UPDATE QR Codes Leading Lambs To the Slaughter
March 9th, 2012
Update – Today, March 9, a hacktivist blogger “th3j35t3r” Jesters Court revealed that for the last 5 days, they had replaced their Twitter profile picture with a QR code that sent users to a specially crafted malicious website. The malware on the site actually took advantage of a modifified and updated version of the Webkit [...]
Best Practice Mobile Security Implementation
February 27th, 2012
Mobile device management is a workplace reality that IT is scrambling to get their arms around. And justifiably so…according to the new report by Symantec, the 2012 State of Mobility Survey, organizations of all sizes are seeing numerous damages due to mobile devices in the workplace, including data loss, damage to the brand and loss [...]
Two Approaches to Managing Mobile Devices
February 6th, 2012
There is no question we have entered the era of always connected mobile devices. Smart phones, iPads, and Android devices have changed the way people access information. Last month, I discussed why denying the use of personal mobile devices isn’t a realistic view. Looking to the future, here are some considerations on how to incorporate [...]
Resist Enterprise Mobility? Another Knee Jerk Reaction
December 20th, 2011
I have logged more travel miles than I care to admit in 2011. Throughout it all, I heard significant trepidation from IT security directors and CISO’s over the invasion of their offices with those nasty, uncontrollable personal digital devices that everyone is now armed with: iPhones, Android devices, and iPads. Especially iPads. And invariably the [...]
Two Bets on 2012
December 12th, 2011
Yet another year has nearly come and gone but information security remains as interesting, challenging and relevant as ever – if not more since organized crime and foreign states have eclipsed the traditional lone hacker. Looking back, the endpoint continues to be the focus of criminal organizations. Case in point, out of 86 Microsoft security [...]
What Security Companies Can Expect in 2012
December 5th, 2011
‘Tis the season for predictions….and here’s an obvious one. Security manufacturers definitely have their work cut out for them in 2012. (Also listen to the podcast with Paul Henry and Randy Franklin Smith.) IT has big concerns about what the coming year will bring. In our newly-completed State of the Endpoint survey conducted by the [...]
Top 5 Predictions for 2012
December 5th, 2011
Back in April, I wrote 2011 had the potential to be a really bad year for securing our networks. I was right and I’m not happy about it. From ever-growing numbers of malware to an evolving endpoint environment that now includes countless mobile devices, IT security has never been more challenging. And important. Here are [...]
A 2011 RSA Security Conference Retrospective – Vendor Buzzword Analysis
February 21st, 2011
The 2011 RSA Security Conference came to an end last week, and this year, the most memorable thing for me was the San Francisco dim sum. I didn’t see or hear anything ground breaking on the exhibit floor, but there were definitely a few notable shifts on the “security buzzword” scene. From my perspective, “compliance” [...]
7 Trends to Watch for in 2011
December 13th, 2010
In 2011, the threat landscape will continue to evolve. Here are 7 trends that have a high probability of happening. 1. State-sponsored cyber crime will become a regular occurrence It all started with China and the Google hacks (APT) and reared its head again with Stuxnet. It’s no longer your disgruntled employee or even the [...]
Social App Security – An Oxymoron?
October 18th, 2010
The recent Wall Street Journal investigation on the Facebook privacy breach begs a fundamental question: Can a “social application” be secure? This is a question bigger than just Facebook. Popular mobile communications platforms such as Apple’s iOS and Google’s Android have also struggled with this as of late. Here is the core conundrum – platform [...]





FREE Scanner
Free eBook &
Over 48% of IT Directors say that mobile devices represent the greatest network security threat.



