers was removed, the operators behind the Janeleiro banking Trojan are back at it with a new code update and a new repository targeting corporate users in Brazil.

IoT Device Attacks Double in Just Six Months

In just six months, infection attempts have jumped from nearly 640 million to over 1.5 billion. Connected devices are growing in popularity and variety. These include wearable gadgets such as smartwatches and devices that make up smart homes. Their increasing availability attracts not only users but also cybercriminals.

Events

4/11/2021: Trans Atlantic Cybersecurity Summit (TACS 2021) (Las Palmas de Gran Canaria, Spain).

4/11/2021: CONAIISI (Mendoza, Argentina).

8-13/11/2021: HoneyCon (Guadalajara, Spain).

26-27/11/2021: CIGEDIP (Guatemala City, Guatemala).

Upcoming Courses

15 NOV   ISO 27001 Lead Auditor
(Spain)
 
22 NOV   CSSLP
(Colombia)
 
15 NOV  

ISO 22301 Lead Auditor
(Spain)

22 NOV   CISSP
(Spain)
 
17 NOV   PCIP™ Preparation Course
(Spain)
13 DEC   ISO 27001 Lead Auditor
(Spain)
 
Internet Security Auditors
C. Santander, 101. Edificio A, 2º. E-08030 Barcelona (Spain) | Tel.: +34 93 305 13 18
C. Arequipa, 1. E-28043 Madrid (Spain) | Tel.: +34 91 763 40 47
Carrera 13 # 90-17. 110221 Bogotá (Colombia) | Tel.: +57 601 638 68 88

This message has been sent pursuant to your authorization for the communication of commercial information from Internet Security Auditors. You can view our Data Privacy Policy here. You have the option to exercise the rights of access, rectification, erasure, restriction, objection and portability provided for in the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC" by letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2 08030 Barcelona (Spain), or by email at the following address: legal@isecauditors.com. If you only wish to unsubscribe from these communications, click the following link and send that email from the email address where you received our communication: marketing@isecauditors.com

This email is sent according to your previous authorization for sending commercial information from Internet Security Auditors. You can read our Data Privacy Policy here. You have the possibility at all times to exercise the rights of access, rectification, erasure, restriction of processing, objection and portability according to the "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" by sending a letter addressed to Internet Security Auditors, Calle Santander, 101. Edificio A-2. 08030 Barcelona (Spain), or through the following email: legal@isecauditors.com. If you only wish to request your cancellation of these communications, click on the following link and send that email from the email address where you received our communication: marketing@isecauditors.com

← Back to Newsletters