Optimal Security : the Lumension Blog

Over the past months it has been interesting to watch the furor over certain End-User License Agreements and the definition of data ownership.  Most draconian was the idea that once posted by a user, the data transferred ownership to the social networking site.  This of course has huge implications to an individual user, especially for [...]

Gosh, my apologies dear readers (Hi Mom), it’s been a while since I’ve written a post … not for a lack of news, but my day job has kept me hoppin’ lately.
But the news out of California was enough to jolt me out of my lethargy. Seems the Governator has vetoed SB 20, the widely [...]

There’s been a lot of talk about what role whitelisting will play in the endpoint protection suites of the future.  Opinions dissent about what it will take for whitelisting to become easily implementable for users and whether it will replace or augment the traditional anti-virus approach.  Whatever the opinion, I think most folks can agree [...]

As far back as a decade ago, attacks consisted of simultaneously launching strikes utilizing multiple vulnerabilities to gain a foothold in a target network and then following up with privilege escalation attacks to make it more worthwhile for the bad guys. For many years, we simply referred to these attacks as blended threats. While “Chained [...]

With Twitter expected to top 18 million users by the end of this year, users of the widely utilized social media tool are seeing first-hand the ugly side of this popular platform.  Another Twitter phishing scam reared its ugly head this week, aggressively sending out direct message spam, hoping to lure unsuspecting users to click [...]

Paul Henry, Forensics and Security Analyst, provides his insights in this October Patch Tuesday Security Briefing.

This month’s Microsoft Patch Tuesday update has reached an all time high with 13 bulletins, which surpasses the previous high of 12 released in October 2008. IT pros won’t only have to deal with the large amount of patches, but the update also includes fixes for 34 security issues with zero-day issues continuing to be [...]

We could all learn a thing or two about developing an effective cyber security strategy from the government of Singapore. I was recently in Singapore to do a keynote for Singapore GovWare on the Changing State of the Endpoint and, while I was out there, I witnessed something interesting the Singapore government was doing to [...]