A Framework for Cyber Security Insurance

New paper: "Policy measures and cyber insurance: a framework," by Daniel Woods and Andrew Simpson, Journal of Cyber Policy, 2017. Abstract: The role of the insurance industry in driving improvements in cyber security has been identified as mutually beneficial for both insurers and policy-makers. ...

August 30, 2017 – Morning Cyber Coffee Headlines – “Eiffel Tower” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 30, 2017 - Headlines Carbon Black in the News: Carbon Black names Marco...

August 22, 2017 – Morning Cyber Coffee Headlines – “Hamilton” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 22, 2017 - Headlines The Intelligence Community’s Top 3 Cybersecurity...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Roombas will Spy on You

The company that sells the Roomba autonomous vacuum wants to sell the data about your home that it collects. Some questions: What happens if a Roomba user consents to the data collection and later sells his or her home -- especially furnished -- and now the buyers of the data have a map of a home...

Cyber Insurance Rates to Rise – What Should I Do?

Organizations manage risk in three ways: they accept it, they take out insurance against it, or they take active measures to diminish its potential impact. These active measures commonly include deploying or enhancing or removing technology, updating policies and procedures, instituting training...

preferred-stock.com XSS vulnerability

Vulnerable URL: http://www.preferred-stock.com/screener.php?exchange=-=Insurancequote=all=1"...

bangkokinsurance.com XSS vulnerability

Vulnerable URL: http://www.bangkokinsurance.com/home/garagedetail.asp?garageid=73&s3;=1"...

June 27, 2017 – Morning Cyber Coffee Headlines – “Helen Keller” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 27, 2017 - Headlines 'Petya' ransomware attack strikes companies across...

mpi.mb.ca XSS vulnerability

Vulnerable URL: https://www.mpi.mb.ca/en/Reg-and-Ins/Insurance/Trip/Rental/Pages/rentalcarinsurance.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

insurance-forums.net XSS vulnerability

Vulnerable URL: http://www.insurance-forums.net/forum/life-insurance-forum/difference-between-traditional-term-mortgage-protection-term-t88905.html/...

moneycontrol.com XSS vulnerability

Open Bug Bounty ID: OBB-246881 Description| Value ---|--- Affected Website:| moneycontrol.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-7818

Untrusted search path vulnerability in Installers for Specification check program social insurance Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to...

Sunshine Car Life APP has information leakage vulnerability

Sunshine Car Life APP is a one-stop car owner service platform designed to provide you with authoritative national violation query, car insurance price calculation, trip management, claims service, and so on. There is an information leakage vulnerability in Sunshine Car Life APP, because the logi...

java deserialization vulnerability in the insurance intermediary business management system of BUPA Financial Technologies Ltd.

Insurance Intermediary Business Management System IBMS of BUPA Financial Technology Co., Ltd. is an insurance intermediary informatization management platform with dual functions of supervision and industry management. A java deserialization vulnerability exists in the insurance intermediary...

hyundaimotorinsurance.co.uk XSS vulnerability

Vulnerable URL: https://www.hyundaimotorinsurance.co.uk/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

daciacarinsurance.co.uk XSS vulnerability

Vulnerable URL: https://www.daciacarinsurance.co.uk/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

mitsubishimotorinsurance.co.uk XSS vulnerability

Vulnerable URL: https://www.mitsubishimotorinsurance.co.uk/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

landroverinsurance.com XSS vulnerability

Vulnerable URL: https://www.landroverinsurance.com/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

CVE-2017-5919

The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...