Brian Krebs has updated his Blog: and his famous picture (how much is your hacked computer worth): http://krebsonsecurity.com/2015/01/fbi-businesses-lost-215m-to-email-scams/ IC3 data – Internet Crime http://www.ic3.gov /about/default.aspx The BEC is a global scam with subjects and victims in… What is your email address worth to Criminal Hackers?
Pentesting every 3 months for entities with more than 20k transactions annually for less than 20k transactions. Why do you need to pentest? Because things happen, and it is good to review your security profile… Have some Philotimo – setup PCI compliance
We are explaining a little more about pentesting and the service that we have (Sigma Scan) in tip of day. In News of day we discuss #OpFrance where the political hackers are trying to attack… Security videoshow about #OpFrance and Sigma Scan
“Do the right thing” = Philotimo PCI compliance best practices(from page 13 PCI DSS 3.0 doc): Monitoring of security controls—such as firewalls, intrusion-detection systems/intrusion-prevention systems (IDS/IPS), file-integrity monitoring (FIM), anti-virus, access controls, etc.—to ensure they… Philotimo(“do the right thing”) your Network
http://money.cnn.com/2014/08/18/technology/security/hospital-chs-hack/ CNN story of 4.5 mil records of Community Health Systems – why would hackers want these records? Because the records have ss#, names and addresses. ” But this time, the hackers stole patient data… Who is next hacking target in 2015? Hospitals?
Here is one of the latest on http://fortune.com/2014/12/20/sony-pictures-entertainment-essay/ the Nork story. My Fixvirus Dec23 show video: Some of posts I discussed on the show: http://oversitesentry.com/cyberattack-lessons/ Here is what happened in Home Depot hack (56 mil emails… Fixvirus show Dec23 on North Korea attack on Sony
Is risk management philosophy as we know it good enough? What do we know in the current risk management philosophy? Categorize all systems and set up a level of risk number. Then set up an… The New Year means improve security or else
Today’s show discusses News of day in the Threatpost blog about Coolreaper: A backdoor is when software runs a piece of code that you are not aware of, and so CoolReaper phones seem to have malware built… Fixvirus Security show – Red team versus Blue Team
Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts of the PCI DSS3.0 standard is not very specific (since… Fixvirus Show – PCI Compliance Discussion, Patch Rollback
hacker process explained: Don’t get SVAPEC’d Criminal Hackers use this method: Scan-> Vulnerability Assessment –> Penetrate and Exploit –> Control = SVAPE&C You should do the SVA – Scan–> Vulnerability Assessment –> Mitigate the vulnerability or fix… Fixvirus Show Keurig2.0 hack – Hacker explanation, SVAPE&C