CISPA, FISMA Passed the House. Now What?
April 24th, 2013
CISPA, the Cyber Intelligence Sharing and Protection Act, passed the US House of Representatives late last week and will move to the Senate for further debate. If this rings a bell, it should. Last summer, CISPA passed the House before stalling in the face of a Senate filibuster. Of course, it was not the only [...]
What Businesses Need to Know About Cyber Security
April 3rd, 2013
What laws are in place for cyber security and are they enough? Are the Chinese the only foreign nation hackers we need to worry about? Who are the real perpetrators? How big of a problem is stolen IP for the U.S. and other countries and what is being done about it? These questions and [...]
Are Journalists Sitting Ducks?
March 26th, 2013
Remember Mat Honan – a Wired reporter that covers consumer electronics? He had his entire digital life erased last summer. His Google account was deleted, his Twitter taken over, his iPhone, iPad and MacBook erased. How about the New York Times hack? Chinese hackers allegedly broke into the paper’s systems, stole passwords and watched reporters, [...]
Time to Think New About Security
February 25th, 2013
For the good guys to get a leg up on increasingly brazen cyber criminals, we must share breach intelligence. The bad guys do it and we are at a significant disadvantage because we don’t. Or at least we don’t at the level we should. I’ve said this many times before but the road to cyber [...]
The Shape of Things to Come with Critical Infrastructure Attacks
February 13th, 2013
How many movies have you seen where the fate of humankind depends on a geeky guy sweating in front of a computer? The specific drama varies from movie to movie, but they generally include the need to: hack into a system to get critical information, crack a password, or disable an evil supercomputer bent on [...]
The New York Times Breach: Why AV Failed, What They Should Have Done and What We Accomplish by Letting Them Stay Inside
February 1st, 2013
In yet another example in the saga of personalized malware from foreign nations, specifically China, The New York Times reported Wednesday that the Chinese had carried out an extensive malware campaign against the newspaper giant for the past four months. With this news, we see once again stand alone, signature-based defenses are completely ineffective, especially [...]
2012 in Review Podcast: State of Security Awards
January 4th, 2013
A year ago, I started doling out awards for the hits and misses of cyber security. Month by month we looked at the stories that made headlines; at times celebrating important wins but in too-many instances we were incredulous over increasingly advanced hacks. To wrap it up, I’ve selected the best of the best for [...]
Technical Notification for Lumension Antivirus Customers
December 16th, 2012
A notification for Lumension Antivirus customers… Lumension has determined that the antivirus (AV) definition file released at approximately 4:30am EST/9:30am GMT on Saturday, December 15th (AV Definition v7.0.1355548122) included a signature with a false positive detection. This false positive may cause excessive alerts of files misidentified as malware and, depending upon your AV policy settings, [...]
November Podcast: State of Security Awards
December 5th, 2012
Welcome to the November edition of the state of cyber security awards. We’ve got a few well-done’s to hand out as well as a lesson learned. As is always the case here, cyber security is an on-the-job learning process for most. Download the podcast. Government Action Impacting Our Industry News reports indicate President Obama is [...]
Disheartening Disconnect Identified by 2013 State of Endpoint Risk Study
December 4th, 2012
I’m concerned about the results of our fourth annual State of the Endpoint study just completed by the Ponemon Institute. Over the years, IT pros have reported shrinking confidence in the security of their networks. While this year is no different, the number of IT security pros who responded no, they are not more confident [...]






FREE Scanner
Free eBook
Over 48% of IT Directors say that mobile devices represent the greatest network security threat.



