Windows Zero Day / Duqu Exploit
Last week a very significant, previously unidentified, Microsoft Windows flaw was announced. This specific flaw allows remote attackers to execute arbitrary code via crafted font data in Word documents. It is actively being exploited in the wild by the Duqu worm/trojan. Read more
Japanese Relief – Buyer Beware
If we use history as a guide, it will only be a matter of time before cyber criminals exploit the victims of the Japanese disaster, and those who want to help. Read more
Firesheep allows people to “sidejack” your computer (as seen on Fox)
WiFi users beware! Accessing unprotected web sites (like Facebook, Twitter and Yahoo) from an open WiFi hotspot may open you up to a cyber attack called “sidejacking”. This can be done with free software called Firesheep. Read more
2010 HITECH Breach Statistics
The HITECH Breach Notification Tool lists all protected health information data breaches reported under the United State’s HITECH Act. Read more
New Functional Risk Management Model for Information Security
Windows: Local Privilege Escalation 0-day
A new 0-day was released on the 24th attacking most versions of Windows (XP, Vista, 7, 2008). Read more
Is Zeus still a threat?
There have been dozens of arrests in connection with a Zeus Botnet believed to be involved in the theft of over $200 million, in some reports. Read more
Assessing Risk From a Nessus Vulnerability Scan
Nessus is a very popular vulnerability scanner that is used by thousands of organizations to test networks for vulnerabilities. Read more
Cyber Security Awareness Month: 5 free resources to protect your home network and family online
If you are like me, I love the word “free”. Here are 5 free (no strings attached) resources to protect you and your family online: Read more
October is National Cyber Security Awareness Month
Since 2001, October has been designated as National Cyber Security Awareness Month (NCSAM). This year’s theme is “Shared Responsibility”. Read more




