Six “New” Attack Vectors

Reading this article Six New Hacks That Will Make Your CSO Cringe made me think as it has a few fairly interesting approaches:

Fake Phone Networks: I am wondering how much work it takes to do it. If the effort is not too high, I am not (yet) too worried about it. But still, for . . . → Read More: Six “New” Attack Vectors

The New World of Work

The world got small, didn’t it? This afternoon I decided to leave home early and go to the mountains. However, I had some conference calls tonight, where we usually use Lync (successor of Communicator). So, as I do not have a fixed line there, I dialed in with my 3G card, which gave me . . . → Read More: The New World of Work

Are You Focused On The Wrong Security Risks?

There are some high-level indsutry trends, which tend to be ignored by security officers. The CIO Central published an article, which I would even go further looking at the trends raised. . . . → Read More: Are You Focused On The Wrong Security Risks?

Attacks on Application Level

As attacks are moving up the stack, PDF becomes the number 1 exploited file type. Make sure you patch all your applications . . . → Read More: Attacks on Application Level

Targeted Attacks: The Biggest Risk in 2011?

Since quite a while, I am saying that targeted attacks are the risks, which really keep me up at night.

BBC just posted a similar article: Cyber-sabotage and espionage top 2011 security fears

I think that this is a real issue and very hard to fight!

Roger

I sold my soul to Google, can I get it back?

Well, this question was not asked by me but by a guy called Joe Wilcox on Betanews: I sold my soul to Google, can I get it back?. He raises a few points I never really thought of:

While the organizations all charge something, not one puts content behind a true paywall. To do so . . . → Read More: I sold my soul to Google, can I get it back?

Fixing Risk Management

Since quite a while I am not satisfied with the way we (in the industry) are doing risk management. In my early days, before I was actually entering the security space, I was doing project management and as part of it risk management. The way we did it was fairly simple (as probably most of . . . → Read More: Fixing Risk Management

Responsibility of ISPs for the ecosystem?

If you like Scott Chaney’s suggestion he made at ISSE this week called Collective Defense – Applying Public Health Models to the Internet he raised very good points about the different roles the participants in the Internet Health Ecosystem have to play. Into that, the following article fits in fairly nicely: Comcast to notify subscribers with infected PCs . . . → Read More: Responsibility of ISPs for the ecosystem?

Customer Experience: Security Can Improve in the Cloud

Last week, when I was in South Africa, a partner of us pointed me to a very interesting paper by KPMG called Cloud computing: Australian lessons and experiences. What I like is, that a lot of the items I was recently raising, where actually reflected in quotes by customers of Cloud providers as well as by the general findings of the study. The final conclusion is to me that there are a lot of security benefits moving to the Cloud. . . . → Read More: Customer Experience: Security Can Improve in the Cloud

Real Men Don’t Buy Girls

There was a press conference yesterday to launch the “Real Man” campaign to raise awareness about the problem of child sex slavery. You should listen to the press conference – if you can cope with it… . . . → Read More: Real Men Don’t Buy Girls

Calendar

May 2012
M T W T F S S
« Apr    
 123456
78910111213
14151617181920
21222324252627
28293031