November was a busy month for security stories. The month kicked off with more stories of massive security patches from both Microsoft and Apple leaving me to wonder when the patching madness will ever end. Windows 7 was found to have a flaw that allows denial of service attacks. Internet Explorer v7 (IE7) even made it into the news with the latest vulnerability, but I question efforts to patch an aging application, why not just upgrade or use Firefox? If they aren’t willing to upgrade, do people really think they will patch IE7?
Without further delay, here are the stories that caught my eye in November: ( Read More… )
Sometime in 2010 virtually every new Windows PC will now come with a version of application whitelisting installed in the form of AppLocker. It’s time to start thinking about how application whitelisting will change the way you approach desktop security and how you intend to use whitelisting to protect your critical IT assets. In preparation for this shift, I thought it would be good to give some food for thought about what changes and what considerations you should give to your ultimate whitelisting strategy.
First, let’s look at what changes. ( Read More… )
Most recent comment:
JT Keating
Thanks for the question, Leo. With regards to this specific part of our post, CoreTrace's application whitelisting solution, BOUNCER, ...
In the spirit of Thanksgiving week, I wanted to take this opportunity to say thanks to all of our customers, partners and employees who are helping CoreTrace change the face of computer security. It has been a fantastic year so far and we have a lot to be thankful for. More than ever businesses and individuals are looking for a new approach to computer security, and application whitelisting has come to the forefront as an alternative to traditional antivirus.
We are certainly excited to be a top vendor of application whitelisting and are looking to finish the year strong and look forward to a breakthrough 2010.
Thanks again to everyone involved in making CoreTrace a success.
In the wake of the 60 Minutes story there has been both a significant amount of attention given to the story online as well as expected complaints that the story was over hyped. The specific complaint was the citation by “prominent intelligence sources” that the Brazilian power outage was caused by cyber attacks. I even received some tweets dinging me for propagating the hype from my last post on the original 60 minutes story.
The complaint is that 60 Minutes didn’t do their homework and that there is no proof that the actual outage was caused by hackers. I won’t get dragged into that dispute here, but I would like to address the conclusion that some have made that hacking in general is overstated.
To those who work in the security industry and say that the cyber threat to both Government and private systems is over hyped, my answer is have they even been paying attention? Both foreign governments and organized online crime have been carrying out attacks with specific purposes with increasing frequency and the evidence is all around us. ( Read More… )