International Data Privacy Day is false observance

Yes you knew it would happen, Jan 28 is International Day of Privacy Day https://blog.mozilla.org/blog/2015/01/27/get-smart-on-international-data-privacy-day/ Of course it has many meanings from authoritative sources: http://en.wikipedia.org/wiki/January_28  or http://www.on-this-day.com/onthisday/thedays/alldays/jan28.htm this may be the most useful historical event I can see: 1973 – CBS-TV debuted “Barnaby Jones”  on January 28. ————————————————————————— Yes my belief that we create days … Read more

QWERTY keylogger: “Connect the Dots”

Snowden documents lead to Regin and malware. http://threatpost.com/researchers-link-regin-to-malware-disclosed-in-recent-snowden-documents/110667 The malware  seems to be related to the QWERTY keylogger found in the Snowden documents.  The researchers claim a connection with Regin malware platform and the QWERTY keylogger noted in Snowden’s documents. Here is a blog post on the analysis of the QWERTY keylogger to the Regin … Read more

Fear The Killer Malware

Killer Malware…  what does it mean?  When is it coming? It means a distributed spam network (hard to blacklist)   (as John Stewart from Cisco mentioned http://oversitesentry.com/john-stewart-cisco-security-exec-interviewed-by-bloomberg/ ) A Zero-day malware included in well written (targeted) spam.  Like the Flash vulnerability that just came out. https://nakedsecurity.sophos.com/2015/01/23/adobe-issues-emergency-fix-for-flash-zero-day/   And then we come to the “Killer” part, Ransomware … Read more

John Stewart Cisco Security Exec interviewed by Bloomberg

Cisco Chief Security and Trust Officer John Stewart discusses cybersecurity threats on “Bloomberg West.” (Source: Bloomberg) http://www.bloomberg.com/video/will-companies-change-cybersecurity-strategies-k5cirOKjQeaeHPB0upsCFg.html Interesting conversation (only a few minutes): Experience only 25 years so far (Internet Cyber security) Where does the gap need to be closed (the board versus operations communications and understanding) The spam delivery mechanism changed the game last … Read more

Patches? “We don’t need those stinkin’ Patches”

Yet another Adobe Flash patch is out: Here is where they are all located: http://helpx.adobe.com/security.html Yesterday 2 patches (fixing vulnerabilities found) were released http://helpx.adobe.com/security/products/flash-player/apsa15-01.html “Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.  We are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems … Read more