My provider is taking care of my database security. The cloud affords many advantages, including not having to set up servers, maintain them. This is good, security must also be handled by the cloud provider. Especially if this is a public cloud database. If your database is on a server and is being accessed by … Read more
Is this a sign of things to come? Geek.com story The Guardians of Peace (#GOP) hacked Sony Pictures Some specific details are on Reddit.com When one person downloaded the stolen files and they reviewed the contents: Email addresses (including the Guardians of Peace email addresses apparently) Files of internal Sony Financial reports. But … Read more
Interesting to note tomorrow is 2 weeks from Patch Tuesday November 11th (2nd Tuesday of month) and 2 weeks from patch Tuesday in December (the 9th). So it is a perfect time for reflection – thus we review a discussion of the November 2014 patch Tuesday in SecurityWeek. It means to give direction for companies that … Read more
Internet Storm Center has a post today noting the update to Burp Suite an excellent vulnerability analysis of Websites as a proxy server. While checking the update the storm center noted the inclusion of NoSQL injection in the update. At the same time why is this important? because of the prevalence of public databases or “Bigdata” … Read more
MS14-068 has been issued an out-of-band patch, as mentioned at Darkreading This is a Server patch – for Windows 2008, and Windows 2012 patch, this is a critical patch due to Kerberos authentication needing this fix. SANS Dr. Ullrich has a statement: ” Ullrich says privilege escalation rarely gets the critical rating because the step of … Read more