Security Balance

As everybody in the field had predicted, malware targetting SCADA system has finally come true. The lucky thing is this one is looking for information to steal only, not actually doing anything. I wonder what outcome could we have if this nasty little thing was designed to force systems to fail. SCADA systems are one [...]

IBM has scheduled a interesting webinar for April 15th. I don’t know if it will be entirely “see how nice our product’s features are”, but as I’ve been recently blogging about how middleware happens to be a frequent blind spot, that may be something interesting to follow. You can also see some interesting posts from [...]

I’ve recently wrote about security blind spots, those things inside organizations that bring high risks but are usually not seen during risk and vulnerability assessment activities. Gunnar Peterson mentioned on his blog one of the most common blind spots for big organizations, MQ Series. This is related to the mainframe problem that I wrote about [...]

I was reading this post from Richard Bejtlich today and I found this quote from the Verizon Security Blog: “With the exception of new customers who have engaged our Incident Response team specifically in response to a Conficker infection, Verizon Business customers have reported only isolated or anecdotal Conficker infections with little or no broad [...]

I was reading Shimel’s blog today and followed an indication from him about another security blog, “JJ’s Security Uncorked”. It was a very nice surprise to find this post about three things that are often forgotten in network inventories, assessments and other processes: Cameras, Controllers and Card Readers.  It was particularly interesting for me because [...]