---

IoT laws are coming: What to expect

No more default logins on new IoT devices if UK legislators get their way

The post IoT laws are coming: What to expect appeared first on WeLiveSecurity

---

IoT laws are coming: What to expect

No more default logins on new IoT devices if UK legislators get their way

The post IoT laws are coming: What to expect appeared first on WeLiveSecurity

---

How Enterprises Are Developing and Maintaining Secure Applications

The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.

---

Aftermath of a Major ICS Hacking Contest

Pwn2Own Miami could help spur more research on and attention to the security of industrial control system products, experts say.

---

DOD contractor suffers ransomware infection

Virginia-based EWA has had systems infected with the Ryuk ransomware.

---

Number of Botnet Command & Control Servers Soared in 2019

Servers worldwide that were used to control malware-infected systems jumped more than 71% compared to 2018, Spamhaus says.

---

Apple Security Updates Tackle iOS Device Tracking

Apple’s iOS 13.3.1 update includes a host of security patches and a way to turn off U1 Ultra Wideband tracking.

---

Criminals Hide Malware Behind Grammy-Winning Cover

Songs by Ariana Grande, Taylor Swift, and Post Malone are the most popular places.

---

Inside the Check Point Research Team's Investigation Process

The team sheds light on how their organization works and what they're watching in the threat landscape.

---

Google Sets Record High in Bug-Bounty Payouts

After a year of big changes, white hats reaped more from Google's programs than ever before.

---

Sprint Exposed Customer Support Site to Web

Fresh on the heels of a disclosure that Microsoft Corp. leaked internal customer support data to the Internet, mobile provider Sprint has addressed a mix-up in which posts to a private customer support community were exposed to the Web.

---

New web service can notify companies when their employees get phished

Abuse.ch launches new "I Got Phished" web portal.

---

9 Things Application Security Champions Need to Succeed

Common elements to highly effective security champion programs that take DevSecOps to the next level.

---

9 Things Application Security Champions Need to Succeed

Common elements to highly effective security champion programs that take DevSecOps to the next level

---

Pilfered Wawa Payment Card Data Now for Sale on Dark Web

The Joker's Stash underground marketplace is offering stolen payment card data from Wawa's recently disclosed data breach.

---

How to protect your privacy from Facebook

At long last, Facebook is letting us see the data it and other companies are collecting from you -- some of which has nothing directly to do with what you're doing on Facebook.

---

Critical Flaws in Magento e-Commerce Platform Allow Code-Execution

Admins are encouraged to update their websites to stave off attacks from Magecart card-skimmers and others.

---

Video: Zoom Researcher Details Web Conference Security Risks, 2020 Threats

Maya Horowitz with Check Point Research discussed recently-disclosed Zoom vulnerabilities that could have opened up web conferencing meetings to hackers.

---

Securing Containers with Zero Trust

A software identity-based approach should become a standard security measure for protecting workloads in all enterprise networks.

---

Businesses Improve Their Data Security, But Privacy - Not So Much

While the California Consumer Privacy Act will force companies to provide a modicum of meaningful privacy, World Privacy Day still mainly celebrates data security.