Category: Cybersecurity & Infosec

The Justice Department is trying to force Facebook to break the encryption on its Messenger app so it can listen to a suspect’s voice as part of a criminal probe, Reuters reported late last week. Facebook is said to be resisting. The ACLU’s Jennifer Granick tweeted about how the case wasn’t exactly a repeat of the encryption fight a few years ago between Apple and the FBI. Security engineer Alec Muffett predicted the case might go all the way to the Supreme Court. In related news, ZDNet reported that the government is seeking source code from tech companies in court, and the tech companies are largely losing. [via POLITICO’s Morning Cybersecurity]

This is a very good overview of what many would call ‘basic hygiene‘ or the ‘bare minimum‘ for corporate cybersecurity defense. There are some additional vendors with new solutions, which I might add to the list, such as: Conventus NorthStar (get a view to your total security posture and enterprise risk using data you already have), BitGlass (inline CASB that goes beyond app discovery),  Venafi (machine identity protection), SafeBreach (continuous automated red team testing). As I start to regularly review new and innovative vendor solutions, I will start a series of posts with my findings.

Why are we paying attention to our online privacy now? In March 2018, it was discovered that Cambridge Analytica had been harvesting Facebook user information, and using it to build voter profiles which they then sold off to groups who wanted to influence the 2016 Presidential Election.

The issues we are facing today aren’t new. The Internet puts your personal information at risk: on your computer and mobile devices, in email and social media. It just becomes harder to protect your privacy and personal information, as the Internet and social media become more complex. Read More