Risk Management, Computer Security, Asset Protection

As a security professional, I often have “insider” information regarding security issues that individuals and entities are experiencing. Quite often the initial reaction by a security pro will be to cut off access to the source of a threat or exploit attempt. Let me explain why this often is NOT a legitimate long-term solution to [...]

Somebody just sent spam to an account that I use solely for keeping records of sales. I have never, nor will I ever, give permission to anybody to send marketing stuff to that account.
One person just learned the hard way.
They thought that they would be clever and send it from a Hushmail.com account. Here’s a [...]

I just came across a post on the Sunbelt Software blog (they are a computer security firm — and a very good one) about somebody who is installing a trojan on user’s computer that changes their start page to CloneCashSystem[dot]com (do NOT visit that site).
Note that security professionals are calling this a trojan, which it [...]

I just discovered another WordPress footprint that gives away which version of WordPress you are running on your blog. Unlike other footprints, this one can’t be corrected via a plug-in or by editing a theme.
Instead, just delete “readme.html” from the root directory of your blog.
If you open that file (which is installed by default), the [...]