Latest news
-
Nipper Studio: A new approach to security auditing
| by Berislav Kucan - Friday, 12 April 2013.
Developed by UK-based Titania Ltd., Nipper Studio is an interesting solution that takes a whole new approach towards security auditing. Wouldn't it be great to be able to analyze the security of vital aspects of your network in just a couple of seconds? It may sound overly optimistic, but Nipper Studio aims to do just that. -
Instant Penetration Testing: Setting Up a Test Lab How-to
| by Zeljka Zorz - Wednesday, 10 April 2013.
If you want to start practicing penetration testing, you will be needing a test lab. This book will tell you what you need in order to do it, how to set it up, and how to use it in a simple, straightforward manner. -
Lookout for iPhone
| by Berislav Kucan - Thursday, 4 April 2013.
One of the recent issues of Forbes magazine featured a three-page story on Lookout Inc., the company that, according to the article, has been able to trounce multibillion-dollar security giants like McAfee and Symantec.
With their free application for several types of mobile devices, they managed to attract more than 30 million users. Even if you, like me, don't equate the number of downloads with the number of users, it can't be denied that the company is on fire. -
The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win
| by Mirko Zorz - Thursday, 28 March 2013.
As I've always worked at small companies, I've been fascinated by the politics and problems experienced by those working for larger organizations. Surviving and thriving in such an environment requires an entirely different skill set.
This book is about doing IT work in a challenging, fast-paced environment with shrinking budgets, inadequate equipment, and (sometimes) corrupt databases. -
Client-Side Attacks and Defense
| by Zeljka Zorz - Wednesday, 20 March 2013.
Whether it's security vulnerabilities in software used by millions of home users and employees, or the natural human tendency to trust what comes at us, but even the most complex and far-reaching attacks today start with the compromise of a single endpoint.
Unfortunately, this trend will continue until we either all learn to avoid all of these threats or software and hardware developers churn out completely secure solutions - which means never. But, let's do what we can, shall we? Educating ourselves shouldn't be a chore, but a welcome option.
Spotlight

Review: Logging and Log Management
Posted on 22 May 2013. | Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities
Posted on 22 May 2013. | Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware
Posted on 20 May 2013. | A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.




