Wednesday, August 17, 2005

CNN.com - Worm strikes down Windows 2000 systems - Aug 16, 2005

CNN.com - Worm strikes down Windows 2000 systems - Aug 16, 2005

The sad part about this is that the patch to help prevent this had been out a week. And a simple router change would prevent much of the traffic.

One minor part - SANS is not based in Jacksonville, FL, just Johannes. It would be nice to get most of the information right, but this is CNN.

Friday, August 12, 2005

User Education Sites

You have heard all your life that education is important, and that is especially true online. You can learn about how to better protect yourself by learning what the proverbial bad guys are trying to do to get your information. There are several good sites out there that try to educate the normal user on what threats to your information exist and how you can protect yourself. These newsletters attempt to take possibly technical information and make it readable to the normal internet user. Such sites (and their associated newsletters) are as follows:

US-CERT - The United States Computer Emergency Readiness Team (US-CERT) is a partnership between the Department of Homeland Security and the public and private sectors. This partnership has allowed a furthering of computer security both within the federal government and with home users as they publish threats, best practices, and other education materials. Two pages within the site have great links for educating yourself about the internet in general and the threats that have materialized. These sites are http://www.us-cert.gov/cas/tips/index.html and http://www.us-cert.gov/nav/nt01/.

SANS Institute - This computer security think tank has a philosophy of educating both the technical and non-technical with securing the internet. The Ouch! newsletter is a security awareness document that shows you how to avoid phishing, viruses, and other malware (bad programs).

Knowledge is power. The more you educate yourself online, the better (and safer) your internet experience will be.

Wednesday, August 10, 2005

Security still underfunded

Security still underfunded

Why is computer security still a challenge in the world. One of the leading reasons still happens to be user education (which is always a driving factor). In addition, it is still a struggle for IT departments to convince the CXO's of companies of the real ROI of computer security.

Tuesday, August 09, 2005

Antispyware firm warns of massive ID theft ring - Computerworld

Antispyware firm warns of massive ID theft ring - Computerworld

Sunbelt software happens to stumble on a site that had accounts for at least 50 financial institutions. Spyware had been installed on various PC's around the world and reported back to this web site.

Thursday, August 04, 2005

Worm hole found in Windows 2000 | CNET News.com

Worm hole found in Windows 2000 | CNET News.com

Eeye has announced a second Microsoft Vulnerability this week (not much information), this one being "wormable" and at the core of the TCP/IP implementation (from what I understand).

Worth keeping an eye on it.