Tuesday, September 21, 2021

Absolutely. Who would get a ‘security warning’ phone call or email in your company? Do they know who to contact?

https://krebsonsecurity.com/2021/09/does-your-organization-have-a-security-txt-file/

Does Your Organization Have a Security.txt File?

It happens all the time: Organizations get hacked because there isn’t an obvious way for security researchers to let them know about security vulnerabilities or data leaks. Or maybe it isn’t entirely clear who should get the report when remote access to an organization’s internal network is being sold in the cybercrime underground.

In a bid to minimize these scenarios, a growing number of major companies are adopting “Security.txt,” a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences.

The security.txt file made available by USAA, for example, includes links to its bug bounty program; an email address for disclosing security related matters; its public encryption key and vulnerability disclosure policy; and even a link to a page where USAA thanks researchers who have reported important cybersecurity issues.



How good is your security? Why can’t you measure it? An interesting read.

https://www.csoonline.com/article/3632947/the-new-math-of-cybersecurity-value.html#tk.rss_all

The new math of cybersecurity value

An increasing number of CISOs are devising a new set of metrics to show how they’re impacting risk at their organizations.




Similar concern in all connected devices?

https://www.bespacific.com/your-car-knows-too-much-about-you-that-could-be-a-privacy-nightmare/

Your car knows too much about you. That could be a privacy nightmare.

Mashable: “The car you drive says more about you than you think. Over the last few decades, technology has given drivers remarkable improvements in both safety and convenience — but it has also turned cars into data-gathering machines. What information is collected, and where it ends up, is not always clear to car owners. That’s a potential privacy disaster waiting to happen. As Jon Callas, the Electric Frontier Foundation’s director of technology projects, explained to Mashable, newer cars — and Teslas in particular — are in many ways like smartphones that just happen to have wheels. They are often WiFi-enabled, come with over a hundred CPUs, and have Bluetooth embedded throughout. In other words, they’re a far cry from the automobiles of even just 20 years ago. If your car knows where you go, and how long you stay there, it, like your cellphone, also hypothetically knows whether you’re a churchgoer, attend AA, or made a recent trip Planned Parenthood. And, depending on what features you’ve enabled, it may not keep that information to itself. But that’s just the tip of the iceberg…”



Assumes we all see the world identically?

https://www.zdnet.com/article/ai-ban-the-algorithms-that-threaten-our-human-rights-says-un-chief/

AI: Ban the algorithms that threaten our human rights, says UN chief

Calls to put brakes on the use of artificial intelligence and in some cases to ban the technology altogether are getting louder. Now the UN's human rights chief Michelle Bachelet has joined her voice to the chorus of experts who are urging governments to take stronger action to keep algorithms under control, in a new report that recommends moratoriums on the sale and use of artificial intelligence for high-risk use cases.

Bachelet also advocated for a ban on some AI applications that are contrary to international human rights law, such as the social scoring of individuals based on discriminatory criteria.


No comments: