News
Commentary
NewsNewsNewsNewsNewsNewsNews
NewsNewsNews
CommentaryNewsNews
CommentaryNews
CommentaryNewsNews
I will update the passwords now and couple days or weeks later again to make sure I am safe. Luckily I use Sticky Password which helps me with managing the hassle.
In reply to: When to update the passwords
@JamesR010: I am well aware of the compliance vs secure scenario, as well as the Heartland situation. I also have seen firsthand how kiosks, ATMs, etc. run imbedded XP in admin mode. I have seen horrible security...
In reply to: Re: It's Windows, Stupid!
@GonzSTL : They were "certified" by Trustwave, and being "in compliance" does NOT equal being secure. Trustwave doesn't have a good track record of certifying compliance (see Heartland Payment Systems fiasco of a few years...
In reply to: Re: It's Windows, Stupid!
Blame the victim? When banks get robbed, do we blame their security? This would only happen if there was gross negligence such as leaving cash out unsupervised. I know firsthand that the hacking groups breaching larger...
In reply to: Target was a victim
We don't actually know if Target's POS systems were not updated or had malware protection. We do know that they were PCI sertified immediately prior to the breach, so I'd like to think that their ASV or whomever certified...
In reply to: Re: It's Windows, Stupid!
Agreed. Most of these PoS systems (PoS - lol) run WinXP in admin mode, are not patched properly, and may not even have AV locally. However, most of the fault is still on Target's C executives for dropping the ball on sec...
In reply to: Re: It's Windows, Stupid!
I think the problem would be prevelant in any mainstream operating system used globally for companies and most households. If MAC OSX was the number 1 used operating system at companies and in homes, then we would be saying...
In reply to: Re: It's Windows, Stupid!
While Target and many others performed only 95% of their due diligence, that still doesn't exonerate them or anyone else that's still vulnerable. Automated event detection, correlation and the elimination of irrelevant...
In reply to: Being wrong with other company doesn't exonerate anyone
With failure to wall-off its payment systems from the rest of its corporate network, through which hackers were able to gain access to payment details, Target effectively lost access control to it's systems. They may not...
In reply to: Defense in Depth...
"Whenever you bring budgets into the security mix, you get into this discussion about not being the "low hanging fruit." That is such a short-sighted point view! Perhaps if Target had a dedicated CISO in it's...
In reply to: "low hanging fruit".
@andrewboon2739 I noticed that McGladrey is a provider of accounting, tax and consulting services. What are some of the principal threats and vulnerabilities you are seeing in your industry? And what are some of the...
In reply to: Re: Two common Web application attacks illustrate security concerns.
Tweet This
8 Comments
