An Inconvenient Truth of blogging

December 1st, 2007 No Comments »

Al Gore’s Word-Press blog to promote his film “An Inconvenient Truth” was recently hacked with links selling online pharmaceuticals. These types of attacks are far too common with spammers looking for ways to peddle their wares. Like many other blog platforms, Word-Press has been plagued with security exploits and vulnerabilities.

Hackers compromise high profile sites like these to build legitimate links to their empire of sites to build traffic storms and search engine rank.

One of the most effective ways to protect your blogs is to keep the software up to date. It is also common for hackers to add malicious code to blog skins then distribute them publicly through sites like WP-Shere.

Tags: , , ,

Author: Christopher

(No Ratings Yet)
Loading ... Loading ...

95% of Information Security breaches are from known vulnerabilities and misconfigurations

October 28th, 2007 No Comments »

It’s a shocking but true statement.

But then if the vulnerabilities and misconfigurations are known, why are steps not taken to correct them?

Well, the answer lies in the question itself. The vulnerabilities are known but which ones exist in your system’s network need to be identified.  The first step towards protection against security breaches is identification of these vulnerabilities. This is achieved through security audits and vulnerability scans.

A number of people question the need for security audits and few people even dismiss them as unnecessary. Some people believe that their anti-virus software can take care of all such security concerns. And it’s astonishing to know that a lot of people either have obsolete anti-viruses that are not updated as frequently as they should be or their anti-virus software has poor virus detection rate.

The need for protection varies from business to business. Though a powerful anti-virus software might suffice one business’ security needs; other businesses might require a more sophisticated security solution that comprises protection against malware of all types (malware is the short for “malicious software” and includes viruses, Trojans, worms, spyware, and adware).

Security audits involve a thorough analysis of the systems/network and security practices in order to determine the security solution that would best suit the organization. Security audits involve a lot of tests to identify misconfigurations, firewall vulnerability (e.g. due to exposed workstations), password policy, suitability of current anti-virus software, network component (modems, dial pools etc) vulnerability, vulnerability of web services, mail databases, etc. You must ensure that your security auditors perform all the relevant security tests and give you a complete and comprehensive security solution

Tags: , ,

Author: Christopher

(No Ratings Yet)
Loading ... Loading ...

How much is your identity worth?

September 19th, 2007 No Comments »

5 billion dollars… That is the estimated value of the black market for identity theft if it was on the NY Stock Exchange. On top of that, the market for identity theft has managed to grow 60% year to year. Although only a few cases are disclosed, over 70 million cases of identity theft were reported under the California data-breach act SB1386 in 2007 so far.

The average price for a stolen identity has dropped from an average of $125 three years ago to about $16 per identity stolen according to multiple researchers. As the price goes down, the instances of identity theft will rise. Shredding all your trash and defending your identity is not necessarily enough to prevent this from happening to you, your family, and your employees. A majority of the identity theft cases are the result of corporate security breach and other events outside your control.

Looking for a way to guarantee your good name? Look no further, Lexan Systems has partnered with LifeLock to provide guaranteed protection against identity theft for you, your family, and your employees.

Tags: , ,

Author: Christopher

(No Ratings Yet)
Loading ... Loading ...

Security Breach; fine $3M

August 29th, 2007 No Comments »

The University of California recently has been hit with a proposed $3 Million fine by the U.S. Department of Energy for their alleged failures to protect classified information in a data breach back in October 2006. I am quite confident that the fine is only a portion of the financial responsibility as a result to this breach, quite likely not even the largest.

We tell our clients that protecting your grand moma’s apple pie recipe is only a single goal of Information & Data Security. Liability, reputation, and compliance are other good reasons to be concerned and pro-active with security. Pro-active Security is a time consuming and expensive task, but is yet considerably cheaper than the alternative; a security breach.

Tags: , ,

Author: Christopher

(No Ratings Yet)
Loading ... Loading ...