Cloud

3/20/2018
10:32 AM
50%
50%

Facebook CISO Stamos to Depart from the Social Media Firm: Report

Stamos will remain in his position through August, according to a report in The New York Times.

Alex Stamos, the chief information security officer at Facebook, plans to leave the company in August amid turmoil and disputes at the top levels of the company over disclosing details in nation-state abuse of the social media platform as well as other issues, according to a report in The New York Times.

In December, Stamos' daily duties were assigned to other Facebook managers, and his security team of 120 is now down to three people. The security team was moved to the product and infrastructure divisions, the report said. Stamos, the former CISO at Yahoo, had pressed Facebook to be more open about Russian interference with its social media platform and had advocated for restructuring at the company to tackle security and privacy issues - but he met resistence internally.

He tweeted yesterday after The Times story published:

"To be clear, the security team has never been prevented or discouraged from investigating any Russian activity by any executives."

And:

"Despite the rumors, I'm still fully engaged with my work at Facebook. It's true that my role did change. I'm currently spending more time exploring emerging security risks and working on election security."

Read the full article here.

Interop ITX 2018

Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the security track here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
3/21/2018 | 10:23:01 AM
Pity
Kinda sad that Stamos is being set up as the scapegoat here for Facebook working exactly the way it's designed to work -- despite his warnings that Facebook working exactly the way it's designed to work means that it's open to this kind of nation-state interference of this caliber. Seems like other head honchos except Stamos should get the axe -- if anyone.
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Data Privacy Careers Are Helping to Close the IT Gender Gap
Dana Simberkoff, Chief Compliance and Risk Management Officer, AvePoint, Inc,  8/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-1394
PUBLISHED: 2018-08-20
Multiple IBM Rational products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138425.
CVE-2018-1517
PUBLISHED: 2018-08-20
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
CVE-2018-1656
PUBLISHED: 2018-08-20
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
CVE-2015-5160
PUBLISHED: 2018-08-20
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
CVE-2015-5243
PUBLISHED: 2018-08-20
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.