.jpg)
Commentary
Quick Hits
News
Commentary
NewsQuick Hits
News
News
CommentaryNewsNewsQuick Hits
NewsNews
CommentaryNews
Commentary
Except what if the email is from myemail@myc0mpany.com or one of a hundred other variations an attacker could set up? Heck, I just saw a legitimate email for Target that used the domain mail-target.com. You see,...
In reply to: Re: DMARC is not going to stop phishing
Not sure I get what you mean. If someone using myemail@mycompany.com and asking person to give me their logon credentials so I can troubleshoot something, seems like this would work fine. If your point is someone will just...
In reply to: Re: DMARC is not going to stop phishing
@Sara Peters. Thanks for clarifying. Although now I'm appalled that this is a common practice within lenovo machines. The typical end user is most likely unaware and if I were them I would be thoroughly annoyed when I found...
In reply to: Re: Overall Benefit to Superfish and PrivDog
A good article that would be presentable to organization managers. Of course, this is the 50,000 ft level. There are so many security controls to consider that it is easy to get lost in the forest of things that...
In reply to: The Basics
Sounds interesting and will be something I bring up with my bosses next time we have a chat about email security. However I wonder if it's not quite the holy grail it's being made out to be? I'm sure that a few changes of...
In reply to: Interesting but...
@Marilyn Wow! What did you do about it? And what sort of creature was Bridget?
In reply to: Re: An example > borrow insurance?
@Marilyn So true. And it seems like we never really understand how this stuff works until there's a big data breach. Remember Community Health Systems? I didn't even know that there WERE healthcare providers that were...
In reply to: Re: Two Way Street
@RyanSepe Well Superfish's claim is that it helps users by serving them ads/offers for things they already seem to want -- so if they're looking at blenders, they'll serve an ad for a houseware company or something....
In reply to: Re: Overall Benefit to Superfish and PrivDog
All these points are great, but 4, 5 and 7 rank highest in priority for me with something like cryptolocker and other ransomware. I think in situations like this it is important to have a means of recovering your files as...
In reply to: Great Points!
I totally agree with you on this. Most companies that have suffered a breach usually transfer the agression to the CSO and his team, which I personnally think is a coward way of coveing their asses. Security is a joint work...
In reply to: Re: I'll stick with stage 2
Other than installing a trusted cert, is there an overall benefit to Superfish and PrivDog? It seems like there are more inherent detriments with the technology than benefits.
In reply to: Overall Benefit to Superfish and PrivDog
Brian Krebs did a peice on this back in June 2014 "Card Wash: Card Breaches at Car Washes" and the very first thing I think these companies should do is hire someone who actually understands the technology and how it is...
In reply to: Re: Perspectives from the CW industry
Dark Reading Tech Digest, Dec. 19, 2014Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
