Recent Posts
Tom Olzak on Security
Return To Blog Listing
Security and risk management news and independent research.
Recent Posts Tagged With 'hacking'
Security Tip: Patching must include ALL applications
Once again, patching isn’t just about plugging holes in Windows. Most if not all applications have security vulnerabilities if someone looks hard enough. Up until now, however, finding those vulnerabilities was harder than just whacking the OS....
For Software Downloads, Go Directly to the Source
Search engine results for download sites offering hard to get or difficult to find popular software are increasingly used by attackers to ply their insidious craft. Users looking for an easy way to circumvent vendor constraints or to find popular f...
Security Tip: It isn’t just about social security numbers anymore
A recent breach of a PayChoice Inc. server is evidence that organizations must provide overall controls, not just those targeting popular attack vectors. Chris Wysopal, chief technology officer at application security vendor Veracode Inc., said the...
One-Time Passwords are Not Foolproof
Many of us started using one-time password devices some time ago. They typically take the form of “footballs” or smartcards and generate a random—or pseudorandom—string used only as a password for one session login. This was considered to...
Hardware Hacking Defense: Can you say physical security?
I’ve been sort of stuck in the land of physical security lately. The reason I can’t seem to extricate my brain relates to the dismal facility security many organizations employ. It’s the lack of good physical security, including employee re...
AVSIM: Real world example of the value of offsite backups
Server redundancy is not enough protection against many business continuity events....
.NET-Sploit ‘rootkit’: Easy to install, hard to defend against
Microsoft's .NET framework apparently contains a weakness which allows a rootkit-like malware infection, difficult to prevent and detect. ...
Conficker: Unpreparedness was the problem, not the messenger
As usual, finger-pointing about what is beginning to be seen as Conficker FUD is increasing. Understandably, the media is taking the brunt. Understandably, but not necessarily appropriate. ...
Compliance requires people supported technical solutions
Relying completely on technology to safeguard information assets is a poor business decision....
You Just Have to Run Faster than the Bear
Today's cybercriminals look for softer targets as ROI increasingly drives cybercrime. SMBs are next in their sights....
Examining the SMM Hack and Pondering Intel’s Apathy
SMM rootkit vulnerabilities are reasonably troublesome, not new, and apparently marginalized by Intel....
