PCI Council Advice on Threat Management
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Security professionals intuitively think proactively. Our job is to predict and prevent what the bad guy will do next. My job specifically is to instill this mindset into you, the consumer, SMB or large corporate enterprise. Bob Russo, General Manager and Rockstar of the PCI Security Standards Council reminds us all in this Business Week article that it’s not all about prevention.
10 Holiday Tips For Secure Online Shopping
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Criminals set up fake websites and then go through the same process legitimate eTailers do in regards to search engine optimization, search engine marketing and online advertising via adwords. They use key words to boost their rankings on Internet searches to show up along side legitimate sites. These same processes are also being used to infect unsuspecting users with malware. Here are ten tips for secure online shopping.
Signature Authorization is Stupid Security
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Ever forge your husband’s signature? Wife’s? Parent’s? Client’s? Do you think the clerk behind the counter at Walmart is skilled in handwriting analysis? The fact is, a handwritten signature provides zero proactive security. If someone signs your name to a check, and you call the bank and say it wasn’t you, they look at the signature and determine whether it’s yours or not. From there they assign liability. That’s dumb.
Holiday Temps Increase Identity Theft Risks
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Hiring temps during the holidays becomes the perfect storm for employee theft. Estimates reveal that 40-50 percent of all business losses are due to employee theft. Employers need to first vet out potential hires so as not to invite a thief into the workplace.
MIT: Reality Mining Protects Your Identity
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Reality Mining defines the collection of machine-sensed environmental data pertaining to human social behavior. This new paradigm of data mining makes possible the modeling of conversation context, proximity sensing, and temporospatial location throughout large communities of individuals.
Swatting Exploits Use Technology To Harm
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Swatting is an attempt to trick an emergency service into dispatching an emergency response team. Caller ID spoofing technologies are used to send law officers on bogus calls along with social engineering and phone phreaking techniques. Most people trust caller ID and are unaware of caller ID spoofing. This is obviously a flawed system ripe for fraud.
McAfee’s The Twelve Scams of Christmas
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
According to Consumer Reports’ 2009 State of the Net Survey, cybercriminals have bilked $8 billion from consumers in the past two years, and McAfee warns consumers not to fall victim to the twelve most dangerous online scams that computer users face this holiday season.
Comcast Homepage Hackers Indicted
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
The hackers ages 19 and 20 at the time known as Defiant and EBK from a group calling themselves Kryogeniks. Where they screwed up during their stunt was when they changed the contact information for the Comcast.net domain to Defiant’s e-mail address. Brilliant hackers yet not so smart.
Online Money Mules Aide Theft and Fraud
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Shipping scams are a common tactic criminals use in which they employ mules to receive goods bought with stolen credit card numbers, who then ship to people who buy them in online auctions. The mules in this process are essentially facilitating selling hot goods and money laundering.
ISR News: Google’s Top 10 Malware Sites
Excerpts From IT Pro
Google identifies the ten domains responsible for compromising the most number of sites on the internet. In response to a recent surge in websites being infected with malware, Google has revealed the top ten most popular malware sites in the last couple of months.
