.jpg)
Commentary
Quick Hits
News
Commentary
NewsQuick Hits
News
News
CommentaryNewsNewsQuick Hits
NewsNews
CommentaryNews
Commentary
Reminds me of a story a friend recently told me. Sitting at an airport gate not too long ago, she watched as a mortgage executive sitting next to her with a bag full of sensitive PII documents (FNMA 1003s and the like)...
In reply to: Watch your back low-tech-wise.
An important yet oft overlooked aspect of a good patch management strategy: implement everything in a testbed first. Test everything with everything. Otherwise, you could really screw things up -- especially...
In reply to: Testing patches
@MrSmith01--that may be the case because Target has published a DMARC policy. As more and more brands do so, and move that policy from monitor mode to reject, more and more attackers will be forced to use sister/cousin...
In reply to: Re: DMARC is not going to stop phishing
I might coin it the Storm Cloud! Detecting and containing north/south and east/west bound data in the cloud - especially the one off SaaS sloutions - is tricky at best is seems. Not to mention auditing identities,...
In reply to: Storm Cloud!
That's funny, Marilyn; it seems I *always* have to present my medical ID whenever I go in for a doctor's appointment. I guess it depends where you go.
In reply to: Re: An example > borrow insurance?
One technique that some companies engage in (and consultants advise) is to purposely send "phishing" emails to a random selection of employees each month. If the employee clicks, he is advised that it was a phishing...
In reply to: Honeypot the employees
This was an interesting article and I can see how easy it easy for a company to get hacked. It makes you wonder about all the temps that are hired in a company. Are they really in need of a job or are they on a recon mission. As...
In reply to: Hacking and Loyalty
> People are people. They want to do things more efficiently." In my shop, it takes four weeks and many meetings to arrange for something simple such as a DB server. In the cloud, I can have a DB server...
In reply to: A problem is IT is behind the times
I'm reading Brian Krebs's Spam Nation right now (fascinating read), and yes, it seems like the successful mid-level criminals who would have that kind of information might also be jeopardizing their very lucrative...
In reply to: Re: Is $3 million enough?
Another issue (which I recently wrote about) is the matter of what happens after there is a breach of the data in the shadow IT service? How do you even know that your data were there? The employee would have...
In reply to: And how do you find out?
Except what if the email is from myemail@myc0mpany.com or one of a hundred other variations an attacker could set up? Heck, I just saw a legitimate email for Target that used the domain mail-target.com. You see,...
In reply to: Re: DMARC is not going to stop phishing
Not sure I get what you mean. If someone using myemail@mycompany.com and asking person to give me their logon credentials so I can troubleshoot something, seems like this would work fine. If your point is someone will just...
In reply to: Re: DMARC is not going to stop phishing
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
