Learn about Data-Centric Audit and Protection or DCAP in Data Protection 101, our series on the fundamentals of information security.

According to a study published last week hospital breaches accounted for one third of all data breaches and affected the largest number of victims from 2009 to 2016.

17 IT and security professionals discuss the best practices and solutions for securing enterprise data in Office 365.

Learn about Security Operations and Analytics Platform Architecture, or SOAPA, in Data Protection 101, our series on the fundamentals of information security.

Learn about security as a service (SECaaS) in Data Protection 101, our series on the fundamentals of information security.

Researchers warned this week attackers could exploit a vulnerability in some POS systems to hijack business-data rich databases.

ATM manufacturers sent notices to banks late last week warning that "jackpotting" attacks have come to the U.S.

Learn about user and entity behavior analytics (UEBA) in Data Protection 101, our series on the fundamentals of information security.

Allscripts, one of the larger electronic health records (EHR) vendors in the U.S., is continuing to grapple with a ransomware attack.

18 security pros reveal the people, processes, and technologies required for building out a Security Operations Center (SOC).

Learn about Office 365 Data Loss Prevention (DLP) in Data Protection 101, our series on the fundamentals of information security.

A hospital paid 4 BTC (Bitcoin) - roughly $55,000 - to regain access to its computer systems over the weekend.

An Italian firm may be behind a new strain of spyware, Skygofree, that can exfiltrate call records, text messages, audio, and more.

Skype will soon join the likes of Facebook Messenger, Apple's iMessage, and WhatsApp by introducing end-to-end encryption, a method of communication that adds an extra layer to conversations by ensuring only the communicating users can read the messages. Skype, Microsoft’s messaging service that boasts nearly 300 million months users, will take advantage of the Signal Protocol, a non-federated cryptographic protocol co-authored by Moxie Marlinspike, the founder of Open Whisper Systems, four years ago. Joshua Lund, a developer with Signal announced the news in a blog on Thursday. Skype users will be able to use the encryption in a forthcoming feature, Private Conversations, already available to users of Skype Insider, a beta build of the app Microsoft makes available to interested parties on its site. It’s unclear when the feature will make it to the final build of Skype. For now only 8.13.76.8, the most recent version of Skype Insider for Android, iOS, Linux, Mac, and Windows includes end-to-end encryption. The feature only works if other users have the same version of the app; it does not work for video or group chats yet. Users will have to work a little harder to user the feature in Skype; it's not being rolled out by default. According to the company users will have to tap or click the "+" icon and select "New Private Conversation." Assuming the user accepts the invitation, a private conversation will start. The conversation will only remain confidential on that device, meaning users can't expect to carry over one chat from their iPhone to their Macbook and expect it to remain encrypted. While the functionality, at least for the moment, is a bit limited, privacy advocates, like the Electronic Frontier Foundation, called the move a step in the right direction this week while encouraging Microsoft deploy the feature by default. Communication tools and platforms should implement end-to-end encryption as the default, rather than an option. — EFF (@EFF) January 12, 2018 Joshua Franco, Head of Technology and Human Rights at Amnesty International had similar sentiments. “It is about time that Microsoft takes its users’ privacy seriously, and we are now calling on the company to roll out default end-to-end encryption for all Skype communications,” Franco said, “Companies who don’t install full encryption are effectively handing the keys to cyber criminals and intrusive state surveillance agents. As more and more communications move online, it is up to companies to demonstrate they are on the side of human rights – the future of freedom of expression is partly in their hands.”

Failing to patch the Meltdown and Spectre processor flaws could expose organizations to steep fines under the EU’s General Data Protection Regulation (GDPR) officials in the UK have warned.

Western Digital recently fixed a series of vulnerabilities in its My Cloud devices that could have let an attacker execute code and remotely takeover the devices.

15 security experts discuss the top three free security tools every infosec pro should use.

Learn about fileless malware and how to protect against this threat in Data Protection 101, our series on the fundamentals of information security.

Studies show that U.S. consumers are worried about data breaches, but assume they’re not affected by them.