Articles

Authentication (33)
Compliance (20)
Cryptography (14)
Database (16)
General Security (162)
Hacking History (30)
Interviews (219)
Intrusion Detection (21)
Linux (16)
Mac OS X (22)
Malware (58)
Opinions (270)
Podcasts (73)
Security Products (116)
Storage (22)
Various (78)
Video (61)
Web Security (103)
Wireless (23)


Last 10 added articles

Wireless security and the enterprise (Interviews)
Jesse Frankel is the head of the AirMagnet Intrusion Research Team. He has been working in various areas of wireless LAN technology and applications for more than 15 years. Currently he manages the AirMagnet Enterprise WLAN IDS/IPS and performance measurement platform and drives technology directions for the Wi-Fi security space.
Quick response, quick risk? (Malware)
QR codes are intended to help direct users quickly and easily to information about products and services, but are also starting to be used for social engineering exploits. This article looks at the emergence of QR scan scams.
Keeping on top of financial malware (Malware)
A lot of people are apprehensive about buying things and accessing their bank accounts online. It is an understandable fear, especially when one is aware that it takes just a moment of carelessness or lack of concentration to make a wrong step.

There are many things users can do to drastically lower the risk of falling for the various scams. Among the most effective ones it to make the effort of keeping themselves informed about the ever changing schemes and techniques employed by cyber crooks at any given time.
Questioning of incoming data crucial for security awareness (Podcasts)
In the last six-to-twelve months, we have witnessed many different cyber attacks. Hacktivists were making a statement, the players behind the so-called Advanced Persistent Threats were often searching for company and government secrets, run-of-the-mill cyber gangs were looking for financial information.

In this podcast recorded at RSA Conference Europe 2011, Hugh Thompson, Program Committee Chair for RSA Conferences and Chief Security Strategist at People Security talks about a new breed of attackers and why the need for security awareness is now bigger than ever.
Top disaster recovery issues (Opinions)
From a business perspective, much of disaster planning revolves around all-important data back-up and recovery processes. Whether a disruption is the result of a cataclysmic event or a hardware malfunction, real business continuity cannot be maintained in this digital age without off-site backup. But offsite data back-ups are no magic solution for disaster recovery. There’s a lot more to the story.
How to foil targeted attacks (Podcasts)
There are two types of targeted attacks aimed at organizations and companies: server-side and client-side. Bradley Anstis, VP of Technical Strategy at M86 Security, talks about how most technologies used so far to prevent targeted attacks are beginning to falter and about the need for proactive defensive technologies.
Is your online bank vulnerable to currency rounding attacks? (General Security)
In the 12+ years of doing penetration tests against various critical environments, we've seen numerous online banking servers and found all sorts of vulnerabilities in them, including bugs that allowed users to take money from other users' accounts, make unlimited overdrafts on their own accounts, transfer negative amounts to other accounts (effectively sucking other users' money from these accounts) and even - frightening as it may sound - create unlimited amounts of money out of thin air.
5 reasons to enforce email monitoring (Opinions)
Managing storage continues to be one of the most significant challenges for email management, but the right tools can change this from a daily headache to an easy win. Email monitoring gives administrators those tools; providing detailed information on how email is being used, both internally and externally. Here’s a list of the top five ways email monitoring will empower you to optimize your email management.
The antivirus industry and the grayware problem (Podcasts)
In this podcast recorded at Virus Bulletin 2011, malware researcher Robert Lipovsky talks about how security companies view the subject on grayware and the latest developments regarding the distribution and anti-detection techniques used by its propagators.
Securing Android for the enterprise (Opinions)
The Android operating system doesn’t just lack an integrated IPsec VPN client; it also makes installing and configuring third-party VPN software quite complicated. IPsec VPN clients have to be integrated into the kernel of each device, and the client software has to be installed specifically for a memory area. This means that the firmware of each Android smartphone or tablet has to be modified accordingly.