Easy Shield business risk control, the weekly newsletter reported notable security technologies and events, including, but not limited to, content security, mobile security, business security and network security to help businesses be vigilant, avoid these like a small real big, healthy development of the business impact Security Risk.
1, "the network information content of ecological management regulations" issued
From the micro-channel public network number do believe the message, "Network ecological management information content provision" has been the State Internet Information Office room at the executive meeting, is hereby promulgated, March 1 2020 implementation.
2, failure to fulfill three years in prison and other information network security management obligations shall be liable to punishment
Since November 1, 2019, the joint Supreme People's Procuratorate recently issued a "Supreme People's Court, Supreme People's Procuratorate on the handling of criminal cases of illegal use of information networks, cybercrime and other information to help explain a number of issues of applicable law" ( hereinafter referred to as the "interpretation") formally implemented.
Internet service provider does not fulfill the information network security management obligations under the laws and administrative regulations, the regulatory authorities ordered to take corrective measures and refuses to make corrections, three years imprisonment, criminal detention or control, concurrently or fined.
3, "2019 Internet Crime Control Prevention White Paper" released
December 13, the Tenth China Information Security Conference and password law rule the high-end forum was successfully held in Beijing. During the meeting, Baidu Third Research Institute of Ministry of Public Security and Law Research Center jointly issued the "2019 White Paper on cyber crime prevention governance", around the size of network production and distribution of black, the traditional cybercrime types and characteristics, new technologies and new formats cybercrime types and characteristics, treatment recommendations black production network expansion and so on.
4, Rooster Teeth Productions data was compromised, hackers user payment information
Rooster Teeth Productions is a US entertainment company, known for its documentaries. Recently, it suffered a data breach, hackers buy merchandise in the company's online store user's credit card and other payment data. The main attacker is to implant malicious script online store checkout page, under the control of the attacker will be redirected to the fake shoppers payment page.
5, 400 research enterprise IT decision-makers: increased security budgets, take into mixed IT environment of choice
87% of companies will increase in the next year the average security budget amounted to 22%. Among them, staff costs accounted for more than one third, and there is a rising trend. Funds for the purchase of 43% of security tools, but with managed services and increasing personnel costs, this proportion declined. Most companies (57%) will be the main work load is transferred from the local environmental resources and infrastructure to a hybrid IT environment, in an integrated manner using the local system and the local cloud / hosting resources. 19% of people are turning to non-local public cloud environments, including IaaS, PaaS, SaaS.
6, this year, Beijing police cracked the case involving network DDoS attacks, more than 7,800
This year, the Beijing Municipal Public Security Bureau in accordance with the unified deployment of the "2019 net net" special action of Ministry of Public Security, for infringement of citizens' personal information, hacking damage, phishing, network "pornography" and other prominent criminal networks involved in conduct sustained combat. Up to now, cracked a total of more than 7800 cases involving network, arrested more than 8,600 suspects.
7, Facebook announced the allocation of $ 130 million set up an independent "court shantie"
According to foreign media news, Facebook on Thursday announced it would pay $ 130 million operations a separate content regulation Council, but said this year will not publish a list of all the members of this Council.
8, the first batch of App Education announced the list of the record: New Oriental, VIPKID, small box in column technology
From the education of mobile Internet applications record management Web site, the first batch of educational App for the record list has been made public, including New Oriental, VIPKID English, listed NetEase Youdao dictionary, box of science and technology App in the list.
9, due to collect user data Google removed Avast and AVG extension
Avast was found a large collection of user data and sell it to third parties. This problem was first author Wladimir Palant Adblock Plus disclosed, he found that these extensions collected information on more than its needs, including detailed user browsing history, Avast can use this information to know how many times a user opens the browser, in a page how long to stay. Mozilla and Opera to take action under the relevant frame after expansion. Google is currently only in the Chrome Web Store retains an extension of AVG AVG Online Security.
10, Instagram will combat bullying with AI
36kr news, Instagram has announced that when the user is about to publish photos or videos that contain potentially offensive title, Instagram will issue a warning to the user. When the AI tool judge harmful content posted by users, a warning will pop up and encourage the user to edit the title, users can ignore. Instagram indicates that the feature is designed to encourage people to rethink harmful comments may be published, and to combat cyber bullying. This new feature is currently being introduced country-specific, and will be deployed in the next few months inner worldwide.
11, the Ministry informed the first batch of acts against the user rights APP, such as Tencent QQ product in column 41
December 19, the Ministry issued "against APP on user rights behavior (first) Bulletin", as of now, there are 41 funds exist APP illegal collection, use your personal information, unreasonable request user permissions for the user account logout obstacles and other problems, the rectification is not completed. Among them, Tencent QQ, QQ reading, Sina sports in the column.
