News
News
News
CommentaryNews
Quick HitsNews
Commentary
Commentary
CommentaryQuick Hits
News
CommentaryNewsQuick HitsNewsNews
Even with the best end user training you are doing well to get 50% effectiveness. Supplement the end user training with removing the chance that they user will click on the spam link with a secure email gateway. ...
In reply to: Reduce the attack surface by taking out the user (somewhat)
Although the security concerns people have may not be that valid, the worrying part for me is what his sort of news does to the confidence people have in US businesses. Despite already big impacts on services and sales within...
In reply to: Knock on effects
Agree . Not only Hard Disk or USB devices, printer hacked in their firmware may give away path to the cover network, same things on CD, and other devices we have in the network such as switches, if you hacked hard disk you...
In reply to: Re: Infected conference materials
I agree, let's not accept anything from anybody. :--)). Remember nothing is free. I do not think vendors have any incentive for having, unless somebody else forces them to do so.
In reply to: Re: Infected conference materials
I hear you. It is not only USB device problem. Any device connected any other decide is a risk to each other one way or another. They both need to be secure. If you have device at the firmware level no need to talk about...
In reply to: Re: Infected conference materials
If malware is in the firmware then it is most likely embedded into those ROM devices where it is read only unless you touch the firmware and reprogram it. Malware in firmware is a good way of hacking a system :--))
In reply to: Malware in the firmware
@aws0513, you hit on a key problem of the inherent challenge of taking technology away from users once the horse has left the barn. And even if you do airgap a system, there are still risks to it, such as an infected CD-ROM...
In reply to: Re: Infected conference materials
I believe the concept of security should start right from the elementary school. The kids in school use computers. They should be given security classes as well. This process in the long run will inculcate the security...
In reply to: Re: Security culture
It is the classic "what is old is new again" scenario. Moreover, the ubiquity of USB storage devices has made it very difficult to proactively mitigate USB storage device risks. Even though it is a policy at my current...
In reply to: Re: Infected conference materials
You have to start recording at the beginning of the presentation because if you find it was worth recording at the end it's too late. There is no cost for speculative recording. The next frame of the cartoon will show a...
In reply to: Re: Been there..
Attackers will adapt to any countermeasure, but they will have to absorb new costs, take on new risks and settle for smaller returns. That sounds like an effective countermeasure for the defenders, to me. Anything that...
In reply to: Re: DMARC is not going to stop phishing
the title of your essay would better be: "No Bullets for Security?" the reason is simple: if we keep on doing things the way we have we will continue to get the same results: hackers will makes fools of us all. the first...
In reply to: No Bullets for Security?
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
