.jpg)
Commentary
Quick Hits
News
Commentary
NewsQuick Hits
News
News
CommentaryNewsNewsQuick Hits
NewsNews
CommentaryNews
Commentary
@MrSmith01--that may be the case because Target has published a DMARC policy. As more and more brands do so, and move that policy from monitor mode to reject, more and more attackers will be forced to use sister/cousin...
In reply to: Re: DMARC is not going to stop phishing
I might coin it the Storm Cloud! Detecting and containing north/south and east/west bound data in the cloud - especially the one off SaaS sloutions - is tricky at best is seems. Not to mention auditing identities,...
In reply to: Storm Cloud!
That's funny, Marilyn; it seems I *always* have to present my medical ID whenever I go in for a doctor's appointment. I guess it depends where you go.
In reply to: Re: An example > borrow insurance?
One technique that some companies engage in (and consultants advise) is to purposely send "phishing" emails to a random selection of employees each month. If the employee clicks, he is advised that it was a phishing...
In reply to: Honeypot the employees
This was an interesting article and I can see how easy it easy for a company to get hacked. It makes you wonder about all the temps that are hired in a company. Are they really in need of a job or are they on a recon mission. As...
In reply to: Hacking and Loyalty
> People are people. They want to do things more efficiently." In my shop, it takes four weeks and many meetings to arrange for something simple such as a DB server. In the cloud, I can have a DB server...
In reply to: A problem is IT is behind the times
I'm reading Brian Krebs's Spam Nation right now (fascinating read), and yes, it seems like the successful mid-level criminals who would have that kind of information might also be jeopardizing their very lucrative...
In reply to: Re: Is $3 million enough?
Another issue (which I recently wrote about) is the matter of what happens after there is a breach of the data in the shadow IT service? How do you even know that your data were there? The employee would have...
In reply to: And how do you find out?
Except what if the email is from myemail@myc0mpany.com or one of a hundred other variations an attacker could set up? Heck, I just saw a legitimate email for Target that used the domain mail-target.com. You see,...
In reply to: Re: DMARC is not going to stop phishing
Not sure I get what you mean. If someone using myemail@mycompany.com and asking person to give me their logon credentials so I can troubleshoot something, seems like this would work fine. If your point is someone will just...
In reply to: Re: DMARC is not going to stop phishing
@Sara Peters. Thanks for clarifying. Although now I'm appalled that this is a common practice within lenovo machines. The typical end user is most likely unaware and if I were them I would be thoroughly annoyed when I found...
In reply to: Re: Overall Benefit to Superfish and PrivDog
Dark Reading Tech Digest, Dec. 19, 2014Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
