dlp

Interesting Information Security Bits for 02/25/2010

by kriggins on February 25, 2010

in Interesting Bits

Good afternoon everybody! I hope your day is going well.

Here are today's Interesting Information Security Bits from around the web.

A nifty tool pointed too by Agusto that helps dig out those user/password pairs hanging around on shares.
Very nice tool for pentests | Security Balance
Tags: ( tools pentesting passwords )
If you live in the UK, you want to read this short post about your health records.
Light Blue Touchpaper >> Blog Archive >> Opting out of health data collection
Tags: ( privacy health )
OpenDNS is trying to make your DNS experience safer.
OpenDNS Blog >> OpenDNS adopts DNSCurve
Tags: ( dns dnssec dnscurve opendns )
This looks interesting. See how well you are alerting/stopping data leakage in your org.
Hydra: Data Leakage Vulnerability Test System | Fidelis Security Systems
Tags: ( dlp data-leakage tools )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Interesting Information Security Bits for 01/18/2010

by kriggins on January 18, 2010

in Interesting Bits

Good afternoon everybody! I hope your day is going well.

Here are today's Interesting Information Security Bits from around the web.

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Interesting Information Security Bits for 02/25/2009

by kriggins on February 25, 2009

in Interesting Bits

Good afternoon everybody! I hope your day is going well. Here are today's Interesting Information Security Bits from around the web.

Folks, please be careful what you put on your Facebook pages. Don't let something like this happen to you. Police: Facebook hacker gets student's nude photos Tags: ( privacy facebook )
Some video of Dino Dai Zovi, Rich Mogull, Christofer Hoff being interviewed by Dennis Fisher on virtualization. Rational Survivability: Virtualization & Security: Disruptive Technologies - A Four Part Video Miniseries... Tags: ( virtualization )
When to use the carrot and when to use the stick? Both good questions. Shrdlu has some advice for us. Carrot-sticks and security. Tags: ( enforcement )
What happens when you need endpoint DLP on Windows, Mac and Linux all at once? The answer, nothing easy 😉 Is There Any DLP or Data Security On Mac/Linux? | securosis.com Tags: ( dlp )
This looks to be like a whole lot of fun. If you are close, it should go on your list of things to do. HiR Information Report: Cowtown Computer Congress Grand Opening [Kansas City] Tags: ( hackerspace )
Erik has part 3 of his securing Linux series up. Art of Information Security >> Secure Your Linux Host - Part 3: Why A Host Firewall ? Tags: ( linux )
A nice beginning to what looks to be an interesting series. ShackF00 >> BS Filtering for CISOs: An Introduction Tags: ( ciso )

That's it for today. Have fun! Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts. Kevin

Interesting Information Security Bits for 02/09/2009

by kriggins on February 9, 2009

in Interesting Bits

Here are today's Interesting Information Security Bits from around the web.

You've probably already seen this, but if you haven't, Kaspersky had a little problem this weekend. They did get it corrected quickly.
Kaspersky database exposed | Security and the Net
Tags: ( vulnerability sql )
Folks, as Graham says, secret is secret. Don't chatter about stuff on Facebook, Twitter, etc. that should be secret. Seems obvious, but apparently, some people are quite adept at missing the elephant standing in the room.
Congressman Twitters secret trip to Iraq | Graham Cluley's blog
Tags: ( privacy socialnetworking confidentiality )
If you use OpenDNS as your name resolution provider, which I heartily recommend, you will have some additional protection in place this week.
OpenDNS to step up fight against Conficker worm
Tags: ( malware opendns conficker worms )
A nice primer on DLP.
What You Really Need To Know About Data Loss Prevention - insider threats/Management - DarkReading
Tags: ( dlp )
A nice post with some good recommendations.
Digital Soapbox - Information Security, Risk & Data Protection Blog: People Hacking 101: How to Infiltrate a Credit Agency
Tags: ( data-leakage )
The 2008 SANS Salary Survey is available.
salary_survey_2008.pdf (application/pdf Object)
Tags: ( salary )
The latest Ethical Hacker Network challenge is up. Go get'em!
The Ethical Hacker Network - Brady Bunch Boondoggle
Tags: ( challenge )
A new man-in-the-middle tool is available. It was released a Schmoo Con this weekend. Mubix has a copy for us if you are interested in playing with it.
The Middler gets released at ShmooCon! - Room362.com
Tags: ( pentest mitm )
New version available of Samurai.
Samurai LiveCD version 0.4 released | Security4all - Dedicated to digital security, enterprise 2.0 and presentation skills
Tags: ( tools samarai )
Something to think about. BTW - You might want to think about leaving your garage door opener in your vehicle. Or locking the door from the garage to the house if you do.
Digital Soapbox - Information Security, Risk & Data Protection Blog: Your GPS is evil
Tags: ( data-leakage )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Reblog this post [with Zemanta]

Interesting Information Security Bits for 12/15/2008

by kriggins on December 15, 2008

in Interesting Bits

Good afternoon everybody! I hope your day is going well.

Here are today's Interesting Information Security Bits from around the web.

Lavasoft has jumped into the anti-virus market. We'll have to keep an eye on this one.
Ad-Aware gets an antivirus cousin | The Download Blog - Download.com
Tags: ( free anti-virus )
Some interesting situation that lead to a need for data recovery. Hat tip to Xavier at /dev/random (blog.rotshell.be)
Kroll Ontrack Top Ten Data Mishaps and Recoveries - Press Release
Tags: ( amusing general )
The workarounds section for the recent 0-day for IE has been updated. This blog post goes into some further detail about the workarounds.
Security Vulnerability Research & Defense : Clarification on the various workarounds from the recent IE advisory
Tags: ( exploit vulnerability microsoft ie workarounds )
Part 2 of SynJunky's fictional story about detection of and incident response to an insider attack.
Syn: The Story of an Insider - Part 2. The Sys Admins Story
Tags: ( insider )
This is a nifty way to get the job done.
Writing a web services fuzzer in 5 minutes to SQL injection | tssci security
Tags: ( webappsec injection sql )
Woot! Version 1.2 of Burp Suite has been released.
PortSwigger.net - web application security: Burp Suite v1.2 released
Tags: ( webappsec burp )
Just go read it. You won't regret it.
Rational Survivability: GigaOm's Alistair Croll on Cloud Security: The Sky Is Falling!...and So Is My Tolerance For Absurdity
Tags: ( cloud )
Rory is writing a series of posts on penetration testing. The first is up.
Rory.Blog: What is Penetration Testing?
Tags: ( pentest )
Here is a very cool idea for a low/no cost way to implement DLP.
/dev/random >> Blog Archive >> Simple DLP with Ngrep
Tags: ( dlp ngrep )
Looks like nifty tool to add to the arsenal.
Jeremy's Computer Security Blog: JPEG Fuzzer has ARRIVED
Tags: ( fuzzer jpeg )
Watch out folks, SkyNet is just around the corner.
Schneier on Security: Killing Robot Being Tested by Lockheed Martin
Tags: ( skynet )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Interesting Information Security Bits for July 17th, 2008

by kriggins on July 17, 2008

in Interesting Bits

Hello all. I apologize for the lack of posts over the last couple of weeks. Life and death have taken up all my time. Things should be back to normal now. So without further ado, here's are some things to take a look at today.

From the Blogosphere

Wesley over at McGrewSecurity has collected a bunch of links and embedded a bunch of videos of Dan Kaminsky talks. Very cool.

Craig at SecurityWannabe gives us a link to a video of Lee Kushner and Mike Murry's talk about a career in Information Security. I attended their session at Defcon 15 and the informal Q&A after. Really good stuff. Go watch the video or even better attend their session at this year's Defcon.

Rich Mogull writes on Securosis that he will be giving a webcast entitled Using Data Leakage Prevention and Database Activity Monitoring for Data Protection on July 29th. Register here. I'll be watching. You should too.

Via security4all, VMWare has released an updated paper on hardening ESX 3.5 and VirtualCenter 2.5. It can be found here.

From the Newsosphere

Via Dark Reading, Half of Financial Firms Don't Investigate. That's not good.

Via Tech Republic, When your network admin hijacks your system. Talks about the San Fransisco situation you have already heard about.

Via Search Security, Blackberry server faced with critical zero-day. There is a flaw in the PDF handling function of the BlackBerrty Attachement Service. Bad stuff.

Via Dark Reading, MessageLabs Reveals Most Spammed States. Illinois apparently has the largest bulls eye painted on its forehead.

Via Information Week, Gmail Privacy Hole Shows User Names. Be careful with Google calendar.

That's it for today's bits. Have a great day.

Kevin