Content by Suparna Goswami

Dow Jones Data Exposed on Public Server

Suparna Goswami  •  February 28, 2019

An "authorized third party" exposed a Dow Jones database with more than 2.4 million records of risky businesses and individuals on a public server without password protection. The incident points to the importance of proper vendor risk management, security experts say.

Fact Checking: Sizing Up Facebook's Efforts

Suparna Goswami  •  February 27, 2019

Facebook's effort to stem the flow of fake news globally has been ineffective, allege some fact checkers who have collaborated with the social media giant to identify and debunk false stories. Is the social media giant merely conducting a public relations exercise?

Facebook's Fact-Checking Efforts: Can They Be Effective?

Suparna Goswami  •  February 14, 2019

It's far from clear whether Facebook's latest move to curb fake news in India ahead of the upcoming elections by expanding its engagement with third-party fact checkers will have much impact.

Will Huawei Play a Key Role in 5G Network Development?

Suparna Goswami  •  January 30, 2019

Despite early indications that India would not use technology from Chinese telecom giant Huawei in its program to build a 5G network, because of security concerns, many security experts now predict the government likely will reverse itself and allow the use of that technology to help hold down costs.

Fileless Malware: What Mitigation Strategies Are Effective?

Suparna Goswami  •  January 28, 2019

As the threat of fileless malware continues to persist worldwide, security professionals are devising targeted risk management strategies.

Quantum Computing: Sizing Up the Risks to Security

Suparna Goswami  •  January 16, 2019

Within the next five to 10 years, quantum computing will get so powerful that it could be used to break encryption on the fly, predicts Steve Marshall, CISO at U.K.-based Bytes Software Services.

Why Software Bugs Are So Common

Suparna Goswami  •  January 15, 2019

The recent exposure of customer data on the website of Singapore Airlines as a result of a software bug is further evidence of the persistent challenge of adequately addressing security during the development stage.

BEC Scam Leads to Theft of $18.6 Million

Suparna Goswami  •  January 11, 2019

In a case of business email compromise, Chinese hackers stole $18.6 million from the Indian arm of Tecnimont SpA, an Italian engineering company, through an elaborate cyber fraud scheme that included impersonating the firm's chief executive.

Vietnam's 'Cybersecurity' Law Says Little on Security

Suparna Goswami  •  January 10, 2019

On Wednesday, just days after a new "cybersecurity" law took effect, Vietnam alleged that Facebook has violated the law by allowing users to post anti-government comments on the platform. The so-called cybersecurity law actually speaks little about IT security measures.

Encryption: Avoiding the Pitfalls That Can Lead to Breaches

Suparna Goswami  •  January 8, 2019

The Marriott mega-breach is calling attention to whether organizations are storing too much data and whether they're adequately protecting it with the proper encryption steps. Experts offer insights on making the right moves.

Moving to a Next-Generation SOC: Critical Factors

Suparna Goswami  •  January 7, 2019

Organizations looking to migrate to a next-generation security operations center must first carefully assess any problems they are facing with current security technology, says Vikram Mehta, associate director of information security at MakeMyTrip, an India-based online ticketing portal.

Making Internal Audits More Relevant

Suparna Goswami  •  December 13, 2018

How can internal audits be improved and made more meaningful? Prasanna Bharatan, internal auditor at the pharmaceutical company Wockhardt, outlines the important steps to take.

Improving Vendor Risk Management

Suparna Goswami  •  December 13, 2018

Providing vendors with visibility to a company's systems makes the vendor management process far more complicated, says Sunil Chandiramani of NYKA Advisory Services.

Using Blockchain for Authentication

Suparna Goswami  •  November 27, 2018

In an interview, Rohas Nagpal, a chief architect at Primechain Technologies, describes how blockchain can be used for authentication and pinpoints areas where blockchain is not the ideal technology. He'll be a featured speaker at ISMG's Security Summit in Mumbai Thursday.

Revamping Authentication With Automation and ML

Suparna Goswami  •  November 20, 2018

Automation and machine learning can be leveraged to make identity-driven authentication a smoother process, says Saryu Nayyar, co-founder and CEO at Gurucul, a behavioral analytics company.