Much Ado About Java
June 12th, 2013
So, have you seen the latest about Java? Seems most organizations are still running (really) old versions. And even the current version has what is technically known as a shit-ton of zero-day vulnerabilities. And so Oracle is changing their vulnerability numbering system to accommodate all of them, in addition to taking other steps surrounding Java [...]
No Luck o’ the Irish for IT this St. Patty’s Day
March 12th, 2013
IT admins can’t seem to catch a break this year. First, the never ending stream of Java issues that has kept folks on their toes since January. Now they’ve got another busy month of patches ahead of them, with 7 total patches from Microsoft, 4 of which are critical. However, once again the issues outside of Microsoft [...]
Eliminating Java Will Not Solve Your Problem
March 6th, 2013
While many are jumping on the ‘Death to Java’ bandwagon and ranting about turning off Java to eliminate risk, it is important to put the issue in the proper context: the reality of the matter is a Java vulnerability is not the end game for a cyber criminal; it is merely a delivery mechanism in [...]
Monday Morning Patch Blues
January 15th, 2013
Security Pros sure had a tough Monday. Two issues came to a head: the Java plug-in vulnerability and the Internet Explorer vulnerability. Both are being actively exploited, and both have seen patches rushed out on Monday. Let’s take a quick look at them both. Java 0-Day A new vulnerability in Java browser plug-in used by [...]
Microsoft Kicks off the New Year With Fixes for Current Code Base
January 8th, 2013
So far, it looks like 2013 is off to a fairly average start with 7 bulletins: 2 critical and 5 important. You may recall that January of 2012 also came in with 7 bulletins, though only 1 was critical. After closing out 2012 with more consistency in the number of patches per month, we can [...]
Ransomware is Back with a Vengeance and Targeting Business
December 27th, 2012
Ransom-ware has matured since it was first seen in 1989 with the PC Cyborg Trojan. Today, it is big business for cyber criminals; and for good reason. A September article reported cyber criminals could earn between $50,000 and $60,000 a day by focusing their efforts on just a couple of countries. The severity of ransom-ware’s [...]
Spider.io Warns of Massive IE Security Flaw; But is it Legit?
December 14th, 2012
‘Twas a week before Christmas and all through the house, not a creature was stirring. Not even your ad tracked mouse I have been reading posts on both sides of this mouse tracking issue (see here and here) and I am not yet convinced the sky is falling. This simply does not reach the level [...]
7 Patches for December Brings 2012 Patch Tuesday Total to 83
December 11th, 2012
IT has 7 patches to deal with in December; 5 are critical and 2 are important. Fortunately, none are currently under active attack so that will hopefully set IT’s mind at ease as they begin to apply this set of patches. 2012 in Review With the multitude of third-party application patching needed this year from [...]
2013 Prediction Series Starts with Malware
December 10th, 2012
After a quick review of how I did on my 2012 predictions, it’s now time to get serious about what 2013 may bring. As you plan for the new year, you may find this helpful. Then again, nothing is a sure bet in IT security…that’s the one thing I know for certain. Regardless, 2013 is [...]
Initial Thoughts on Windows 8 Security
November 19th, 2012
While not an all encompassing review of the security features available in Windows 8, this post takes a quick look at some of the more noteworthy capabilities in this latest iteration from Microsoft. Windows 8 Base Security Features Windows Defender Windows Defender has evolved from a spyware product to a relatively good malware defense product. [...]






FREE Scanner
Free eBook
Over 80% of IT Directors say that mobile devices represent the greatest network security threat.



