I will be a featured presenter at the MN Blogger Conference, on Saturday October 15, at Concordia University in St.Paul, from 8:15 am to 5:15 pm. Tickets are $20.
My presentation is titled Shields Up For WordPress Websites and Blogs.
In this presentation you will learn why WordPress sites are an attractive target for cyber-criminals and attackers, why they want to hijack your site, and how ...
Continue Reading →
Actually there are way more than ten ways, but here are some I see all the time. We can play this like a game, so go ahead and give yourself a point for each one of these that apply to you. This game scores like golf – low score wins.
Should you hire a hacker? Recently, the US Department of Defense did just that in their “Hack the Pentagon” event this spring. This event resulted in the discovery of over 200 vulnerabilities that have been remediated, making our Defense network more secure.
The hackers we are recommending would be Certified Ethical Hackers (CEH) or Offensive Security Certified Professionals (OSCP). These are professional cybersecurity practitioners who have received the specialized training ...
Continue Reading →Another election year. Use your vote carefully. Vote early, vote often. Remember, a vote for a third party candidate is just like “none of the above.”
Thanks to my Uncle Ron, I have an example of politics in action for your amusement.
So I told my son “I want you to marry a girl of my choice!”
He said “NO!”
I told him its Bill Gates daughter!!!!
He said “OKAY!”
Got in contact with Bill Gates & told him “I want your daughter to marry my son!”
He said “NO!”
I Told him ...
Continue Reading →
Many small businesses are being dragged into the arena of IT risk assessment by larger client companies, suppliers, or regulators. Common scenarios include credit card (PCI) or HIPAA compliance. Since the Target breach, smaller vendors and supplier companies who have a network connection into the IT operations of a larger company are being required to undergo the same sort of vulnerability and risk assessment ...
A recent article in Naked Security caught my eye the other day about a new web site vulnerability called HTTPoxy. This stands for HTTP requests and poisoned proxy settings. Most web site use a technology called Common Gateway Interface (CGI) to run applications such as site search, collect information submitted on web forms, display comments, run a forum, or to display database queries such as pricing in a usable form on a web page.
Cyber-criminals are encrypting your computer files and holding them for ransom. This is one of the most difficult attacks to defend, and once encrypted, impossible to overcome without paying for the decryption key. There are several new tactics appearing on the crypto-ransomware scene that we thought were worth a mention.
Here’s another look at social engineering. Another safe for everyone joke from Aaron at Miller Brothers.
A man went to his lawyer and told him, “My neighbor owes me $500 and he won’t pay up. What should I do?”
“Do you have any proof he owes you the money?” asked the lawyer.
“Nope,” replied the man.
“OK, then write him a letter asking him for the $5,000 he owed you,” said the lawyer.
“But it’s only $500,” replied the man.
“Precisely. That’s what he will reply ...
Continue Reading →
Today is the 17th anniversary of the first SysAdmin Day. If you know a SysAdmin, who would be the person you call when your computer is on the fritz, today is the day to buy them a Hallmark card, New Egg gift card, Star Wars poster or paraphernalia, or a Raspberry Pi. I am sure the electronic or the edible variety would both be enthusiastically received.
So give your computer ...
Continue Reading →
Having just discussed phishing on Monday, it makes sense to cover the social engineering practice called “baiting” today. Typically, this involves an attacker leaving removable media such as a USB flash drive or SD Media card lying around in a public location. The exploit depends entirely on the principle of “finders-keepers.” People pick these drives up, and plug them into the first computer ...
