Quick Hits
CommentaryNews
Commentary
NewsNews
CommentaryNews
Commentary
News
Commentary
NewsQuick Hits
CommentaryNewsNewsQuick Hits
Was there a generation particularly more concerned with security? Judging by the droves of leaks, breaches and attacks in the last few years, it doesn't seem so. While I agree that Millenials as a whole are more connected,...
In reply to: More connected or less concerned?
The most valuable asset to an organization is the informational assets. If what you describe is true, then the infrastructure is the only thing that is critical. But, every piece of hardware and software (endpoint devices,...
In reply to: Disagree but understand the stance
What if data essentially becomes unprotectable? At some point, so much is being shared, be it intentional, inadvertent, stolen and posted, or inferred (Big Data analytics). As security professionals, do...
In reply to: Data, data everywhere...
Hi @RyanSepe. Arbor's report shows DNS amplfication attacks dropping a bit in 2014, and NTP attacks rising. SSDP also rose last year.
In reply to: Re: Mult-Vector vs Volumetric
The reason you will see the most prevalent means of ddos attacks as some type of flooding is because it takes less expertise for the attacker to pull off. Essentially, because its easier is why there are more instances of...
In reply to: Mult-Vector vs Volumetric
Marilyn - great post. I think what most people don't seem to understand if that if an App is free, YOU are the product. Would you pay $0.99/mo for a version of Waze that gave you privacy?
In reply to: Re: Ok Millennials, defend yourselves!
If your company keeps up with leveraging current distros then you might not be in danger anyway. The most recent versions of glibc are not vulnerable. These are a product of more current distros and if your enterprise maintains...
In reply to: Easy Mitigiation
Yes, I know - I deal with compromised accounts and passwords every day - but I don't see how someone gets a patent for a system that requires a user has a cellphone. Passwords are easily implemented, easily changed, revoked...
In reply to: What's so bad about passwords?
I like that idea of having a hacker actually demonstrate how easy it is for bad guys to steal personal information and data via social media accounts like Twitter and Facebook. Seeing is definitely believing. Awareness will...
In reply to: Re: Admit that you have a problem....
I would also be interested in learning the results of that poll. I think because most younger millennials grew up in an age of widespread information sharing, many don't think twice about giving personal data to apps and...
In reply to: Re: Ok Millennials, defend yourselves!
Well, it's an awareness program. Posters, screen savers, annual certification quizzes – but in some recent conversations with clients, we discussed "making it personal". Have a hacker come in and show examples of...
In reply to: Re: Admit that you have a problem....
I would concur, you have many valid points we all need to address: 1. Fully utilize all your current info security technology (so many only use 25% of the features) 2. Bring people up to speed on the program...
In reply to: Program development, policy, incident response and awareness
Dark Reading Tech Digest, Dec. 19, 2014Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
