Attacks/Breaches
11/25/2013
11:06 AM
John Klossner
John Klossner
Commentary

Cartoon: You Might Be A Security Expert If...

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
12/2/2013 | 8:09:14 AM
Re: Not crazy but....
J_Brandt.That's a great point about injecting a healthy dose of paranoia as part of a corporate security awareness program. What have you found to be the right amont of scare tactics in user security training. When does too much paranoia seem crazy and counter productive?
J_Brandt
50%
50%
J_Brandt,
User Rank: Apprentice
11/27/2013 | 5:04:09 PM
Re: Not crazy but....
Paranoia isn't just for security professionals.  A healthy security awareness program for users looks to promote a little bit of paranoia in everyone doesn't it?
Susan Fogarty
50%
50%
Susan Fogarty,
User Rank: Apprentice
11/26/2013 | 10:39:49 AM
Re: Not crazy but....
Unfortunately I think it is true, especially when you're talking about corporations that are potential targets because they have data that could be valuable in many different ways. I know several mobile security consultants who advise IT managers to start with the assumption that any device has been breached, and go from there in protecting enterprise data and apps. It's a jungle out there!
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
11/26/2013 | 7:57:07 AM
Not crazy but....
Funny cartoon but is it true? Is paranoia now a part of the job description for IT security professionals? Or maybe I am  just being paraonoid.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0192
Published: 2015-07-02
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.

CVE-2015-1914
Published: 2015-07-02
IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.

CVE-2015-1916
Published: 2015-07-02
Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.

CVE-2015-3157
Published: 2015-07-02
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVE-2015-3202
Published: 2015-07-02
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

Dark Reading Radio
Archived Dark Reading Radio
Marc Spitler, co-author of the Verizon DBIR will share some of the lesser-known but most intriguing tidbits from the massive report