Networks
The latest technologies and best practices to secure local, virtual, cloud, and hybrid networks.
-
Digital Certificate Dangers, and How to Fight Them
Digital certificates play a vital security role on the Internet. They allow you to prove that your websites are genuine, sign applications and software updates to prove that they originated from you, and communicate with customers easily using encryption. The drawback to certificates is that if anything goes wrong, the potential fallout can be disastrous.… Read more
-
Citigroup Acknowledges Massive Data Breach
American Banker reports that Citigroup recently admitted having failed to safeguard the personal data (including birthdates and Social Security numbers) of approximately 146,000 customers who filed for bankruptcy between 2007 and 2011 (h/t Softpedia). Citi apparently failed to fully redact court records placed on the Public Access to Court Electronic Records (PACER) system. “The redaction… Read more
-
Avira Browser Security Blocks Chrome Browser
Avira recently acknowledged that Avira Browser Security doesn’t allow Web sites to be displayed in the Chrome browser once it’s updated to verison 28 (h/t The H Security). Affected products include Avira Professional Security 2013, Avira Free Antivirus, Avira Antivirus Premium 2013, and Avira Internet Security 2013. “This is caused by an incompatibility between the… Read more
-
Suffolk University Admits Security Breach
Boston’s Suffolk University recently began notifying an undisclosed number of people who used their credit cards to purchase tickets to Suffolk University events that their personal information may have been accessed when ticketing vendor Vendini was hacked in March of 2013. According to the notification letter [PDF file], customers’ names, mailing addresses, e-mail addresses, phone… Read more
-
Hetzner Hacked
The German Web host Hetzner recently notified its clients that its technicians had discovered a backdoor in one of its Nagios internal monitoring systems (h/t The H Security). “An investigation was launched immediately and showed that the administration interface for dedicated root servers (Robot) had also been affected,” Martin Hetzner stated in the notification letter.… Read more
-
Most Common Web Security Attack? Not SQL Injection
Jeremiah Grossman, founder and CTO of Whitehat Security, has seen a lot of different types of security attacks in his time. He knows the most common types of attacks aren’t necessarily the ones that have the most risk. In its just-released Annual Website Security Statistics report, Whitehat Security provides insight into the attacks it saw… Read more
-
6 Emerging Security Threats, and How to Fight Them
The security threat landscape changes constantly, with malicious hackers developing new ways to compromise your systems as older vulnerabilities are discovered and patched. So it’s important to be aware of the threats to enterprise security that are coming over the horizon and heading this way. It’s a question the Georgia Institute of Technology addresses… Read more
-
Cloud Security Standards: What You Should Know
Enterprises continue to be drawn to the cloud, where data and application management is outsourced to a third party in charge of hardware infrastructure. The cloud has matured to where it now comprises several specialized services described by an alphabet soup of acronyms: SaaS (software-as-a-service), PaaS (platform-as-a-service) and perhaps the least pronounceable of all, IaaS… Read more
-
Anti-Virus Isn’t Enough: 7 Steps to Discourage Hackers
When hackers broke in to the New York Times’ network, evaded its anti-virus software and began plundering its computer systems, it highlighted a rather uncomfortable truth: ?Anti-virus software is not that good at keeping systems secure. That means that any company that relies on an anti-virus package to secure its endpoints is exposing itself to… Read more
-
Webroot Uncovers Site Offering PayPal Accounts for Sale
Webroot’s Dancho Danchev reports that a new underground e-shop has been launched specifically to sell access to hacked PayPal accounts. “The E-shop is exclusively targeting United States citizens, and currently has an inventory of 1,543 hacked PayPal accounts, followed by another 14 for the United Kingdom,” Danchev writes. “The cybercriminals who sell the information provide… Read more
