SecurityRatty :: Adventures in Security
Featured Articles :: Surprise! Users ignore security policies. :: Best Security Tools: Secunia PSI :: Management's right to employee communication: There are limits :: Best Security Tools: Free online Web utilities :: Protect your email address from spammers, help digitize books :: Wrong problem, wrong solution: Sophos misstep on laptop security :: DNS redirection hits home :: How fast can YOU leak data? :: Insider threats: The pendulum swings :: Going green: Security opportunities and risks
If users still don't understand their role in protecting information, and if they regularly perform actions that violate policy, what steps has management taken to change attitudes and habits
Scanning desktop and laptop images to make sure all security patches are applied is not always easy. Especially when applications from a variety of vendors are installed. Secunia PSI, a free download, can help
...information stored on company-owned information assets, including email and other messaging media. There were limits, like restricting data retrieval to items actually related to business transactions or relavant to an ongoing investigation. Now, however, a U.S. Federal court has placed messages sent via contracted services within the scope...
...information you're exposing to Internet without having to reconfigure the security on your perimeter devices? Have you tired of having to call your managed security services provider to let them know it's you creating the anomalous behavior, not an attacker? Then maybe you should check out one of the free, online Web services providers
In addition to providing a free, downloadable CAPTCHA solution for Web developers, the site also offers a way to protect your contact email address used on your Web site
I hope that in the future, Sophos representatives take a moment to understand business need and appropriate controls before making a broad statement about data usage
DNS cache poisoning and redirection problems have been around for some time. However, most, if not all, ISPs and other DNS server providers have followed best practices to harden their domain name to IP address translation services. So, looking for a softer, more productive target (less cost when compared to return), cybercriminals are turning...