Is there a weak link? Is your firewall all patched up? Does it have the latest firmware? Are all ports closed that should be closed? Are the ACL (Access Control Lists) parameters working correctly? Does… Do you have weak security?
Malwarebytes has a good FAQ about the Heartbleed problems we have posted in our own Blog on Oversitesentry as well. Essentially there are online tools (LastPass) to find out if the website you are using is vulnerable.… Media hype on heartbleed – explaining…
First of all, there are many ways a system can become vulnerable, we will not look at the malicious or badly configured machines. We will look at a way to make a vulnerability over time… How does a computer system become vulnerable?
Wired had an article a while ago (January 6th 2014) To understand the problem, you need to understand the embedded systems market. The problem is the chip manufacturers make custom devices with custom parameters, that frequently… Yet another difficult Internet problem: embedded computers are rarely patched
By “casing” can also be called enumeration, where the hacker reviews what type of systems that you have on the Internet. It is the first step in attempting a breach into your infrastructure. Here is… Hackers are casing your computer systems now
PCISecurityStandards.org has a website and it’s response to the Target Data breach: “As part of this security effort, the Council maintains that adherence to and maintenance of the Payment Card Industry Data Security Standard (PCI DSS) is… PCI compliance – what does it entail?
Dark Reading has an interesting article about how Target was compliant with PCI(Payment Card Industry) standards and it was not enough. The Point of Sale terminals were infected with malware specific to Point Of Sale terminals,… Develop new & better security postures – PCI compliance is not enough
On today’s Internet Storm Center Diary : Johannes noticed an odd attack coming from what turned out to be a DVR in China. This is a shape of things to come, unattended devices, which never get patched… Shape of things to come? Bots attacking us?
Unfortunately in this day, it is not enough to have a person on staff to handle your IT work, or even be in charge of Security tasks. How can you be certain that tasks are… Being “secure” what does that mean?
Violent Python is a book by TJ. O’Connor. http://mirror7.meh.or.id/Programming/Violent_Python_A_Cookbook_for_Hackers_Forensic_Ana.pdf It is interesting how Python can use nmap and other opensource tools (metasploit) to probe and review computer systems.
