.jpg)
News
Quick Hits
News
Commentary
Commentary
CommentaryQuick Hits
News
CommentaryNewsQuick Hits
NewsNews
CommentaryNewsNews
Stories like these make me paranoid to ever again accept a flash drive from a vendor at a conference!
In reply to: Infected conference materials
This is the difference between security awareness in certain offices (the C-suite, the compliance/audit department, the general counsel's office, etc.) and security culture. It comes down to convincing everyone,...
In reply to: Security culture
There is a growing awareness that Cyber Intelligence is more than a sum of all threat feeds! Unfortunately, for many, adopting an "intelligence-based" Cyber security mindset seems difficult. In practice, however, it is far...
In reply to: Cyber Intelligence and knowing what you know!
Reminds me of a story a friend recently told me. Sitting at an airport gate not too long ago, she watched as a mortgage executive sitting next to her with a bag full of sensitive PII documents (FNMA 1003s and the like)...
In reply to: Watch your back low-tech-wise.
An important yet oft overlooked aspect of a good patch management strategy: implement everything in a testbed first. Test everything with everything. Otherwise, you could really screw things up -- especially...
In reply to: Testing patches
@MrSmith01--that may be the case because Target has published a DMARC policy. As more and more brands do so, and move that policy from monitor mode to reject, more and more attackers will be forced to use sister/cousin...
In reply to: Re: DMARC is not going to stop phishing
I might coin it the Storm Cloud! Detecting and containing north/south and east/west bound data in the cloud - especially the one off SaaS sloutions - is tricky at best is seems. Not to mention auditing identities,...
In reply to: Storm Cloud!
That's funny, Marilyn; it seems I *always* have to present my medical ID whenever I go in for a doctor's appointment. I guess it depends where you go.
In reply to: Re: An example > borrow insurance?
One technique that some companies engage in (and consultants advise) is to purposely send "phishing" emails to a random selection of employees each month. If the employee clicks, he is advised that it was a phishing...
In reply to: Honeypot the employees
This was an interesting article and I can see how easy it easy for a company to get hacked. It makes you wonder about all the temps that are hired in a company. Are they really in need of a job or are they on a recon mission. As...
In reply to: Hacking and Loyalty
> People are people. They want to do things more efficiently." In my shop, it takes four weeks and many meetings to arrange for something simple such as a DB server. In the cloud, I can have a DB server...
In reply to: A problem is IT is behind the times
I'm reading Brian Krebs's Spam Nation right now (fascinating read), and yes, it seems like the successful mid-level criminals who would have that kind of information might also be jeopardizing their very lucrative...
In reply to: Re: Is $3 million enough?
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
