We’re safe, it’s covered it in our policy

So apparently the courts have deemed it fine to release a labour peer from jail, even though he was texting on his mobile whilst travelling on the motorway, had a crash and killed 28 year old Martyn Gombar.
Of course, what else would you expect from a country who bought you such lovelies as Garry Glitter, [...]

Privacy Vs security Vs make me famous

It gets quite scary when the Government admits that it will cross all moral boundaries in order to prevent those terrorist networks with sleeper cells living right next door to you.
There have been many column inches and heated debates devoted to the security versus privacy argument. How much privacy are you willing to give up [...]

Tips on stamping out Data Leakage & Industrial Espionage during a Recession

At a recent monthly gathering of both good and bad hackers in a dingy pub in Leicester Square, I asked them whether the economy was opening up new opportunities for them.  The response was an overwhelming yes, with nearly everyone saying that the cut backs had caused jobs to be outsourced and, with less folks [...]

Into the Cloud we go…..have we thought about the security issues?

A new shift in computing is upon us – Cloud Computing. As our use of computing resources evolves from mainframes to PC’s and networks we are now facing a major shift in the way we work. This could have dramatic effects on the way we use our computers, both for work or play. But the [...]

Toxic information

Amongst banks going bankrupt and the economy ever-spiralling downwards, the one thing you can bet on will happen all the time is data loss. Whether it be a payment firm being breached, a retailer with an unsecured network, or employee’s walking out of the office with gigs worth of company sensitive information.
On the flip-side, amidst [...]

Another payment firm breached

The Tuscaloosa Federal Credit Union and the Pennsylvania Credit Union Association have both warned that a payment processor other than Heartland has suffered a network intrusion. DataBreaches.net first reported the confirmations.
“While it has been confirmed that malicious software was placed on the processor’s platform, there is no forensic evidence that accounts were viewed or taken [...]

Three Arrested in Heartland Data Breach

Three men in Florida were arrested earlier this week on multiple charges of credit card fraud, and some of the card numbers they allegedly used are tied to the Heartland hack.
The Leon County, FL. Sheriff’s office arrested area residents Tony Acreus, Jeremy Frazier and Timothy Johns, who had allegedly used stolen credit card numbers since [...]

What happens when you lose a CD

Between the time a company or government agency loses a cd with a gazillion records of individuals on it and it turning up on the front page of your local newspaper what do you think happens?
Looks like they dedicated a whole film to this subject!

IT Governance Institute Seeks Public Comments on New Risk IT Framework

The nonprofit, independent IT Governance Institute is seeking public comment on its new IT risk framework, which is based on the globally recognized COBIT IT governance tool set. Comments on Enterprise Risk: Identify, Govern and Manage IT Risk: The Risk IT Framework (Risk IT) will be accepted through 13 March 2009 at www.itgi.org
 
While COBIT (Control [...]

White Hat Hacking – An Interview with Marcus Pinto

Next Generation Security Software ( NGSS , www.ngssoftware.com) is a leading software security firm, with a broad range of clients in the private and government sectors. Marcus is a qualified CHECK team leader with NGSS, and co-author of The Web Application Hacker’s Handbook: Discovering and Exploiting Security Flaws ( John Wiley & Sons, 2007).
Like many [...]

Return on Security Investment

Being a man, I have to make blow everything out of proportion when it comes to little aches, pains, headaches and man-flu’s. More often than not, I’ve gone to the Dr. convinced that some bone is fractured into small fragments and that I’ll need bolts and cables to repair them only to be told its [...]

Laundered USB sticks

It appears as if USB memory devices are one of the most useful yet dangerous tools ever developed.
Freeing people from the labour of carrying boxes filled with 1.4″ floppy drives, being capable of sharing songs, photos, documents and presentations with ease have made memory sticks very popular.
On the flipside, company’s sometimes use these small, easy [...]

The shadows of security

These days if you lift up a rock in your garden, you’ll find fifty different types of infosec types crawling around.
You have the consultants, the IT guru’s, the managers who are neither consultants or IT gurus. In addition you have sub-divisions such as forensic analysts and penetration testers. Or parallel streams as auditors, assurance, risk [...]

Security – the human factor

Protecting a business is as much to do with ‘human factors’ as it is with the IT department, argues Paul Kearney, Head of Enterprise Risk Research at BT Group.
Much can be learned from history. Take, for example, the Trojan Horse – a contraption that was received as a gift during the siege of Troy but [...]

Ahoy there windows 7 Pirates!

Apparently pirate copies of Windows 7, the new Microsoft operating system has leaked onto the P2P file-sharing side of the internet
“Reports suggest that pirate versions of an early build of Windows 7, which is under alpha test with developers, is available for file-sharing on the Internet. Given the low level at which this operating system [...]

2009 the year of information security

So it’s the beginning of 2009 and most people are either struggling re-adjusting to work after the holidays or wishing they hadn’t made those over-ambitious new year resolutions.
Well rather than doing the infosec resolutions for 2009, I thought I’d do something far more interesting and write a risk forecast for the upcoming year.
Now I know [...]

The season for giving

I saw this video and it bought a tear to my eye. Let us all show some compassion not only to the IT geeks out there, but those business people who don’t have the first clue about infosec and the execs who live in fear of their job on a daily basis.
If there’s only one [...]

Holiday, George Bush, and movie education

So I’m officially on my holidays. I’ve even managed to switch off my blackberry and mobile so I can completely relax.
I tend to find the holiday period quite boring to be honest. Yes, the kids are off school, but its so cold that you’re stuck indoors with them most of the days and there’s only [...]

Family Fun

Large corporations and governments are slow. Very slow. Even with all their ‘blue sky thinking’ and ‘forward planning’ it takes them a lifetime to get anything done. Naturally information security being one of the casualties of corporate inertia.
Smaller ‘dynamic’ companies are so much easier to influence and make positive changes to. You need anything done [...]

Garage Security

Like many men, I rarely throw anything away. Especially anything with wires, batteries, or made of wood ends up in the garage. Just in case some day, like the A-team my house gets stormed by a bunch of no-good generic villains with scars, eye patches and dodgy accents. They’d probably lock me up in my [...]