Interesting Information Security Bits for 02/09/2009

Here are today's Interesting Information Security Bits from around the web.

1. You've probably already seen this, but if you haven't, Kaspersky had a little problem this weekend. They did get it corrected quickly.
   Kaspersky database exposed | Security and the Net
   Tags: ( vulnerability sql )
2. Folks, as Graham says, secret is secret. Don't chatter about stuff on Facebook, Twitter, etc. that should be secret. Seems obvious, but apparently, some people are quite adept at missing the elephant standing in the room.
   Congressman Twitters secret trip to Iraq | Graham Cluley's blog
   Tags: ( privacy socialnetworking confidentiality )
3. If you use OpenDNS as your name resolution provider, which I heartily recommend, you will have some additional protection in place this week.
   OpenDNS to step up fight against Conficker worm
   Tags: ( malware opendns conficker worms )
4. A nice primer on DLP.
   What You Really Need To Know About Data Loss Prevention - insider threats/Management - DarkReading
   Tags: ( dlp )
5. A nice post with some good recommendations.
   Digital Soapbox - Information Security, Risk & Data Protection Blog: People Hacking 101: How to Infiltrate a Credit Agency
   Tags: ( data-leakage )
6. The 2008 SANS Salary Survey is available.
   salary_survey_2008.pdf (application/pdf Object)
   Tags: ( salary )
7. The latest Ethical Hacker Network challenge is up. Go get'em!
   The Ethical Hacker Network - Brady Bunch Boondoggle
   Tags: ( challenge )
8. A new man-in-the-middle tool is available. It was released a Schmoo Con this weekend. Mubix has a copy for us if you are interested in playing with it.
   The Middler gets released at ShmooCon! - Room362.com
   Tags: ( pentest mitm )
9. New version available of Samurai.
   Samurai LiveCD version 0.4 released | Security4all - Dedicated to digital security, enterprise 2.0 and presentation skills
   Tags: ( tools samarai )
10. Something to think about. BTW - You might want to think about leaving your garage door opener in your vehicle. Or locking the door from the garage to the house if you do.
    Digital Soapbox - Information Security, Risk & Data Protection Blog: Your GPS is evil
    Tags: ( data-leakage )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Tagged as: challenge, data leakage, dlp, malware, mitm, social networking, sql injection, Tools