Bloomberg screenshot this morning. The news reports are out – a Stuxnet malware was installed in your firmware thus infecting your hard drives and you cant do anything about it. the news reports are… What If the Hacker Is In Your Network?
People keep asking me… what can someone possibly use on my computer, I have nothing on it. We are trying to explain this with some images The hacked computer could have a value of about… What is Your Hacked Computer Worth?
First we made a special short video on what an Ethical hacker does: Second the Video for the Fixvirus Security show: News of Day is about this week’s patch Tuesday, there are several critical patches… New videos – what is an Ethical Hacker and Thursday Fixvirus Security show
What does PCI compliance really mean? There are similarities with ISO27001, PCI compliance is set up as an audit of the IT department with a specific emphasis of credit card security as well. Whereas ISO27001… PCI Compliance Affects Legal Liabilities
Sophos has a good article detailng some potential methods the hackers can use to extort money out of companies: Nakedsecurity Sophos Blogsite This is the important part: 1. Hackers hack and penetrate your systems, including customer… Ransomware on Your Databases Could be a Catastrophe
Brian Krebs has updated his Blog: and his famous picture (how much is your hacked computer worth): http://krebsonsecurity.com/2015/01/fbi-businesses-lost-215m-to-email-scams/ IC3 data – Internet Crime http://www.ic3.gov /about/default.aspx The BEC is a global scam with subjects and victims in… What is your email address worth to Criminal Hackers?
Pentesting every 3 months for entities with more than 20k transactions annually for less than 20k transactions. Why do you need to pentest? Because things happen, and it is good to review your security profile… Have some Philotimo – setup PCI compliance
Risk analysis and patch management is important. We discuss that on this day, since there were 2 Adobe vulnerabilities that we discuss on our blog: http://oversitesentry.com/patches-i-dont-need-those-stinkin-patches/ Patch Management is when you decide with risk based… Patch Management is important
This morning (1/21/15) attended ISACA (previously the Information Systems Audit and Control Association) meeting: http://www.isaca.org/chapters5/Saint-Louis/Pages/default.aspx The past present and future of Web Application Security by Christopher Boyd Good quote sometimes I talk to the… Excellent ISACA event on Web Application Security
We are explaining a little more about pentesting and the service that we have (Sigma Scan) in tip of day. In News of day we discuss #OpFrance where the political hackers are trying to attack… Security videoshow about #OpFrance and Sigma Scan
