Content by Mathew J. Schwartz

7 Apple Breach Business Lessons

Mathew J. Schwartz  •  September 4, 2014

To avoid the corporate equivalent of the recent celebrity photo dump from iCloud, enterprise security managers must add stronger password, encryption and authentication controls to mobile devices.

Is Apple iCloud Safe?

Mathew J. Schwartz  •  September 3, 2014

Some security experts say a thriving celebrity-photo-theft subculture has long been hacking iCloud, employing techniques that bypass strong passwords and Apple's two-factor authentication system.

ISACA Tackles EU Cybersecurity Risks

Mathew J. Schwartz  •  September 2, 2014

A new audit and assurance program from ISACA aims to help organizations deal with the current patchwork of European cybersecurity rules and regulations, including an increased demand for greater online attack resilience.

FBI, Apple Probe Account Compromises

Mathew J. Schwartz  •  September 2, 2014

The FBI and Apple are investigating the release of hundreds of celebrities' nude photographs and videos, which security researchers suspect is tied to compromises of iCloud, Dropbox or other cloud service accounts.

New JPMorgan Chase Breach Details Emerge

Mathew J. Schwartz  •  August 29, 2014

An investigation into a suspected breach at JPMorgan Chase suggests that attackers used highly customized malware, and exploited multiple zero-day vulnerabilities, to breach the bank's network, according to news reports. But were other banks hit?

SSH Keys: Managing the Risks

Mathew J. Schwartz  •  August 29, 2014

Too many organizations fail to adequately manage and secure their SSH keys, even though the keys secure everything from file transfers and backups to patching and database management, NIST warns in new draft guidance.

FBI Probes JPMorgan, Other Bank Attacks

Mathew J. Schwartz  •  August 28, 2014

Early reports suggested Russian hackers are behind complex attacks and network intrusions at multiple U.S. financial services firms, including JPMorgan Chase. But security experts warn against jumping to conclusions, based on scant evidence.

Gameover Zeus Trojan Continues Resurgence

Mathew J. Schwartz  •  August 27, 2014

Following the "Operation Tovar" disruption of the Gameover Zeus botnet, security experts see related malware attacks ramping up again, this time as a result of variants of the financial Trojan.

DDoS Gang Targets Sony

Mathew J. Schwartz  •  August 25, 2014

Sony has restored service to its PlayStation Network and Sony Entertainment Network sites after services were disrupted by a DDoS attack by the group "Lizard Squad." Little is known of the group, except its penchant for jihadist claims.

Germany's Cybersecurity Law: EU Impact

Mathew J. Schwartz  •  August 22, 2014

A proposed German cybersecurity law would require critical infrastructure organizations to disclose all significant security incidents. Legal experts say the proposal signals Germany's attempt to take a leadership role at the EU level.

UPS Reveals Data Breach

Mathew J. Schwartz  •  August 21, 2014

For up to seven months, some 51 UPS Stores in 24 different states were infected with POS malware that intercepted 105,000 transactions, affecting an unknown number of customers.

Apple iOS 8: What's New for Security?

Mathew J. Schwartz  •  August 20, 2014

Apple's forthcoming iOS 8 includes a number of useful new security and privacy features, says Symantec threat researcher Candid Wueest. But there are missing features he'd still like to see implemented.

Irish Watchdog Charges Private Eyes

Mathew J. Schwartz  •  August 19, 2014

Authorities in Ireland have accused some private investigators of tricking government employees into revealing personal details about credit union customers, in violation of EU data protection laws.

3 Steps to Combat Breach Fatigue

Mathew J. Schwartz  •  August 18, 2014

Nonstop data breach notifications take a psychological toll, driving executives and consumers alike to alter their behavior for the worse. Here are three ways for businesses to battle data breach fatigue.

Microsoft Email Case Triggers Warnings

Mathew J. Schwartz  •  August 13, 2014

European officials plan to continue pushing for stronger EU privacy rules in the wake of a controversial U.S. court ruling that authorizes the U.S. Justice Department to seize data stored outside the country.