2010 Predictions Redux- 2nd Half Predictions and Looming Threats
June 22nd, 2010
As we ended 2009 and entered 2010, many predicted that 2010 was poised to go down in history as “the year of insider threats”. It was not a risky prediction to make considering our economic peril and our industries continued unwavering albeit misplaced focus on the gateway rather then endpoint security. The Worldwide State of [...]
Whitelisting: Fill in the Gaps Where Traditional Efforts have Failed
May 27th, 2010
You’ve probably heard about three recent security-related events that attracted lots of attention. In January, Google announced that it suffered a “highly sophisticated” and targeted hacker attack—originating from China— against its corporate network. In April, an ill-fated false-positive antivirus signature was pushed out that accidentally removed a key part of Windows from machines. And a [...]
Kneber BotNet / Zeus Trojan Strikes!
February 18th, 2010
Makes Us Wonder if Web 2.0 / Social Apps are a Boon or a Bane.
Chained Exploits: The Business Side of Hacking
October 19th, 2009
As far back as a decade ago, attacks consisted of simultaneously launching strikes utilizing multiple vulnerabilities to gain a foothold in a target network and then following up with privilege escalation attacks to make it more worthwhile for the bad guys. For many years, we simply referred to these attacks as blended threats. While “Chained [...]
Chris’ Security Cache Contemplation: Week 6
July 6th, 2009
A quick note on some interesting news/tidbits I’ve run across whilst trying to keep up with/clean out my RSS feed before I head out for the 4th of July weekend… The Iceman Goeth. Saw where Max Ray Vision (nee Butler), aka “Iceman,” has plead guilty to two counts of wire fraud stemming from the theft [...]
Profile of the World’s Top Hackers – How the Game has Changed
July 1st, 2009
My take: New Internet-based technologies bring new opportunities for the bad guys. The growth of the applications we use has gone from dozens to nearly 1,000. The losses are huge, and while the top-line number is disputable, no one can argue that cybercrime losses have reached previously unforeseen levels. Regardless of whose survey you read, [...]
Meet Gumblar – Son of Conficker
June 1st, 2009
Back in 2008, it was reported that a website was compromised once every five seconds to contain web-borne malware. Today, the rate is still increasing, as another website is reportedly now being compromised every 4.5 seconds. The end game remains the same – downloading and installing malware. The compromised PC most often becomes a soldier in [...]
Zero-day MS PowerPoint Vulnerability– exploit actively being used in the wild
April 3rd, 2009
Another day, another exploit – and no, this time it’s not related to Conficker. There is a new zero-day vulnerability lurking in-the-wild that impacts older versions of MS Office; Office 2000, Office XP, Office 2003 and also includes Mac Office. However, please note that the latest version of Office 2007 is not vulnerable. Microsoft reports [...]
Conficker: No Drama Today but the Threat Still Looms
April 1st, 2009
Conficker has done exactly what we thought it would do – quietly updating its software without incident. Honeypot’s in SE Asia have confirmed that it has received the update and is now able to get its future marching orders and updates in a much more stealthy and resilient manner then ever before. So, while today’s [...]
All Quiet On The Eastern Front as it Relates to Conficker
March 31st, 2009
Latest network traffic in China indciates that Conficker will not materialize into the overhyped sensation that it tuned out to be; however, Conficker turned out to be a very important lesson for everyone. Conficker is an aggressively spreading computer worm that has been laying down a powerful botnet infrastructure that can then be managed by [...]




FREE Scanner
Free eBook &
Over 48% of IT Directors say that mobile devices represent the greatest network security threat.



