Internet Storm Center discusses the month of CSAM false positives: ” The HUGE problem with this is false positives and false negatives.” Fortinet Blog post discusses the pressure on IT decision makers Wired story has Gonen Fink, the CEO of LightCyber, writing about how we need better products reviewing the false positives (a false positive is … Read more
A customer handed me a computer that was infected with Cryptowall 2.0 With this message: I cleaned the computer of the virus portion of the problem, but unfortunately as on many sites explaining this issue: http://www.bleepingcomputer.com/forums/t/552103/updated-cryptowall-20-ransomware-released-that-makes-it-harder-to-recover-files/ In the several guides on the Net, the best one in my opinion is this one: http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information I … Read more
OpenSSL is an open source toolkit that implements the Secure Socket Layer protocol either v2 or v3, it also runs Transport Layer Security (TLS v1) protocols So when The Register writes that Google found Poodle (Padding Oracle On Downgraded Legacy Encryption) flaw in the protocol this shows sometimes the problem of using security technologies. … Read more
SC Magazine story: apparently the Backoff malware was the culprit. 400 stores affected. Also in more breach news: coresecrutity blog implies that HomeDepot did a DIY project on their security
What happened to Kmart? how did they get breached ? Kmart had an IT department with Anti-virus and firewalls? According to krebsonsecurity – again it was the Malware on the Point-of-Sale(POS) registers. iSight consultants seem to have figured out some details of a POS malware called BlackPOS WSJ article We can help – just … Read more
