Interesting Information Security Bits for 01/27/2009

Good afternoon everybody! I hope your day is going well. Here are today's Interesting Information Security Bits from around the web.

1. Not only is malware watching what you type, now it is taking screen captures of what you are looking at.
   Bot software peers at victims' screens
   Tags: ( malware botnet )
2. Once again, failure to effectively secure data on a mobile storage device bites someone in a tender place.
   New Zealand man buys MP3 player with U.S. troop data | Security - CNET News
   Tags: ( breach )
3. A very nice article about storing passwords securely.
   How To Protect Your Users From Password Theft
   Tags: ( passwords )
4. Jeremiah is collecting the top web hacking techniques for 2008. This year the winner gets a free pass to Blackhat.
   Jeremiah Grossman: Calling all Researchers! Send in the Top Web Hacking Techniques of 2008
   Tags: ( hacking )
5. Qualys has release a free e-book titled "PCI Compliance for Dummies." Obviously, registration required, etc. Drazen thinks it's worth a read.
   Hat tip: http://beastorbuddha.com/2009/01/27/pci-compliance-for-dummies-from-qualys/
   e-Book: "PCI for Dummies"
   Tags: ( pci )
6. Some good advice regarding tap vs span port decisions.
   TaoSecurity: Why Network Taps
   Tags: ( network ids taps )

That's it for today.

Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

-Kevin

Tagged as: breach, ids, malware, passwords, pci