I hardly ever read a book twice, in fact except for the Bible (3 times) and the collection of Ian Fleming’s James Bond books, I can’t remember having read another book more than one time. Just too many good books out there, and the unread pile of recent purchases in my office mocks me daily. But Brian Krebs new book Spam Nation has made it to ...
If you accept credit cards for payment in your business, then you are subject to the Payment Card Industry Data Security Standard or PCI-DSS. Up to now, this standard has really been more about compliance, but this year the Payment Card Industry is definitely focusing on real 24/7 365 security. The industry has been hit hard in the last two years by the BackOff POS exploits that have affected major retailers such as Target, Home Depot, and Staples, as well ...
Continue Reading →
We have come to a point in the history of networking and cybersecurity where we are seeing the effectiveness of passwords falling to the improved cracking tools of cyber-criminals. At this point the encrypted hash of an 8 character password can be solved in less ...
The vast majority of account hijacking attempts are an automated variety running on botnets. Recently Google released a whitepaper that takes a look at a less common, but more damaging threat – manual account hijacking. The distinction here is that the affected account is hijacked by a human rather than a machine, and then is exploited for maximum revenue generation by the cyber criminal.
As with the vast majority of all cyber-exploits, this one starts with a phishing email. The email ...
Continue Reading →
Tim Berners Lee, the man who created the World Wide Web (WWW) Protocol 25 years ago, says that the access to the Internet has become a basic human need, and needs to be a fundamental human right. A recent report by the World ...
My plea (falling on deaf ears I suspect)
If you receive an email titled “Fwd: Daily Report” from a coworker this is a malware attack. Clicking on the attachment not only launches the Trojan horse downloader, which automatically calls out to a malicious server to download more malware, but it also emails a copy of itself to everyone in your address book. The details of the email are below:
Email subject: FW:Daily report
Attachment name: F44907162.zip
Body: Please review attached ...
We will be presenting a seminar on small business and personal cybersecurity this month. it is sponsored by the Stillwater Area Chamber of Commerce.
If you think your business is too small to be a target for cyber-criminals, the evidence would suggest otherwise! In fact, small ...
Continue Reading →
This has happened to me a couple of times, and I always get panicked calls from clients when it happens to them. All of a sudden your email inbox is flooded with undeliverable return email messages, sent to people you have never heard of. Hundreds of them, spanning sometimes as much as a week’s time. See below.
Has your email account been hacked? Do you have to change your password? In a word, NO. You are merely the victim of “spoofing,” ...
Continue Reading →
Here is a short video that gives the Hollywood version of computer hacking. Not terribly accurate, so don’t try this at home, it won’t work. The steps are: