The simple missteps that cause data breaches

From SearchSecurity.co.uk Ron Condon Simple mistakes by organisations can cause data loss, and those errors are making it easy for cybercriminals to flourish on the Internet, according to a forensics expert who investigated some of the world’s biggest security breaches. Matthjis van der Wel is he...

Hidden message in Verizon breach report

Last week, after I dropped clues that the cover of this year’s Verizon Data Breach Investigations Report contained a cryptographic challenge, several readers immediately jumped on the challenge. In this blog post, Veracode’s Chris Eng provides a fun walk-through of how he decoded the pattern of 1...

Mini-Metricon Highlighted Risk, Measurements

I spent some time earlier this week at mini-metricon, a workshop that was inspired by the success of Andrew Jaquith’s security metrics mailing list and the larger Metricon which is held each year in conjunction with the USENIX Security Conference. In essence members of the mailing list gather eac...

What's on the cover of that Verizon breach report?

Psst! Psst! Ryan here. Did you notice that all the text on the cover of Verizon’s 2009 data breach report pdf is selectable? A little birdie tells me that’s no coincidence. Encrypted message, etc. Even better, the report contains some obvious clues to decrypt. And something about cash prizes for...

SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...

Venturi Client 2.1 confirmed as open relay [Verizon Wireless Mobile Office]

Product: Fourelle|Venturi Wireless Venturi Client all versions prior to 2.2 Brief Description: Acts as an open proxy for protocols including SMTP. Description: Venturi Client is a multi-protocol proxy that operates in conjunction with a proprietary transcoding server. It inserts itself into the...