Top Articles
Data Democratization Can Greatly Increase Data Security
[2009-06-26] This is part two of opening workshop by Dion Hinchcliffe on Implementing Enterprise 2.0 at the Boston Enterprise 2.0 conference. Dion brought up a guest speaker David Stephenson who he said is the "world's leader in democratizing data." This was the tile of his discussion, the concept of democratizing data:the data-centric organization.
T-Mobile May Have Been Hacked
[2009-06-10] A message to the full disclosure list showed up today claiming to have access to the entire back end infrastructure of T-Mobile. The message to Full Disclosure today from Pwnmobile claims to have hacked into and own the majority of the data on the T-Mobile phone systems today.
Ensuring Your Enterprise Has Security On The Internet
[2009-05-27] A plan to ensure the security of the organization's internet computing assets.
Facebook Tests Volatility Of Malware And Phishing From Swine Flu
[2009-05-06] Early news reports indicate that a new phishing attack is happening at Facebook right now, so be very careful what e-mails you click on. With all the attention that phishing and malware is getting between the swine flu and other events happening right now, this is a good time to remind folks, be careful of what e-mails you click on.
Tool Developed To Hide Malware Within .NET
[2009-04-22] Most windows based modern computers come with the .NET Framework installed, so a security flaw in it could be a very dangerous threat - think to Conficker (and, by the way: take a look here and check if you are infected, then move to Linux or buy a Mac).
Spammer Growth Rate Highest Ever
[2009-04-02] Spammers are stepping up their efforts as the "industry" recovers from the loss of McColo, a web hosting company whose clients generated some 75% of the spam e-mail we get to enjoy on a daily basis. It seems that these folks are back up to their old levels again according to a report from Postini, which provides the security for the approximately 15 million users of Google's enterprise e-mail offering.
Setting Up A Security Plan For Your Enterpirse
[2009-03-20] A plan to ensure the security of the organization's assets.
Implementing Cost Cutting Without Under-Utilizing Security
[2009-03-04] In these uncertain economic times, businesses are being forced to implement crucial cost-cutting measures to expel any and all unnecessary spending. But in the process of trying to improve cost efficiency, businesses can inadvertently under-utilize, or even expel altogether, valuable initiatives that are strategically viable to the longevity of that business.
Recovering Your Sites After A Major Attack
[2009-02-18] So your website has been hacked. All your pages are gone and you can't log into anything to make changes. What do you do and how do you fix it?
Use Acunetix Blind SQL To Identify Web Vulnerabilities
[2009-01-29] Cool presentation on YouTube on how to use the Acunetix Blind SQL Injection Tool for data mining systems. In all honesty, this is a great video to watch.
Two Security Sites Close Amid Economic Pressure
[2009-01-14] The poor economy hits two more security web sites, making news and sharing of information security information that much harder to find.
Google Offical Hacking Database Closes
[2008-12-31] Over a month ago, Johnny I hack stuff, the Google hacking database was reported to be shut down, and today all that is left is a video of Christmas in Kenya.
Google's Response to Gmail Security Vulnerability
[2008-12-02] Google says that recent reports on a Gmail vulnerability aren't true (Google might mean this one at GeekCondition.com, as blogged here earlier; my emphasis in the quote):
Gmail Security Vulnerability Found in Filter System
[2008-12-02] Brandon at GeekCondition reports of a Gmail security vulnerability which lets an attacker set up automated filters in your Gmail account, provided the attacker manages to lure you onto a page of theirs first.
How Can We Protect Web 2.0 From The Cyber War
[2008-11-12] No Surprise security engineers falling behind in hacking skills. There is no reason that we should as a security profession be losing the cyber war, or failing to protect our companies, and our friends from cyber attacks.
Emerging Threat Trends for 2009
[2008-10-29] The Georgia Tech Information Security Center has released what its trends an indicators are for emerging information security threats for 2009. Unfortunately, these are all things we have been battling for years and just not winning.
The Security Department Needs to Step Up to the Challenge
[2008-10-13] With the economy in the tank, now is the time for the security department to get creative and start supporting the business, and help it grow. There is no room for the standard reaction of "no" this time around; we will be in the recession for at least another year.
Know the Hacker that Hits Your Business
[2008-09-25] Do you know what kind of hacker is hitting the companies' access to the internet? It could range from the run of the mill script kiddy to the more elite and interesting corporate intellectual property thief. It is important to know, because this will help you arrange your corporate defenses better.
Security Flaws in Google's Chrome Browser
[2008-09-04] Now that the enormous amount of noise over the debut of the Google chrome browser has died out a bit, what does it look like from a security viewpoint?
Customize Company Security Procedures
[2008-08-21] To ensure adequate security, as appropriate for the security classification of the project.
Breaking Privacy Policy Rules
[2008-07-02] The disconnect between information security and the rest of the company marches on smartly in a report by Forbes.com.
HackerSafe Program Not So Safe
[2008-05-21] And with cause, if XSS is not a security issue, then there are at least 62 doomed sites carrying the HackerSafe/McAfee logo that could seriously damage someone's day.
Enterprise 2.0: A Security Nightmare
[2008-04-30] Steve Lohr posts Enterprise 2.0: A Security Nightmare on the NY Times Bits blog. Its the kind of fear sells story that is inevitable.
Our Broken Information Security Business
[2008-04-02] 4.2 million accounts were exposed in a supermarket data hack.
G-Archiver Pulls Their Software From Distribution
[2008-03-12] G-Archiver, the software that was previously caught by coding horror and blogged about here has pulled the version of the software that captures user credentials and e-mails them to Google. From the time it was discovered by Coding Horror on the 7th through to this morning when the tainted version was pulled is about 5 days.
|
