Home

M&S suspends website after customers report seeing other shoppers' details

Marks & Spencer was forced to suspend its website after customers were able to see other people's details when they logged in to their accounts. Customers posted messages on the high street chain's Facebook page to say they could see other people's orders and payment details when they logged into their accounts. The firm said no customer's details were compromised by the "technical difficulties".

http://www.itv.com/news/2015-10-27/m-s-customers-report-seeing-other-shoppers-details-online/

IT Security experts explain what this could mean for customers and what companies should do to prevent such glitches:

: Iva Kuosseva; Interviews; Posted On Thursday, 29 October 2015 13:37

Survey reveals unmanaged credentials are the biggest security issue for organisations

London, UK: A new survey from Lieberman Software Corporation has revealed that 83 percent of IT professionals do not believe advanced persistent threats are over-hyped, however they are still very naïve about the length of time it would take to identify an advanced persistent threat on their own corporate network.

The study was carried out at Black Hat Conference 2015 and looked at the attitudes of nearly 150 IT security professionals. It revealed that 10 percent of IT professionals believe it would take them only one hour to identify an APT on their network, while 55 percent said it would take them one week to one month. However this is in contrast with data from a recent Mandiant[1] report which revealed that hackers are present on the network for an average of 205 days before being discovered.

: Iva Kuosseva; Case Studies; Posted On Thursday, 29 October 2015 13:31

Cubic Successfully demonstrates Live Flight of encrypted P5 combat training system

SAN DIEGO: Cubic Global Defense (CGD) has announced the completion of its first live flight demonstration of the Cubic Miniature Encryptor (CME) in Lakeland, Florida with partner Draken International, operator of the largest privately-owned fleet of ex-military aircraft. During the flight demonstration, Cubic successfully showcased airborne encryption of the P5 Combat Training System (P5CTS) on tactical fighter aircraft, matching the environment of an air combat training mission. The CME is a mature encryption solution readily available to the P5CTS which will accomplish increased security for advanced air combat training as well as P5CTS pod and ground station encryption compatibility with the Joint Strike Fighter (JSF)’s P5 Internal Sub-system.

: Laura Chon; International Security, Safety & Strategic Defence; Posted On Thursday, 29 October 2015 13:26

Brainloop revamps its Dox file sync and share solution

Munich/London; German IT security provider Brainloop has announced a new cloud security architecture to be launched in November. The company has placed a strong emphasis on factors like flexibility, performance and security. In addition, it has revamped Brainloop Dox its file sync and share solution. With a completely new design, Dox now supports Apple Macs, a wide range of mobile devices as well as Windows machines.

Brainloop’s new cloud architecture works hand in hand with Brainloop Dox. A faster upload capability and increased bandwidth speeds up

filesharing solution and enables users to work with no delays. The size limit for uploaded files has also been increased. In addition, the architecture has been redesigned to make it more scalable and now gives users even more flexibility. The solution has been designed for deployment in a large enterprise – simple administration, straightforward integration and easy definition of company security policies.