Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
To Attract and Retain Better Employees, Respect Their Data
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/5/2017 | 3:38:52 PM
Re: Staffing firms
@BrianV: It's really quite a tradeoff to compare either side of the pond, isn't it?  On the one hand, as an American, I can see the benefits of the "right to be forgotten" in this increasingly digital age.  On the other hand, as an American, I am VERY grateful for the speech freedoms and other freedoms that we so often take for granted yet are -- quite frankly -- unavailable in even more democratic EU members like Germany and France.
BrianV290
50%
50%
BrianV290,
User Rank: Apprentice
4/4/2017 | 1:21:38 PM
Re: Staffing firms
Too true. This kind of thing is one of the protections GDPR hopes to afford EU citizens ("the right to be forgotten"). I think eventually we will see similar protections everywhere, and enforcement aside, those orgs that can ID and get rid of PII that they don't need will have a clear advantage over those that can't.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/4/2017 | 8:00:35 AM
Staffing firms
The worst part is if you've ever worked with a staffing firm.  A lot of those jerks hold onto your data in perpetuity.  No.  Matter.  What.

I know a number of people in my professional circle who were pretty peeved at and had brusquely severed their relationships with a particular large staffing firm that shall rename nameless -- and, MANY years later, found their data compromised in a data breach, despite requesting (demanding?) that their information be deleted.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
How Enterprises are Attacking the Cybersecurity Problem
Concerns over supply chain vulnerabilities and attack visibility drove some significant changes in enterprise cybersecurity strategies over the past year. Dark Reading's 2021 Strategic Security Survey showed that many organizations are staying the course regarding the use of a mix of attack prevention and threat detection technologies and practices for dealing with cyber threats.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-35499
PUBLISHED: 2021-10-26
The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim...
CVE-2021-41182
PUBLISHED: 2021-10-26
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now t...
CVE-2021-41183
PUBLISHED: 2021-10-26
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now al...
CVE-2021-41184
PUBLISHED: 2021-10-26
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a...
CVE-2021-41185
PUBLISHED: 2021-10-26
Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may...