“Do the right thing” = Philotimo PCI compliance best practices(from page 13 PCI DSS 3.0 doc): Monitoring of security controls—such as firewalls, intrusion-detection systems/intrusion-prevention systems (IDS/IPS), file-integrity monitoring (FIM), anti-virus, access controls, etc.—to ensure they… Philotimo(“do the right thing”) your Network
On News of Day I discuss http://www.darkreading.com/operations/5-pitfalls-to-avoid-when-running-your-soc-/a/d-id/1318218 Specifically: “Our goal is to protect our critical assets, quickly know when they have been compromised and respond with immediate action to contain and eradicate the threat. If anyone… Fixvirus Security Show Jan2
2014 reviews: http://oversitesentry.com/?p=1196 the post I discussed in the video… Get ready for 2015. Not if you get hacked but “when” so get ready for more attacks. Get your incident response ready – When you get hacked… Fixvirus Security Show – review 2014/ preview 2015
http://money.cnn.com/2014/08/18/technology/security/hospital-chs-hack/ CNN story of 4.5 mil records of Community Health Systems – why would hackers want these records? Because the records have ss#, names and addresses. ” But this time, the hackers stole patient data… Who is next hacking target in 2015? Hospitals?
Here is one of the latest on http://fortune.com/2014/12/20/sony-pictures-entertainment-essay/ the Nork story. My Fixvirus Dec23 show video: Some of posts I discussed on the show: http://oversitesentry.com/cyberattack-lessons/ Here is what happened in Home Depot hack (56 mil emails… Fixvirus show Dec23 on North Korea attack on Sony
Is risk management philosophy as we know it good enough? What do we know in the current risk management philosophy? Categorize all systems and set up a level of risk number. Then set up an… The New Year means improve security or else
NewsofDay: On CMS systems review from this post: http://securityintelligence.com/cms-hacking-2014-by-the-numbers/ Also for TipofDay: PCI compliance the new page created at Oversitesentry (My blog) http://oversitesentry.com/pci-compliance/
Today’s show discusses News of day in the Threatpost blog about Coolreaper: A backdoor is when software runs a piece of code that you are not aware of, and so CoolReaper phones seem to have malware built… Fixvirus Security show – Red team versus Blue Team
We are discussing in news of day – the sad story of retailers not having proper cyber security from Sophos survey: http://www.sophos.com/en-us/press-office/press-releases/2014/12/72-percent-of-uk-retailers-not-cyber-secure.aspx A lot of retailers do not know or have not for some reason implemented up-to-date… Fixvirus Security Show – NextGen FireWall (NGFW)
Here is the news link discussed in the news of day: http://dealbook.nytimes.com/2014/12/13/small-bank-in-kansas-is-a-financial-testing-ground/?_r=0 Hopefully they will review the security implications of this development. At the tip of Day segment – we are reviewing what the… Fixvirus Security show Dec15 – explain red team role in computer security