It is important to patch your software, I know it is tedious, and sometimes (for Windows) it requires a reboot. for WordPress one may need to get out of the current tasks and perform the… New WordPress 4.0 ready to be upgraded
There are many news reports of Celebrities getting their accounts hacked and then pictures were taken in their archives of a compromising nature. It is evident that everyone needs to have Two Factor Authentication (2FA),… iCloud account hacks could have been averted
The security industry is usually very quiet about how security affects their products. So in the new 3rd Quarter IBM threat intelligence Quarterly for 3rd quarter. the following 2 charts are very interesting: April 8, 2014 is… The effect of Heartbleed attacks on IBM customers
Hacker attacks occur for many reasons: #1 Highest reason for an attack is to make money from the attack 8/19 Hackers hack Medical company – 4.5 million data sets stolen 8/5 Synology devices get ransomware 8/2 Jimmy… Why spend money on Security prevention?
BloombergBusinessweek article 7/17/2014 a. Discusses how Russian hackers infiltrated the NASDAQ network, b. Placed malware on one of the NASDAQ webservers. c. Thus creating a classic “watering hole” attack – where customers of NASDAQ were attacked… Nasdaq Hack teaches network vigilance
Patch Tuesday is the day Microsoft has deemed to give us their vulnerability fixes. It has to be done some time and so it is done on a Tuesday (right after Monday) and still in… Patch Tuesday is here 7/8/14
RealclearTechnology has an interesting article (the 4 headings below is my synthesis of the article) It is based out of the Cisco projections (linked in article). #1 issue there will be 4Billion Internet users, and 52%… 4 Future Internet trends and how they affect Security
Since we advocate testing your IT services and devices, what if your organization has cloud services? How about Amazon EC2? AWS compliance keep this in mind. It is as Amazon AWS(Amazon Web Services) says it is… Testing Cloud services
KrebsonSecurity has the story (a good security blog) a 24 year old Viet-Nam (Ngo) national helped create a situation where data from Experian was sold to online identity theft rings. The company Court Ventures helped… Experian – one of the credit reporting agencies was duped
As noted by us-cert.gov there are many methods of taking advantage of SQL injection opening in a website. The real problem is when companies don’t admit to the breaches occuring. At Security magazine they did a survey189,650 respondents:… SQL Injection is a common hacker method to attack