Infosec 2009

Speak to anyone born before 1975 and they’ll harp on about ‘the good old days’ and how the younger generation of today have everything too easy.
Naturally, being born after 1975, I disagree with the viewpoint. Take education for example. In the olden days you packed kids off to whichever boarding school was furthest from where [...]

2 Comments

Quizzing the recruiter – an interview with Ruth Jacobs

Barclay Simpson (www.barclaysimpson.com) is the leading company in corporate governance recruitment in the UK, and was established in 1989. Ruth Jacobs is an Information Security Recruitment Consultant with Barclay Simpson.
Like most security professionals, my contact with recruitment consultants is limited to times when I am looking for a new job, so I decided to reverse [...]

No Comments

Ross Anderson does it again

In what is becoming an attention-grabbing ‘look at me’ trend, Ross Anderson, the much-famed Professor of Security Engineering at Cambridge University has added to his ongoing list of entertaining gripes and accusations, the good Professor has stated that the dedicated cheque and plastic fraud crime unit is funded by banks!
Apparently having banks part fund an [...]

1 Comment

Aunties Botnets

The British Broadcasting Corporation (BBC) is the world’s largest broadcaster. Having a budget of more than £4 billion, its no wonder there’s little they can’t do in persuit of the greater good.
So, unsurprisingly the BBC would cover the rise in cybercrime. However, as part of their investigation and subsequent program “click” the BBC purchased a [...]

No Comments

We’re safe, it’s covered it in our policy

So apparently the courts have deemed it fine to release a labour peer from jail, even though he was texting on his mobile whilst travelling on the motorway, had a crash and killed 28 year old Martyn Gombar.
Of course, what else would you expect from a country who bought you such lovelies as Garry Glitter, [...]

No Comments

Privacy Vs security Vs make me famous

It gets quite scary when the Government admits that it will cross all moral boundaries in order to prevent those terrorist networks with sleeper cells living right next door to you.
There have been many column inches and heated debates devoted to the security versus privacy argument. How much privacy are you willing to give up [...]

No Comments

Tips on stamping out Data Leakage & Industrial Espionage during a Recession

At a recent monthly gathering of both good and bad hackers in a dingy pub in Leicester Square, I asked them whether the economy was opening up new opportunities for them.  The response was an overwhelming yes, with nearly everyone saying that the cut backs had caused jobs to be outsourced and, with less folks [...]

No Comments

Into the Cloud we go…..have we thought about the security issues?

A new shift in computing is upon us – Cloud Computing. As our use of computing resources evolves from mainframes to PC’s and networks we are now facing a major shift in the way we work. This could have dramatic effects on the way we use our computers, both for work or play. But the [...]

1 Comment

Toxic information

Amongst banks going bankrupt and the economy ever-spiralling downwards, the one thing you can bet on will happen all the time is data loss. Whether it be a payment firm being breached, a retailer with an unsecured network, or employee’s walking out of the office with gigs worth of company sensitive information.
On the flip-side, amidst [...]

1 Comment

Another payment firm breached

The Tuscaloosa Federal Credit Union and the Pennsylvania Credit Union Association have both warned that a payment processor other than Heartland has suffered a network intrusion. DataBreaches.net first reported the confirmations.
“While it has been confirmed that malicious software was placed on the processor’s platform, there is no forensic evidence that accounts were viewed or taken [...]

No Comments

Three Arrested in Heartland Data Breach

Three men in Florida were arrested earlier this week on multiple charges of credit card fraud, and some of the card numbers they allegedly used are tied to the Heartland hack.
The Leon County, FL. Sheriff’s office arrested area residents Tony Acreus, Jeremy Frazier and Timothy Johns, who had allegedly used stolen credit card numbers since [...]

No Comments

What happens when you lose a CD

Between the time a company or government agency loses a cd with a gazillion records of individuals on it and it turning up on the front page of your local newspaper what do you think happens?
Looks like they dedicated a whole film to this subject!

3 Comments

IT Governance Institute Seeks Public Comments on New Risk IT Framework

The nonprofit, independent IT Governance Institute is seeking public comment on its new IT risk framework, which is based on the globally recognized COBIT IT governance tool set. Comments on Enterprise Risk: Identify, Govern and Manage IT Risk: The Risk IT Framework (Risk IT) will be accepted through 13 March 2009 at www.itgi.org
 
While COBIT (Control [...]

No Comments

White Hat Hacking – An Interview with Marcus Pinto

Next Generation Security Software ( NGSS , www.ngssoftware.com) is a leading software security firm, with a broad range of clients in the private and government sectors. Marcus is a qualified CHECK team leader with NGSS, and co-author of The Web Application Hacker’s Handbook: Discovering and Exploiting Security Flaws ( John Wiley & Sons, 2007).
Like many [...]

No Comments

Return on Security Investment

Being a man, I have to make blow everything out of proportion when it comes to little aches, pains, headaches and man-flu’s. More often than not, I’ve gone to the Dr. convinced that some bone is fractured into small fragments and that I’ll need bolts and cables to repair them only to be told its [...]

1 Comment

Laundered USB sticks

It appears as if USB memory devices are one of the most useful yet dangerous tools ever developed.
Freeing people from the labour of carrying boxes filled with 1.4″ floppy drives, being capable of sharing songs, photos, documents and presentations with ease have made memory sticks very popular.
On the flipside, company’s sometimes use these small, easy [...]

No Comments

The shadows of security

These days if you lift up a rock in your garden, you’ll find fifty different types of infosec types crawling around.
You have the consultants, the IT guru’s, the managers who are neither consultants or IT gurus. In addition you have sub-divisions such as forensic analysts and penetration testers. Or parallel streams as auditors, assurance, risk [...]

No Comments

Security – the human factor

Protecting a business is as much to do with ‘human factors’ as it is with the IT department, argues Paul Kearney, Head of Enterprise Risk Research at BT Group.
Much can be learned from history. Take, for example, the Trojan Horse – a contraption that was received as a gift during the siege of Troy but [...]

No Comments

Ahoy there windows 7 Pirates!

Apparently pirate copies of Windows 7, the new Microsoft operating system has leaked onto the P2P file-sharing side of the internet
“Reports suggest that pirate versions of an early build of Windows 7, which is under alpha test with developers, is available for file-sharing on the Internet. Given the low level at which this operating system [...]

No Comments

2009 the year of information security

So it’s the beginning of 2009 and most people are either struggling re-adjusting to work after the holidays or wishing they hadn’t made those over-ambitious new year resolutions.
Well rather than doing the infosec resolutions for 2009, I thought I’d do something far more interesting and write a risk forecast for the upcoming year.
Now I know [...]

No Comments