RealclearTechnology has an interesting article (the 4 headings below is my synthesis of the article) It is based out of the Cisco projections (linked in article).… Read More »4 Future Internet trends and how they affect Security
Since we advocate testing your IT services and devices, what if your organization has cloud services? How about Amazon EC2? AWS compliance keep this in mind.… Read More »Testing Cloud services
NIST has a computer Security division and they have revamped their The On-line Database: Access and Control policy and procedures There are many good areas to review… Read More »National Institute of Standards and Technology (NIST) has new standards
KrebsonSecurity has the story (a good security blog) a 24 year old Viet-Nam (Ngo) national helped create a situation where data from Experian was sold… Read More »Experian – one of the credit reporting agencies was duped
As noted by us-cert.gov there are many methods of taking advantage of SQL injection opening in a website. The real problem is when companies don’t admit… Read More »SQL Injection is a common hacker method to attack
NVD or at the http://nvd.nist.gov/home.cfm NIST is the National Institute of Standards and Technology. NVD contains: 62145 CVE Vulnerabilities 231 Checklists 248 US-CERT Alerts… Read More »National Vulnerability Database (NVD)
Yes Drupal version 7.x – 3.5 now has a remote command injection vulnerability. Packetstormsecurity has a page on it. patch to the latest software (May 3rd… Read More »Drupal vulnerability – patch your software
Have you checked wifi signals as to their effectiveness? Is your wifi router/ access point using good encryption technology? Wardriving: Peter Shipley coined the term “wardriving”… Read More »Wardriving: when a hacker checks wifi signals
Here are the CVE vulnerablities for April 2014 so far. CVE (Common Vulnerabilities and Exposure) vulnerability data are taken from National Vulnerability Database (NVD) xml feeds provided… Read More »CVE vulnerabilities for April – 2014
CVEdetails has a list of all CVE’s This is a vulnerability that is part of the infrastructure of the Internet webservers (Apache specifically) But specifically this… Read More »Apache struts vulnerability – not as high profile, but still dangerous