04/28/2011
Major Data Breach: 70 Million PSN Accounts Stolen
On the heels of the Epsilon data breach comes one of equal, and perhaps greater, severity: Sony's PSN (PlayStation Network) had what they're calling, an illegal and unauthorized intrusion into our network. The gang at GamrFeed have more on the PSN Data Breach Details, including that, There is a laundry... Read more
04/25/2011
For Crying out Loud... Password Protect Your Wireless Router!
A debate that somehow always seems to pop up in my own life is the importance of securing your WiFi / wireless router. My friends have all gotten my lecture. My family has all gotten my lecture. My friends-of-friends have all gotten it, too. Over the years, I've dialed it... Read more
04/19/2011
Epsilon Email Break-In... Updated List of Affected Companies
It comes as no surprise that a lot of people and businesses have been affected by the Epsilon break-in. What may be a surprise to some is the breadth of the affected industries. In our previous blog on the Epsilon break-in, I said, It's just about every type of business... Read more
04/16/2011
DOJ and FBI flex muscles: Takedown of international botnet
The Department of Justice and the FBI took down an international botnet and malware codenamed 'coreflood' which has been responsible for stealing corporate data such as user names, passwords, and financial data. This is one of the largest legal take downs of an international botnet by the U.S. government. It has been operating out of Russia for almost 10 years. Read more
04/07/2011
Epsilon Break-In... What's the Lowdown?
By now you've probably gotten notice, as I have, from at least one bank / credit card company / financial institution that, Epsilon, the company they use to send email messages to you had a network breach. Looking at even a short list of affected firms, Epsilon, a company most... Read more
03/28/2011
Mozilla Firefox Takes Steps to Block Fraudulent SSL Security Certificates
Mozilla was notified of fraudulent security certificates being issued in apparent attempts to initiate an attack on 7 domain names. A total of 9 fraudulent certificates were issued. Mozilla has released new versions with several patches in attempts to revoke and 'blacklist' the serial numbers of these fraudulent security certificates, which could have been used to deceive users into thinking they were using legitimate websites and revealing sensitive information to would-be attackers. Mozilla is working with their partners to further mitigate and prevent future attacks. Read more
03/22/2011
Hacker Gang Leader Sentenced to 9 Years for Hospital Computer Attacks
Microsoft Working to Take Down Win32/Rustock Botnet
Microsoft's MARS unit, in collaboration with industry and academic partners, have worked over many months to seize command and control servers to effectively disrupt the spread of the Rustock botnet which is statistically responsible for as much as 80% of all spam traffic at their peaks. Read more
03/16/2011
Windows 7 SP1 Security Updates... What's Included?
Summary of Microsoft Windows 7 Security related fixes. Read more
03/15/2011
Adobe Warning Issued For Potential of Attacks on Flash Player Vulnerability
A security vulnerability within Adobe Flash Player, Reader, and Acrobat could allow an attacker to remotely run arbitrary code for targeted attacks. A fix is currently in the works, scheduled for release by March 21, 2011. Acrobat Reader X is not affected due to its 'Protected Mode'. Read more