The FUD techniques are certain to come up again and again as they are effective (to a degree). FUD is a marketing technique to sow fear into cost conscious customers that are thinking of going to a competitor. Pushing safety in numbers and other uncertainty creates FUD in the mind of potential customers. Thus it … Read more
To Measure Risk means to measure impact and threats(likelihood) (R=L*I) Risk = Likelihood * Impact So what does that mean? What are the threats and their effects to your environment? Answering this will give the true impact of the problem figuring out what risk one really has. (Above image was copied from @ipfconline1 twitter … Read more
Is it really as bad as some say? People are not changing default passwords and thus hackers control their machines if remote access is enabled in some way. i think it is VERY BAD – as people are really looking for ways to make bad decisions: https://superuser.com/questions/106917/remote-desktop-without-a-password \ My apologies to this person who maybe … Read more
There seem to be a few posts doing a bit of reflection: Internet Storm Center: “An occasional Look in the Rear View Mirror”, discusses that every so often look into what you can do to see if anything can be retired. At year end we look over the year and look into next year for … Read more
So what to make of the OneLogin Security Incident? So what to do when even the “experts” get hacked and potentially have lost confidence and your data. Unfortunately in this case it is usernames and passwords (potentially), as it is not obvious what was removed or accessed, as a lot of data is encrypted at … Read more
