Secunia announced today the final release of NSI (“Network Software Inspector“) 2.0! This application performs scans of your network devices and reports vulnerabilities to a centralized dashboard. This is a must to maintain a good level of security inside your network. You can test if for free for 7 days
Category: Security
Microsoft Helps Big Brother
In a previous post, I talked about US authorities who have rights to read your hard drives. Today, Microsoft announced a new toy USB stick called COFEE: Computer Online Forensic Evidence Extractor. “The device contains 150 commands that can dramatically cut the time it takes to gather digital evidence, which
Big Brother is *really* Watching You!
Take care if you travel to the United States. It was a long story but finally authorities have now the right to analyze data contained on hard drives! The US Court of Appeal confirmed their rights to check the files stored on incoming notebooks! Source: http://www.reseaux-telecoms.net/actualites/lire-les-douaniers-americains-ont-bien-le-droit\ -de-copier-les-disques-durs-des-visiteurs-18062.html (French link)
NAP, 802.1x, VMPS & Co
Not a very long time ago, security was still focussed on the external side of networks and all bad guys playing on the Internet. Now, the perimeter security (DMZ, firewalls, IDS and other toys) is performed by mature technologies and devices to protect your network against external attacks (but never
OpenID – SSO for the Mass
User authentication is a key component of security practices. To allow certain operations in your websites, you first need to authenticate the user. To achieve this, there are plenty of methods. The most common is the login / password pair. Not the most secure but quite easy to deploy. One
Jail Sentence for CEO’s whitout “Due Care”
According to a study released by WebSense, 25% (!) of conducted security professionals would agree on jail sentences for CEO’s who did not respect the “due care” principle. Read the press release here for all results.
Airport Security
(c) J.D. Frazer
Plaintext Passwords Are Bad!
(Click to enlarge)
Symantec ThreatCon Level 2
Symantec raised the Threatcon Level to two. The reason? They detected in-the-wild exploit attempts targeting a GDI vulnerability patched by Microsoft on April 8, 2008. The malicious image appears to target the Microsoft Windows GDI Stack Overflow Vulnerability (MS08-021). More info about Symantec DeepSight Threat Management here.
Hubble Monitors the Internet
Addicted to security, my preference goes to monitoring of infrastructures, reporting and incidents handling. Today, networks are a business critical element in companies whatever, their business and size. I like this citation: “There are three kinds of death in this world. There’s heart death, there’s brain death, and there’s being