Here is one of the latest on http://fortune.com/2014/12/20/sony-pictures-entertainment-essay/ the Nork story. My Fixvirus Dec23 show video: Some of posts I discussed on the show: http://oversitesentry.com/cyberattack-lessons/ Here… Read More »Fixvirus show Dec23 on North Korea attack on Sony
Is risk management philosophy as we know it good enough? What do we know in the current risk management philosophy? Categorize all systems and set… Read More »The New Year means improve security or else
NewsofDay: On CMS systems review from this post: http://securityintelligence.com/cms-hacking-2014-by-the-numbers/ Also for TipofDay: PCI compliance the new page created at Oversitesentry (My blog) http://oversitesentry.com/pci-compliance/
Today’s show discusses News of day in the Threatpost blog about Coolreaper: A backdoor is when software runs a piece of code that you are not aware… Read More »Fixvirus Security show – Red team versus Blue Team
We are discussing in news of day – the sad story of retailers not having proper cyber security from Sophos survey: http://www.sophos.com/en-us/press-office/press-releases/2014/12/72-percent-of-uk-retailers-not-cyber-secure.aspx A lot of retailers do… Read More »Fixvirus Security Show – NextGen FireWall (NGFW)
Here is the news link discussed in the news of day: http://dealbook.nytimes.com/2014/12/13/small-bank-in-kansas-is-a-financial-testing-ground/?_r=0 Hopefully they will review the security implications of this development. At the… Read More »Fixvirus Security show Dec15 – explain red team role in computer security
Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts… Read More »Fixvirus Show – PCI Compliance Discussion, Patch Rollback
Am working on the next video… In meantime here are some interesting links: Kerberos Hack of MS14-068 and then one can add themselves as Domain… Read More »Video Log Will Return Saturday –
hacker process explained: Don’t get SVAPEC’d Criminal Hackers use this method: Scan-> Vulnerability Assessment –> Penetrate and Exploit –> Control = SVAPE&C You should do the SVA… Read More »Fixvirus Show Keurig2.0 hack – Hacker explanation, SVAPE&C
Why do hackers want to hack you? To steal your data and reputation, so they can make money. (a criminal in Romania – $10000 is… Read More »Why perform your own vulnerability analysis?