Risk
1/29/2008
01:39 PM
Keith Ferrell
Keith Ferrell
Commentary
50%
50%

Free Identity Theft Webinar Tomorrow

This week's release of a new report on Identity Theft (and strategies for avoiding and combating it) will be accompanied by an online Identity Theft Webinar tomorrow, Thursday, January 31, at 2 pm EST.

This week's release of a new report on Identity Theft (and strategies for avoiding and combating it) will be accompanied by an online Identity Theft Webinar tomorrow, Thursday, January 31, at 2 pm EST.Sponsored by the Identity Theft Prevention and Identity Management Standards Panel (IDSP), the webinar will walk attendees through the group's recommendations for enhancing the security of identity-issuing organizations, strengthening identity credentials and integrity, processes for notification of data breaches and so on.

The report itself will be released Thursday and will be available for download as well as webinar review.

Webinar sign-up information is here.

IDSP was created in 2006 by the American National Standards Institute (ANSI) and the Better Business Bureau specifically to address ID theft issues.

Should be interesting to see what they've learned over the past year and a half. A quick glance at the description of the two volume report promises a comprehensive look at both the ID theft problem and its causes and also, intriguingly, at "recommendations for areas needing new or updated standards, guidelines, best practices or compliance systems."

The second volume -- both are being released simultaneously -- is described as the group's "complete catalog of existing standards, guidelines, best practices and compliance systems." If that's accurate -- or even close -- this could be one worth reading as well as downloading.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7441
Published: 2015-05-29
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.

CVE-2014-9727
Published: 2015-05-29
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.

CVE-2015-0200
Published: 2015-05-29
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.

CVE-2015-0751
Published: 2015-05-29
Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.

CVE-2015-0752
Published: 2015-05-29
Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.

Dark Reading Radio
Archived Dark Reading Radio
After a serious cybersecurity incident, everyone will be looking to you for answers -- but you’ll never have complete information and you’ll never have enough time. So in those heated moments, when a business is on the brink of collapse, how will you and the rest of the board room executives respond?