SEARCH RESULTS
 
Showing 1-10 of 50 records
 
Expand article

YWCA Retirement Fund participants exposed in stolen computer

The Article has images
2007-12-11 12:23:19 by Evan Francen in The Breach Blog
...importantly no account balances Comfyllama] Unauthorized access to any of this information is bad, but "most importantly no account balances"? If I had a choice, I think I would rather have my account balance disclosed than I would my name and Social Security number Several factors lead us to believe that the risk to your personal data is...
 
Tags: ywca retirement fund, retirement fund, fund, computer, information security, information, sensitive information, personal identification information, active fund participants
 
 
 
 
Expand article

Misconceptions about outsourcing security

2007-12-13 14:05:54 by Khalid Kark in Security & Risk Management
 
...importantly have very realistic expectations of the relationship. It is important to do the due diligence and ensure appropriate provisions are part of the contract, but it is much more important to trust your provider and work on the relationship. Think of it as a marriage you have work on it and have to be patient
 
Tags: security processes, establish security processes, security, processes, security controls, security managers cost, cost, security operations, security services
 
 
 
 
Expand article

Symantec + Vontu: A Marriage Made In Heaven?

2007-11-13 08:55:35 by Thomas Raschke in Security & Risk Management
 
...importantly generate customer traction 3) Integration . When a potent security front runner marries an ILP leader with solid customer traction customers must and can expect strong, integrated solutions that address their problems However, this is also where I see the main challenge for Symantec/Vontu and for that matter for anybody acquiring...
 
Tags: ilp, ilp awareness, ilp wave, ilp vendors compare, ilp leader, ilp functionality, loss, data loss prevention, blown ilp functionality
 
 
 
 
Expand article

Introducing Google's online security efforts

The Article has images
2007-05-21 09:43:00 by A Googler in Google Online Security Blog
...importantly, keeping their sites secure at StopBadware . org's Tips for Cleaning and Securing a Website
 
Tags: activity, malware activity, web servers, servers, malware, anti- malware effort, malware distribution servers, sites, web sites
 
 
 
 
Expand article

Larry Sutos Paper Drama

2008-01-02 14:53:30 by RSnake in ha.ckers.org web application security lab
 
...importantly, happy new years to those using the Gregorian calendaring system
 
Tags: paper, larry sutos paper, scanners, commercial scanners, test environment, environment, test, time, people
 
 
 
 
Expand article

What's your data worth? More importantly, to whom?

2007-10-25 06:49:21 by Steve Riley in Steve Riley on Security
 
This week, I'm attending and spoke at a cybercrime conference in Singapore. One of the presenters made a very good point, and I want to share it with you When considering how to protect your data, don't consider how valuable it might be to an attacker. Always, instead, consider how valuable it is to you I know, it seems so simple when you see it...
 
Tags: data, data accessible online, valuable, security, security wrong, opposite approach, approach, bad guys, worth
 
 
 
 
Expand article

Pushdo - Web Based Malware as Usual

The Article has images
2007-12-19 18:01:44 by HASH0x89b80bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...importantly, decentralizing the command even improving authentication with port knocking are countless. Besides, with all the buzz of botnets continuing to use IRC, it's a rather logical move for botnet masters to shift to other platforms, where communicating in between HTTP's noise improves their chance of remaining undetected. Rather...
 
Tags: malware, web based malware, pushdo, botnet masters circa, botnet masters, nuclear malware kit, botnet, pushdo author, botnet communication platforms
 
 
 
 
Expand article

Security is not all about Security Updates

2007-12-17 12:58:00 by sdl in The Security Development Lifecycle
 
...importantly, the non-goals There are three major security-related disciplines here at Microsoft and people outside the company often confuse the three 1. Security feature development 2. Security response 3. Secure software engineering The first is all about building security features such as authentication technologies, firewalls and such....
 
Tags: security, end-user security documentation, security response, fix security bugs, response, security fix, implementation vulnerabilities, vulnerabilities, security feature development
 
 
 
 
Expand article

Getting into the Flow With Threat Modeling

The Article has images
2007-10-11 23:25:00 by sdl in The Security Development Lifecycle
...importantly, even people who were doing well werent sure that they were doing well. Which brings us directly to the next point Direct and Immediate Feedback When people have direct and immediate feedback, they can adjust their activities relatively easily. If youre cooking from a well written recipe, at each stage, you have some indicators...
 
Tags: threat, people develop skills, people, challenge people, flow, sdl threat, entire threat model, threat model, guide people
 
 
 
 
Expand article

Cyberattack! Manipulation and Subversion of Financial Markets!