Posted on November 29, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* New highly damaging attack plays on the very fear of being attacked
* Stopping insider attacks with the right internal controls
* Our take on this week’s news.
–> Stream This Week’s Show with our Built-In Flash Player:
–> Scroll down to [...]
Filed under: Breach, Court Cases, Legislation, Podcast, Vulnerabilities, criminal forensics, darkweb, ediscovery | Tagged: Apple, HIPAA, Insider Threats, iPhone, Las Vegas Metro Police, XSS, Zues Banking Trojan | Leave a Comment »
Posted on November 23, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* FBI Report: Latest target for the cybercriminal? Law Firms and PR Firms
* Adobe Speaks: special segment with their senior security officers
* Our take on this week’s news.
–> Stream This Week’s Show with our Built-In Flash Player:
–> Scroll down [...]
Filed under: Breach, Court Cases, Podcast, Vulnerabilities, criminal forensics, darkweb, eMail Security, ediscovery, web server security | Tagged: Adobe Flash, darkweb, Drive-by download, SQL Injection, Surveillance cameras, Trojan, web application security | Leave a Comment »
Posted on November 19, 2009 by datasecurityblog
For Thursday November 19th, and Friday November 20th, we depart from our regular format for those with an advanced understanding of information security technologies.
These two special editions feature technical conversations with newsmakers on new counter measures to fight web drive-by downloads. Part one (this episode) features Pedro Bustamante, Senior Security Researcher with PandaSecurity. Part [...]
Filed under: Interview Only Edition, Podcast, Vulnerabilities, darkweb, web server security | Tagged: darkweb, Drive-by download, endpoints, Panda, SQL Injection, web application security, XSS | Leave a Comment »
Posted on November 16, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* The odds of unknowingly logging onto an ‘evil twin’ of your online banking site is increasing due to new broadband hazards.
* A revised Google Book Settlement was submitted to the courts . It doesn’t address privacy at all.
* [...]
Filed under: Breach, Court Cases, Podcast, Vulnerabilities, criminal forensics, darkweb, ediscovery | Tagged: Adobe, DefCon, Drive-by download, ediscovery, EFF, Google Books, iPhone, Trojan, TSA, two factor, web application security | Leave a Comment »
Posted on November 8, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* Why are web drive-by downloads proliferating like cockroaches?
* Sixty Minutes just covered a data security story. We rate the coverage.
* Our take on this week’s news.
–> Stream This Week’s Show with our Built-In Flash Player:
–> Scroll down to [...]
Filed under: Breach, Conference Coverage, Court Cases, Podcast, Report Security Flaws, Vulnerabilities, criminal forensics, darkweb, ediscovery, web server security | Tagged: 60 Minutes, Apple, Drive-by download, iPhone, mobile phone security, OWASP, PCI, Power Grid, SQL Injection, SSL, Surveillance cameras, web application security, XSS | 1 Comment »
Posted on November 1, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* Placing an online bet for the World Series? Employees of online betting sites might be selling customer data online.
* Google Book Search: What data is Google storing about readers of online books?
* Our take on this week’s [...]
Filed under: Annoucements, Breach, Court Cases, Legislation, Podcast, Vulnerabilities, criminal forensics, darkweb, ediscovery | Tagged: darkweb, ediscovery, EFF, FCC, Google Book Search, Law Abiding Citizen, Online Bingo, Online Gaming, Online Poker, Online Sportsbook, Social Engineering, World Series | Leave a Comment »
Posted on October 27, 2009 by datasecurityblog
President Obama is annoucing $3.4b in stimulus monies for the “Smart” Power Grid today (see story here).
But, here is part of the story that is not getting much, if any, coverage: What are the security and privacy issues in deploying the Smart Grid and Smart Meters?
While I am not an expert on energy, I am [...]
Filed under: Legislation, Vulnerabilities, criminal forensics, ediscovery, web server security | Tagged: darkweb, Drive-by download, Smart Grid, web application security | Leave a Comment »
Posted on October 19, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus ten)
On this week’s program:
* Now the bad guys are holding computer files for ransom if you don’t buy their phony anti-virus software. We have a workaround.
* Midyear elections are coming up, and the last thing the campaigns seem to think about [...]
Filed under: Breach, Business Continuity, Court Cases, Vulnerabilities, darkweb | Tagged: darkweb, Drive-by download, PCI, Ransomware, Rogueware, Total Security, Trojan, USB security | Leave a Comment »