Latest news
1) Create alias email addresses that can be replaced. “We advise that all email users create at least one separate, dedicated email alias address to be used for all of e-commerce purchases and when registering for third-party services,” explained Matthews. Also, use this email address when posting to discussion lists, news groups, message boards, and when displaying email addresses to the public, such as on a Web site. In other words, only list generic email addresses on Web sites, such as sales1@yourdomain.com, support1@yourdomain.com, etc.
One of the most prominent ways that Spammers collect email addresses is by writing automatic scripts that crawl the Internet and pick email addresses off of Web sites. For this reason, email users and Webmasters should only publish generic email aliases on the Web. These aliases should, preferably, be replaceable so that once spammers pick up on the aliases, they can be discarded and replaced with another alias address.
2) Do not give your email address away unless you are confident that the recipient is a trusted party. If it is an optional request from a third party, leave it blank. If it is required, it is best to use your temporary email alias address or an email account that you have with a free provider such as Yahoo! or Hotmail.
3) Do not unsubscribe from Spam that you receive. Many spammers use unsubscribe requests to verify that email addresses are in fact legitimate. Once you unsubscribe, they know the email was received. This actually makes your email address more valuable to spammers. If you believe that you are receiving an unwanted bulk email from a reputable company, un-subscribing will most likely be safe and should be done. However, if you don't know the sender, don't unsubscribe or reply.
4) Do not rely on AOL or other generic email addresses for business purposes. Many companies that provide free email services make money by selling email addresses and subscriber information to spammers, advertisers and other third party marketing organizations.
5) Do not reply to or forward long chain letters that you receive via email. “We believe that spammers collect email addresses from some of these chain letters that are passed through hundreds and sometimes thousands of groups of email users. While this is labor intensive for some spammers, most of the email addresses found within these chain letters are legitimate and may become spam targets,” emphasized Matthews.
6) Do not signup for any service that claims to be a “Do Not Spam List,” similar to the FCC’s “Do Not Call List.” Many of these services are fraudulent and actually may lead to your email address being added to more Spam lists.
Spotlight

Review: Logging and Log Management
Posted on 22 May 2013. | Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities
Posted on 22 May 2013. | Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware
Posted on 20 May 2013. | A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.




