SecurityRatty :: tag: half-million
Featured Articles :: Mozilla fixes 10 Firefox flaws, half seen as 'critical' :: 3G cellular used by nearly half of enterprises, survey says :: Nearly Half of IT Workers Snoop in Confidential Files :: The difference between half-duplex and full-duplex :: On Elephants and Analytics :: On Elephants and Analytics :: Microsoft Security Intelligence Report 2H07 :: Month Of MySpace Bugs :: Making Threat Modeling Work Better :: Audit/Monitor Controls or Audit/Monitor BEFORE Control?
Mozilla Corp. has patched 10 vulnerabilities, half of them critical, in its open-source Firefox browser and plans to provide a matching update for its Thunderbird e-mail client soon
A new survey released by market research firm Chadwick Martin Bailey reports that nearly half of all enterprises currently use 3G cellular services, and that more than one-third plan on using the 4G technology WiMAX within the next year
Nearly half of IT workers have admitted to snooping around networks to look at confidential information, according to research from software firm Cyber-Ark. "When it comes down to it, IT has essentially enabled snooping to happen. It's easy -- all you need is access to the right passwords or privileged accounts and you're privy to everything that
In On EP and Analytics , good friend and respected colleague Opher Etzionapplies the well known metaphor of the big elephantto describe how, if you areobserving certain specific domains of a subject, like fraud detection, then your view of thewhole elephant is biased by yourlack ofperspective of entire big elephant
I ampleased that dear Opher...
In On EP and Analytics , good friend and respected colleague Opher Etzionapplies the well known metaphor of the big elephantto describe how, if you areobserving certain specific domains of a subject, like fraud detection, then your view of thewhole elephant is biased by yourlack ofperspective of the entire big elephant
I ampleased that dear...
Yesterday, Microsoft published the new Security Intelligence Report for the 2nd half of 2007. (home page is http://www.microsoft.com/sir , and the download page is here
As one of the contributors for the report, I'd like to highlight the findings summary for the Industry vuln trends
Vulnerability disclosures decreased by about 5 percent in 2007,...
I just found this little project called Month of MySpace Bugs . This should be interesting to keep an eye on. As they state, they are only picking on MySpace (they could have found similar problems in any of the poorly crafted social networking sites) because they are trying to get attention, MySpace is extremely popular to get them even more...
Adam Shostack here, with part four of my threat modeling series. This post is a little less philosophical and a lot more prescriptive than the one about flow. It explains exactly how and why I changed a couple of elements of the process. The first is the brainstorming meeting, and the second is the way trust boundaries may be placed
The...