Articles

Authentication (33)
Compliance (20)
Cryptography (14)
Database (16)
General Security (162)
Hacking History (30)
Interviews (218)
Intrusion Detection (21)
Linux (16)
Mac OS X (22)
Malware (57)
Opinions (270)
Podcasts (73)
Security Products (116)
Storage (22)
Various (78)
Video (61)
Web Security (103)
Wireless (23)


Last 10 added articles

Keeping on top of financial malware (Malware)
A lot of people are apprehensive about buying things and accessing their bank accounts online. It is an understandable fear, especially when one is aware that it takes just a moment of carelessness or lack of concentration to make a wrong step.

There are many things users can do to drastically lower the risk of falling for the various scams. Among the most effective ones it to make the effort of keeping themselves informed about the ever changing schemes and techniques employed by cyber crooks at any given time.
Questioning of incoming data crucial for security awareness (Podcasts)
In the last six-to-twelve months, we have witnessed many different cyber attacks. Hacktivists were making a statement, the players behind the so-called Advanced Persistent Threats were often searching for company and government secrets, run-of-the-mill cyber gangs were looking for financial information.

In this podcast recorded at RSA Conference Europe 2011, Hugh Thompson, Program Committee Chair for RSA Conferences and Chief Security Strategist at People Security talks about a new breed of attackers and why the need for security awareness is now bigger than ever.
Top disaster recovery issues (Opinions)
From a business perspective, much of disaster planning revolves around all-important data back-up and recovery processes. Whether a disruption is the result of a cataclysmic event or a hardware malfunction, real business continuity cannot be maintained in this digital age without off-site backup. But offsite data back-ups are no magic solution for disaster recovery. There’s a lot more to the story.
How to foil targeted attacks (Podcasts)
There are two types of targeted attacks aimed at organizations and companies: server-side and client-side. Bradley Anstis, VP of Technical Strategy at M86 Security, talks about how most technologies used so far to prevent targeted attacks are beginning to falter and about the need for proactive defensive technologies.
Is your online bank vulnerable to currency rounding attacks? (General Security)
In the 12+ years of doing penetration tests against various critical environments, we've seen numerous online banking servers and found all sorts of vulnerabilities in them, including bugs that allowed users to take money from other users' accounts, make unlimited overdrafts on their own accounts, transfer negative amounts to other accounts (effectively sucking other users' money from these accounts) and even - frightening as it may sound - create unlimited amounts of money out of thin air.
5 reasons to enforce email monitoring (Opinions)
Managing storage continues to be one of the most significant challenges for email management, but the right tools can change this from a daily headache to an easy win. Email monitoring gives administrators those tools; providing detailed information on how email is being used, both internally and externally. Here’s a list of the top five ways email monitoring will empower you to optimize your email management.
The antivirus industry and the grayware problem (Podcasts)
In this podcast recorded at Virus Bulletin 2011, malware researcher Robert Lipovsky talks about how security companies view the subject on grayware and the latest developments regarding the distribution and anti-detection techniques used by its propagators.
Securing Android for the enterprise (Opinions)
The Android operating system doesn’t just lack an integrated IPsec VPN client; it also makes installing and configuring third-party VPN software quite complicated. IPsec VPN clients have to be integrated into the kernel of each device, and the client software has to be installed specifically for a memory area. This means that the firmware of each Android smartphone or tablet has to be modified accordingly.
Mobile application security risks (Podcasts)
Security experts have already agreed on the fact that the increased use of personal mobile devices and smartphones for work purposes is one of the biggest threat to the security of business data.

In this podcast recorded at the RSA Conference Europe 2011, Chris Eng, VP of Research at Veracode, talks about mobile application security and the encouraging trend of companies trying to understand the risks tied to their use.
The challenges of setting up a security conference (Podcasts)
In this podcast recorded at the SecurityByte 2011 conference held this year in Bangalore, India, the conference founder Nishchal Bhalla talks about his motivations for organizing such an event in his native country and what he hopes it will achieve.

He shares knowledge regarding the differences between the organization processes involved when setting up this type of event in India as opposed to North America, which he says have a lot to do with the fact that there is lack of awareness about security in India, and that the majority of such events held there are mostly vendor-driven and free for visitors.