PCI Council Advice on Threat Management
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Security professionals intuitively think proactively. Our job is to predict and prevent what the bad guy will do next. My job specifically is to instill this mindset into you, the consumer, SMB or large corporate enterprise. Bob Russo, General Manager and Rockstar of the PCI Security Standards Council reminds us all in this Business Week article that it’s not all about prevention.
10 Holiday Tips For Secure Online Shopping
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Criminals set up fake websites and then go through the same process legitimate eTailers do in regards to search engine optimization, search engine marketing and online advertising via adwords. They use key words to boost their rankings on Internet searches to show up along side legitimate sites. These same processes are also being used to infect unsuspecting users with malware. Here are ten tips for secure online shopping.
McAfee’s The Twelve Scams of Christmas
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
According to Consumer Reports’ 2009 State of the Net Survey, cybercriminals have bilked $8 billion from consumers in the past two years, and McAfee warns consumers not to fall victim to the twelve most dangerous online scams that computer users face this holiday season.
Online Money Mules Aide Theft and Fraud
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
Shipping scams are a common tactic criminals use in which they employ mules to receive goods bought with stolen credit card numbers, who then ship to people who buy them in online auctions. The mules in this process are essentially facilitating selling hot goods and money laundering.
Symantec CEO Optimistic About IT Spending
By Cara Garretson, Veteran Business and Technology Journalist
Symantec isn’t the only company to forecast improved enterprise IT spending based on quarterly results in the past few weeks; executives at EMC, IBM, and Intel all spoke positively about IT budgets rebounding in the coming months.
Top Ten Email Related Disasters of 2009
BY Mel Duvall, Chief Content Officer at CIOZone
Forget about vampires, ghouls and zombies. You were much more likely to receive a fright this year from something lurking in your e-mail. There were the usual crop of Trojan horses and phishing expeditions, and as the surprising list points out, some of the scares go all the way up to White House and the FBI.
Major Security Hole in Time Warner Routers
By Cara Garretson, Veteran Business and Technology Journalist
An intruder could eavesdrop on sensitive data sent across the Internet, manipulate the DNS address that redirects traffic from trusted sites to malicious ones, and possibly even infect other routers automatically. Chen says he informed Time Warner’s security department of the hole; they responded that they were aware of the problem but couldn’t do anything about it.
Swarm Intelligence Fights Worms with Ants
By Cara Garretson, Veteran Business and Technology Journalist
Currently most security technology is reactive, taking action only against known threats that have been defined and can therefore be found. Researchers are hoping that by proactively scanning a network for unusual behavior, digital ants can discover zero-day threats before they do harm.
Idaho Tops The Most Spammed States Report
By Cara Garretson, Veteran Business and Technology Journalist
Residents in states with a high concentration of small and medium-sized businesses are targeted most by spammers, according to a recent report by e-mail security vendor MessageLabs, a Symantec subsidiary that analyzes billions of inbound messages collected by its data centers around the world.
Integrate Key Controls Early in Development
By Lauren Taylor of CIOZone
The challenge for in-house teams is to avoid the ever-present penetrate-and-patch approach to compliance by developing more secure code in the first place. Compliance and security early in the requirements and development stages will result in less expensive and more effective security than trying to tack it on at the end, or, worse yet, after the software development lifecycle.
