Episode Details

It is that time of year of W-2 Scams

• There have been multiple reports of companies releasing W-2s through email scams.
• Link: http://cbs4indy.com/2017/01/31/scammer-gets-copy-of-w-2-form-for-every-scottys-brewhouse-employee-after-data-breach/

Cops use pacemaker data to charge homeowner with arson, insurance fraud

• Becoming a common occurance with IoT devices.  If you are creating these devices, are you considering:
• • Storage of the data
  • Privacy policy
  • Education around how data is stored and could be used
• From an enterprise perspective:
• • How many of these devices are inside your organization
  • How do any of these tools factor into your own forensics approaches?
  • Have you explored any of the liabilities
  • What if you were subpoenaed for the information in your IoT?
• Links: http://www.networkworld.com/article/3162740/security/cops-use-pacemaker-data-as-evidence-to-charge-homeowner-with-arson-insurance-fraud.html
• http://www.abajournal.com/news/article/data_on_mans_pacemaker_led_to_his_arrest_on_arson_charges/
• Related Link: http://fortune.com/2017/02/04/amazon-alexa-phone-office/
• • “it's evident that Amazon is determined to embed Alexa in mobile devices and in offices.”

Facebook rolls out 2FA Hardware

• A move that goes past SMS. Not the first time we have seen this technique (many sites support Yubikey). What type of adoption will we see?
• Can we check to see if facebook has stock in hardware key companies?
• • Or what was that selection process like?
• Enterprise: how does this work in your organization?