It Takes a Network to Fight Networks
At the RSA pre-conference Cloud Security Alliance (CSA) Summit both Philippe Courtot (CEO, Qualys) and Marc Goodman (Author, “Future Crimes”) highlighted the need for a paradigm shift in how enterprises and societies address cloud security.
Courtot finds… Continue reading
CBS Launches CSI Cyber Series with Hacked Baby Cam Story
Cyber CSI’s “Kidnapping 2.0” episode highlights cybercrime, forensics, IoT vulnerabilities, darknets and password quality issues for the public. Police and other law enforcement investigators should watch for any realistic tips and techniques they can use. But politicians and prospective… Continue reading
After the Breach (Part 2): Cyber-Insurance?
APTs and cybercriminals are in the news again with more end-of-2014 breach statistics emerging from the analysts. Here’s an update of my After the Breach (Part 1) post with links to some of the latest information, and a new… Continue reading
Cyber-Investigations: A Brute Force Attack on Word Press
They came in the morning. Over 800 emails, John said. Looking like the ones in the picture below. John was concerned but relieved that he’d enabled the WordPress plugin “Limit Login Attempts.” He said his company’s web… Continue reading
Russian Billion-Password Hack: Just Another Teachable Moment?
Some greeted the New York Times Russian Hackers Amass Over a Billion Internet Passwords with elation (“Wow – this will help sell our product!“) but seasoned security experts picked the reports apart with cynical ease:
- “My… Continue reading
Senior Safety Online
While having dinner at a nearby retirement home with some friends of my mother’s I saw signs of cybercrime polluting the tranquil ponds of their lives. In between sharing family updates and reminiscences from the past, I learned that my… Continue reading
Lessons Learned from the Target Attack
Previously on Security-Architect, I wrote about the Target Breach that Spoiled Christmas. It truly was a massive breach, affecting perhaps 40 million cardholders, among them members of my own family. Its not a pun to say that this attack… Continue reading
The Breach that Spoiled Christmas
Trouble stalks the land of milk and honey. Hackers and identity thieves prowl amid the flocks of shoppers like hyenas this busy Christmas season, picking off their prey. Thus, it seems I “purchased” a $241 Michael Koors handbag from Macy’s… Continue reading
Cyber-Investigations: The Case of the Command-Injection Attack
As a consulting analyst, I focus on security architecture and strategic planning, not day to day operations. But people know that if you meet a security expert at a dinner party you can probably get him to investigate that strange… Continue reading