.jpg)
Commentary
Quick Hits
News
Commentary
NewsQuick Hits
News
News
CommentaryNewsNewsQuick Hits
NewsNews
CommentaryNews
Commentary
That's funny, Marilyn; it seems I *always* have to present my medical ID whenever I go in for a doctor's appointment. I guess it depends where you go.
In reply to: Re: An example > borrow insurance?
One technique that some companies engage in (and consultants advise) is to purposely send "phishing" emails to a random selection of employees each month. If the employee clicks, he is advised that it was a phishing...
In reply to: Honeypot the employees
> People are people. They want to do things more efficiently." In my shop, it takes four weeks and many meetings to arrange for something simple such as a DB server. In the cloud, I can have a DB server...
In reply to: A problem is IT is behind the times
I'm reading Brian Krebs's Spam Nation right now (fascinating read), and yes, it seems like the successful mid-level criminals who would have that kind of information might also be jeopardizing their very lucrative...
In reply to: Re: Is $3 million enough?
Another issue (which I recently wrote about) is the matter of what happens after there is a breach of the data in the shadow IT service? How do you even know that your data were there? The employee would have...
In reply to: And how do you find out?
Except what if the email is from myemail@myc0mpany.com or one of a hundred other variations an attacker could set up? Heck, I just saw a legitimate email for Target that used the domain mail-target.com. You see,...
In reply to: Re: DMARC is not going to stop phishing
Not sure I get what you mean. If someone using myemail@mycompany.com and asking person to give me their logon credentials so I can troubleshoot something, seems like this would work fine. If your point is someone will just...
In reply to: Re: DMARC is not going to stop phishing
@Sara Peters. Thanks for clarifying. Although now I'm appalled that this is a common practice within lenovo machines. The typical end user is most likely unaware and if I were them I would be thoroughly annoyed when I found...
In reply to: Re: Overall Benefit to Superfish and PrivDog
A good article that would be presentable to organization managers. Of course, this is the 50,000 ft level. There are so many security controls to consider that it is easy to get lost in the forest of things that...
In reply to: The Basics
Sounds interesting and will be something I bring up with my bosses next time we have a chat about email security. However I wonder if it's not quite the holy grail it's being made out to be? I'm sure that a few changes of...
In reply to: Interesting but...
@MrSmith01--you bring up two points that I will address separately: 1. That DMARC is not going to stop phishing. This is absolutely true and something that I say frequently. As an anti-fraud company, it is dangerous to...
In reply to: Re: DMARC is not going to stop phishing
@Marilyn Wow! What did you do about it? And what sort of creature was Bridget?
In reply to: Re: An example > borrow insurance?
Dark Reading Tech Digest, Dec. 19, 2014Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
