Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts of the PCI DSS3.0 standard is not very specific (since… Fixvirus Show – PCI Compliance Discussion, Patch Rollback
Am working on the next video… In meantime here are some interesting links: Kerberos Hack of MS14-068 and then one can add themselves as Domain admin https://www.trustedsec.com/december-2014/ms14-068-full-compromise-step-step/ How about Alienvault vulnerability http://www.zerodayinitiative.com/advisories/ZDI-14-295/ Has an interesting… Video Log Will Return Saturday –
hacker process explained: Don’t get SVAPEC’d Criminal Hackers use this method: Scan-> Vulnerability Assessment –> Penetrate and Exploit –> Control = SVAPE&C You should do the SVA – Scan–> Vulnerability Assessment –> Mitigate the vulnerability or fix… Fixvirus Show Keurig2.0 hack – Hacker explanation, SVAPE&C
Why do hackers want to hack you? To steal your data and reputation, so they can make money. (a criminal in Romania – $10000 is a lot of money) or Russia – please add all… Why perform your own vulnerability analysis?
2nd show Fixvirus Security Show NewsofDay: POODLE(Padding Oracle On Downgraded Legacy) resurfaces – i.e. Not just the original issue https://www.openssl.org/~bodo/ssl-poodle.pdf – But the new one: https://www.imperialviolet.org/2014/12/08/poodleagain.html F5 has issued a list of products needing patches You can scan your… Vpost – POODLE resurfaces – physical hacks with raspberryPi
We will set up a daily(M-F) Tip-of-day and News-of-day segment Here is the first one – about tomorrows Patch Tuesday and plan for next year – replace old machines/ AV software replace/upgrade. Always better to… The Inaugural Fixvirus Security Show is uploaded
Our Blog at Oversitesentry.com goes over in some detail the new XSS attack vector. An exifdata image could include scripts that may affect you or your website visitors in unimagined ways. Only the evil hackers with… Cross Site Scripting(XSS) Zero day attack
It means anyone with Internet can email you anywhere in the world – that is a good thing (it may not be that useful if you have a business in Saint Louis, unless one exports)… Global Internet – what does it really mean?
Securosis discusses the “CloudSOC” And as usual one has to decide what they will protect – is your data on the cloud? Where is your data? I liked this comment: “You can take some hints… CloudSOC – Cloud Security Operations Center
Why audit your computer? An ethical hacker can scan, then “attack” your computer or network and then tell you what is going on with any vulnerabilities. Such as you say? How about Ecigs that give… Why ask for vulnerability scan?