Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

EC-Council Update: 2/25/14 07:00

2014-02-26/0 Comments/in General Security/by SecurityOrb_Staff

DNS Propagation is still in process around the world however major DNS providers have updated to the new data. With respect to our release yesterday, our Internal Response team has been closely monitoring our third party vendors.

New free online software security training courses

2014-02-25/0 Comments/in General Security/by SecurityOrb_Staff

EC-Council Update: 2/25/14 07:00

2014-02-26/0 Comments/in General Security/by SecurityOrb_Staff

New free online software security training courses

2014-02-25/0 Comments/in General Security/by SecurityOrb_Staff

Full Sized Blog Element (Big Preview Pic)

EC-Council Update: 2/25/14 07:00

2014-02-26/0 Comments/in General Security/by SecurityOrb_Staff

EC-Council has launched an international cooperative effort with law enforcement entities based on information uncovered during our analysis of this incident. Our cooperation with Law Enforcement is two-fold. First is to establish subpoena’s on third party vendors where computer crimes took place, second is for justice.

We would like to thank the many Information Security professionals who openly keep the community informed, DNS Hijacking is illegal. We will work with the authorities to ensure to the best of our ability the individual(s) responsible are held accountable.

This is a clear example of what we have always taught; No one can ever be completely secure. Although EC-Council servers remained untouched, a vulnerability in our third party DNS vendor led to this DNS Hijacking incident, rendering our main website unavailable for a short period of time.

While this investigation is ongoing and subpoenas will take time, we are dedicated to keep our customers and partners apprised of all progress.

New free online software security training courses

2014-02-25/0 Comments/in General Security/by SecurityOrb_Staff

The Software Assurance Forum for Excellence in Code (SAFECode) is a non-profit organization exclusively dedicated to increasing trust in information and communications technology products and services through the advancement of effective software assurance methods. SAFECode is a global, industry-led effort to identify and promote best practices for developing and delivering more secure and reliable software, hardware and services. Its members include Adobe, CA Technologies, EMC Corporation, Intel Corporation, Microsoft Corp., SAP AG, Siemens AG, and Symantec Corp.

SAFECode recommends that product security managers use our training materials in the context of a broader software security process. We have published a number of free materials to help support that development and maturation of such a process, including our flagship work, Fundamental Practices for Secure Software Development. All of our published guidance and best practices are based on the real-world experiences of our member companies and have been proven effective across diverse development environments.

Starting your training here.