US cyberwar strategy stokes fear of blowback
A posting from NBC NEWS in there technology section: WASHINGTON (Reuters) - Even as the U.S. government confronts rival powers over widespread Internet espionage, it has become the biggest buyer in a burgeoning gray market where hackers and security firms sell tools for breaking into computers. The strategy is spurring concern in the technology industry and intelligence community […]
WordPress and Internet Security with Kellep Charles
Scott talks to Security Consultant Kellep Charles about WordPress and public website security. What can you do to protect yourself? Where does internet security break down?
Microsoft rushes out CVE-2013-1347 "Fix it" for the latest Internet Explorer zero-day
A posting from Naked Security: Remember the US Department of Labor hackwe wrote about at the beginning of the month? A microsite off the main web page was compromised and used to serve up a drive-by download cocktail that aimed to infect your computer surreptitiously. The vulnerability that was exploited in the drive-by turned out to […]
Nordstrom tracking customer movement via smartphones' WiFi sniffing
A posting from Naked Security: You've spent quite some time in the lingerie department, but you haven't even peeked at our display of Bose® 'OE2' Audio Headphones, which were $149.95 but are now ONLY $134.96! Can we talk?" OK, so that's not exactly what Nordstrom says it's planning to do with the information it gleans […]
Unpatched Remote Access Tools: Your Gift To Attackers
A posting from Information Week in there Security section: Help desk teams love remote-control software. When employees call with computer problems, the IT department can remotely take control of the user's machine, copy over files and set all application and operating system wrongs to right. Unfortunately, they're not the only group interested in putting TeamViewer, […]
Pentagon OKs Androids, BlackBerrys for soldiers
A posting from Naked Security about the Pentagon OKs Androids, BlackBerrys for soldiers: The US Department of Defense (DoD) announced on Thursday that it has approved the use of Samsung phones running a hardened version of Android. According to the BBC, the approval for other types of smartphones and mobile devices for use by US soldiers is […]
Metasploit Module Released For IE Zero-Day Flaw Used In Labor Attack
A posting from Dark reading: A targeted attack discovered last week serving up malware from the U.S. Department of Labor's (DOL) website employed a previously unknown vulnerability in Internet Explorer 8 that Microsoft says it will fix either with an emergency patch or via its monthly patch process. And as is tradition, Metasploit also has […]
5 Ways For SMBs To Boost Security But Not Costs
A posting from Dark reading: For many businesses, improving their security seems like the proverbial money pit: but it doesn't have to be that way. While the time crunch of attending to the demands of the daily business has typically created an accumulation of security problems for many businesses, information technology professionals at SMBs can improve […]
Sweet Password Security Strategy: Honeywords
A posting from Information Week in there security section: Businesses should seed their password databases with fake passwords and then monitor all login attempts for use of those credentials to detect if hackers have stolen stored user information. That's the thinking behind the "honeywords" concept first proposed this month in "Honeywords: Making Password-Cracking Detectable," a paper written by Ari Juels, chief scientist […]