Latest Posts


We Are Infosec Professionals - Who the Hell Are You?

July 14, 2011 Added by:Javvad Malik

I explained to someone that I worked in infosec, they commented, “there’s not much you guys do given all the hacking that’s gone on lately.” I could have just explained how a lot of the so-called hacking attacks were actually DDOS, or that human error was responsible, but my mind wandered...

Comments  (11)


How to Inform Customers of a Data Breach

July 14, 2011 Added by:Kelly Colgan

The news is bad: Your company suffered a data breach. Don’t make it worse by sending out a confusing, overly technical or outright alarming letter to your customers. The goal is to inform, educate and reassure your customers, not bore or scare them...

Comments  (0)


Pentagon Admits Largest-Ever Cyber Theft to Date

July 14, 2011 Added by:Headlines

"Far from militarizing cyberspace, our strategy of securing networks to deny the benefit of an attack will help dissuade military actors from using cyberspace for hostile purposes," deputy secretary of defense William Lynn said in a speech at the National Defense University at Fort McNair...

Comments  (0)


Anonymous, LulzSec and the Trouble with Hacktivism

July 14, 2011 Added by:Rafal Los

Let's face it - these groups are unpredictable. They will take up causes on a whim as seen with LulzSec, who were taking suggestions on what cause or organization to go after next. If you're sitting staring at an IDS/IPS console somewhere, this should send shivers down your spine...

Comments  (0)


Is Your Smartphone Safe From Mobile Hacking?

July 14, 2011 Added by:Headlines

“If I had money right now, I’d bet on the Russian mafia. Mobile hacking is going to be huge," said Steve Santorelli, director of global outreach at the Internet security research group Team Cymru...

Comments  (2)


Al Qaeda’s New Digital Shingle: Al-Fidaa

July 14, 2011 Added by:Infosec Island Admin

While the site is registered in the US, the actual servers are all located in Malaysia. So, once again we see that Malaysia seems to be a hub where the Internet Jihad is concerned. I have to wonder just how well our government gets along with the Malay government...

Comments  (22)


Anonymous Hackers Attack Monsanto Systems

July 14, 2011 Added by:Headlines

"Monsanto experienced a disruption to our Web sites which appeared to be organized by a cyber-group. In addition, this group also recently published publicly available information on approximately 2,500 individuals involved in the broader global agriculture industry..."

Comments  (1)


Exclusive: A Message from Gary McKinnon's Mother

July 13, 2011 Added by:cliff sull

Being left in limbo for so many years is a horrendous form of cruelty and mental torture for a crime that the High Tech Crime Unit told Gary in March 2002 would be likely to attract a sentence of 6 months community service. We live in hope of an imminent end to this nightmare...

Comments  (8)


Metasploit Payloads Explained - Part 1 Continued

July 13, 2011 Added by:Rob Fuller

One of the down sides of that payload is you need to host the binary, giving up an IP/host that can be blocked. Well, Google recently allowed people to upload 'anything' to Google docs. You probably already see where I'm going with this...

Comments  (0)


On Cloud Computing and Things Outside the US

July 13, 2011 Added by:Ben Kepes

I know the concerns around international mail orders, but I live in New Zealand, not Nigeria. Skinomi is shutting off commerce with 95% of the global population, and doing so in a way that provides no differentiation between an economy with low levels of credit card fraud and one rife with dodginess...

Comments  (0)


Faux Security: BlackBerg Security and Shades of Project Viglio

July 13, 2011 Added by:Infosec Island Admin

Personally, I had never heard of Joe Black until he started tweeting his craziness. Over time though, he just progressively got crazier and crazier with comments and challenges to the likes of LulzSec, who then allegedly hacked him and showed him just how poor his site security was...

Comments  (34)


Over 140,000 Children Victims of Identity Fraud Yearly

July 13, 2011 Added by:Headlines

"Child identity fraud poses complex challenges to consumers, businesses and regulators. Unfortunately, minors' identities are particularly appealing to fraudsters because their personal data is untainted, legitimate and less likely to be monitored for misuse..."

Comments  (0)


Webinar: Industrial Control Systems SIEM

July 13, 2011 Added by:Chris Blask

Physical security and industrial process data is correlated with real time situational awareness of cyber assets to produce constant visibility. Join this free webinar to explore the efficiency and ease of use of AlienVault ICS SIEM...

Comments  (2)


OTA's Sixth Annual Online Trust Forum

July 13, 2011 Added by:Headlines

“As our lives, jobs and society are increasingly reliant on Internet services, we need to proactively address the issues and practices raised from the convergence of mobile, cloud and social media. User trust is proving to be a defining factor of business success, innovation and regulation..."

Comments  (9)


The Demise of the Antivirus Industry

July 12, 2011 Added by:Kevin McAleavey

Over the past 30 years, the antivirus industry was used to doing things only one way. And the creative people who came up with unique and sometimes eccentric ways of thinking outside anyone's box all got shunted aside in favor of people who did things "by the book."...

Comments  (5)


Case Study: Advance Fee Scams

July 12, 2011 Added by:Mark Baldwin

I am sure you all have received an email purportedly from a wealthy person overseas who needs your help transferring money. The reasons vary, but they always promise a large sum in return for help. Recently I received the following email that was an attempt at advance fee fraud...

Comments  (3)


Who You Gonna Call When You Lose Data in the Cloud?

July 12, 2011 Added by:Bill Gerneglia

Cloud services enable customers to securely manage workloads, system and application downtime while reducing data loss. Placing huge amounts of data in the cloud creates the need for a business resilience strategy that will ensure continuous operation and create a competitive advantage...

Comments  (0)


UPDATE: Booz Allen Hamilton Issues Statement on Hack

July 12, 2011 Added by:Headlines

"Booz Allen Hamilton has confirmed today that the posting of certain data files on the Internet yesterday was the result of an illegal attack. We are conducting a full review of the nature and extent of the attack..."

Comments  (5)


Some Opinions On PCI Self-Assessment Questionnaires

July 12, 2011 Added by:PCI Guru

Since there are multiple ways to conduct a transaction, no single SAQ will cover all of these transaction methods. And since an organization is only supposed to fill out and submit one SAQ to their acquiring bank, the question becomes, which SAQ should the organization use?

Comments  (0)


Facebook Scam: Casey Anthony Confession Video

July 12, 2011 Added by:Headlines

The operation lures Facebook users into distributing a link that professes to show an exclusive video of recently acquitted suspect Casey Anthony confessing her guilt in the mysterious death of her young daughter...

Comments  (0)