Your Most Valuable Asset is Data......

Data warehouses and business intelligence tools aren't just for measuring and monitoring business operations and performance. They can also be valuable in an organization's security program.

http://www.infoworld.com/article/3071112/security/defend-yourself-build-a-cyber-security-database.html

​http://www.darkreading.com/application-security/database-security/databases-remain-soft-underbelly-of-cybersecurity/d/d-id/1325216

Comments

Post a Comment

Popular posts from this blog

Weekly Infosec News Brief: 01-07 February

Image
Multiple Critical Vulnerabilities in Malwarebytes Disclosed; Still no Patch Available Last week Google's Project Zero disclosed several serious vulnerabilities in Malwarebytes' anti-malware software. Project Zero researcher Tavis Ormandy informed Malwarebytes of the issues back in November, and Malwarebytes says they were able to fix several of the reported bugs in the intervening months. They say that they should have a patch for the remainder in the next 3-4 weeks. Malwarebytes is advising customers to enable the "self-protection" setting on their software to mitigate the reported vulnerabilities. http://www.scmagazine.com/malwarebytes-says-sorry-for-multiple-av-bugs-still-unpatched/article/470738/ http://tps//blog.malwarebytes.org/news/2016/02/malwarebytes-anti-malware-vulnerability-disclosure/ https://code.google.com/p/google-security-research/issues/detail?id=714 Oracle Announces Java Browser Plugin to be Discontinued Oracle has announced plans to d...
Read more

Weekly Infosec News Brief 27 Jul-2 Aug

Image
Critical Vulnerability in BIND DNS Service Creates Potential Threat of Major Internet Outages A bug in the BIND DNS service was announced this week. The vulnerability (CVE-2015-5477) allows an attacker to use a vulnerable DNS server to launch crippling denial of service attacks against other systems. Patches are now available for most UNIX and Linux distributions. If your organization is running a UNIX or Linux DNS server, you should check to see if it vulnerable. http://www.scmagazine.com/critical-bind-vulnerability-could-snuff-out-large-parts-of-internet/article/429843/ http://www.zdnet.com/article/remote-denial-of-service-vulnerability-exposes-bind-servers/ New Phishing Campaign Targets US and UK Businesses A new phishing attack targeting US and UK businesses poses as an email delivering a voice mail message. The malicious attachment is in the form of a .LNK file, which is an unusual format for malicious phishing messages. http://www.scmagazine.com/phishing-campaign-...
Read more

Two-Factor Authentication

Image
Many organizations now are using multi-factor security for user authentication, especially in higher-risk cases (e.g., admin users, remote access). Many popular consumer-oriented services offer this as a feature as well. If your Gmail, Apple, Microsoft, Facebook, Twitter, Yahoo, or other account doesn't currently require a two-factor or two-step login, it is easy to enable. If your bank or other online financial service doesn't offer this feature, tell them you want it or move to one that does. Here are two great sites with a lists of services that support two-factor authentication and links to set it up:    https://twofactorauth.org/ http://www.pcmag.com/article2/0,2817,2456400,00.asp Most two-factor authentication schemes can work from an app or a text message on your smartphone. It can take a bit of learning at first, but for most users it quickly becomes routine and trouble-free.
Read more