Browse by Tags

All Tags » security (RSS)
Soon after identifying a controversial design decision related to the default implementation of UAC in Windows 7, Beta tester Long Zheng identified another issue with UAC in Windows 7 that is of greater concern. In a nutshell, because of the inherent...
Security Is Not Virtual: Auditing and Logging Considerations to Ensure Compliance and Protect Virtual Server Environments Featuring: Tony Bradley and Dr. Anton Chuvakin Tuesday, July 29 at 1:00 PM EDT (1700 UTC/GMT) Companies of all sizes and in all industries...
Leveraging Web 2.0 Securely How small and midsize businesses can benefit from Web 2.0 technologies and minimize risk Event Date: Thursday, June 19, 2008 at 11:00am PT / 2:00pm ET Speakers: Tony Bradley, CISSP, Microsoft MVP and Mark Guntrip, Sr. Product...
On June 18th, I will once again be joining Windows guru and Microsoft Technical Fellow Mark Russinovich and others to panel a virtual roundtable discussion. This time, we will be talking about Windows Vista security. During this broadcast, we will cover...
Metasploit 3.1 was unleashed on the world today. According to the press release posted on the metasploit.com site, this “latest version features a graphical user interface, full support for the Windows platform, and over 450 modules, including 265...
Microsoft’s Director of Security, Jeff Jones, published the One Year Vulnerability Report for Windows Vista, in which he demonstrates that Vista is the most secure OS ever measured (based on the criteria used to calculate the first year vulnerability...
Microsoft recently created a new blog site designed to provide insight on emerging vulnerabilities. The blog, titled <a href=”http://blogs.technet.com/swi/”>Security Vulnerability Research & Defense</a>, provides detailed...
Its that time again. The 8th Annual SANS Top 20 Report is out. Well, its the 8th annual report, but it hasn’t always been the top 20, and it hasn’t always been at the end of the year. The first one was a top 10 list released in June of 2000...
It is very convenient to have your various usernames and passwords stored in your computer system. When you are logging into a web site or application, the information is automatically filled in for you so you don’t have to try to remember what...
Rarely (if ever- I’ll have to do some research and find out) does Microsoft have 2 back-to-back months of Security Bulletin floods. This month was no exception. In August, Microsoft released 9 Security Bulletins, 6 of which were deemed Critical...
I have been talking for years about the relative insecurity of wireless networks. Companies and consumers alike buy and implement wireless technology for its convenience, without stopping to consider the security implications. If you can sit on your couch...
Your passwords are the keys that keep your personal information and sensitive data locked away. If you choose a password that is easy to guess, like your dog’s name, or your wedding anniversary, anyone who knows anything about you can guess it and...
Andy Greenberg wrote an article for Forbes.com titled Accounting For Human Error, which illustrates how human beings, the users themselves, are the weakest link in the security chain. Enterprises spend millions, or even tens of millions of dollars on...
According to a report from Danish security vendor Secunia, as many as one third of the applications in use on corporate networks are vulnerable to critical attacks. According to this SC Magazine article, Secunia sites deficiencies in commonly used vulnerability...
Tom D'Auria invited me back to talk more computer security on his IMI TechTalk radio show. I appeared on the show in November of 2006 to promote my book, Essential Computer Security . We did not get to cover all of our questions in the time allotted,...
In Vista, Internet Explorer gets the benefit of some added security. Using WIC (Windows Integrity Control), Vista treats files and processes associated with Internet Explorer as Low integrity as long as it is running in Protected Mode. Internet Explorer...
With Vista, Microsoft introduced a new security concept to help protect your computer. Rather than relying on discretionary controls, like NTFS file and folder permissions which users can assign and change, Vista also has new mandatory controls. WIC,...
With Windows Vista set to be unleashed on the consumer market in about a week, there is going to be a need for security and antivirus products. Although Vista is the most secure version of the Windows operating system yet, that doesn't mean it is impenetrable...
In recent months I have been contacted more frequently by the media, mostly as a result of marketing efforts for my latest book, Essential Computer Security . I was invited to guest on the IMI-TechTalk radio show at the end of November, and this past...
If you wanted to test the security of your headquarters housed in a volcanic crater on a remote island, who better to check it out than James Bond? Microsoft apparently used similar logic to validate and test the security measures built in to the new...
More Posts Next page »