Web Threats WeeklySecurity comes from people, process and technologyProtecting
customers and supporters from getting hacked on your websites or other
public-facing systems in turn protects your organization. The flip side
of that is protecting your internal systems from phishers and hackers
so you don’t in turn infect the systems your customers are using. “When looking
at the overall security plan for your organization, “any security
strategy comes from the people, process and technology,” says Microsoft
Security Team Specialist Mohammad Akif says.
“You have to ensure all three are working to a high standard, because
hackers will always take the easiest path.” Network and Web Security Blog Link-FestWe've
had our eye on some very informative and entertaining blog posts and
articles great for helping business managers and IT people get a handle
on the security landscape. Here are a few of our favorites this week: Secure Your Twitter Sessions with https (Micro Persuasion)
- Twitter is an increasingly popular social networking tool, but
critics have suggested that there are significant security issues that
could potentially expose users' private information. This post examines
what you can do if you want to use an open wifi connection at an
airport and and don't care to risk people sniffing your session. Corporate IT Security Breach Apology Letter Template (Pacific Coast Informer Blog)
- Call us biased if you like, but we think this post provides an
excellent example of how a corporation can communicate what it is doing
in the event of a security breach, based on the response of Heartland
Payment Systems to its real-life troubles. We expect a great number of
organizations will be forced to write letters like this in 2009. |
March 4, 2009Web Threats Weekly is distributed by: Pacific Coast Information Systems Ltd. Toll-free 1.877.744.7558 In this issue:* Security comes from people, process and technology * Network and Web Security Blog Link-Fest * Hacker Bait * Mythbusters Tip #15 * Spam-Alot Web Threats Weekly helps organizations protect themselves and their customers from known online threats. Contact BoonboxResources Links: |
 |
Hacker BaitThe latest Hacker Bait list contains websites of business and social networking sites that have been found to have vulnerabilities that hackers and cyber criminals could exploit. This is not a complete list of all vulnerable sites on the Internet, but only represents websites where vulnerabilities were found within the past 90 days. These are only the latest additions to an ever-growing club of sites found to be insecure according to various public sources and online tools used in the web security industry. If you would like more information on our data and why these sites are listed here, please contact PCIS Hacker Bait Sites With Vulnerabilities Discovered in Past 90 Days
|
Mythbusters Tip #15“Sneaky hackers who attack your organization from the outside are the most dangerous threat.”While the vast majority of attacks against a network or web applications come from outside, studies show that some of the most devastating attacks come from within. Most employees may not understand security, so part of the danger comes from honest errors. The flip side is the disgruntled employee with access to systems who can do deliberate sabotage. Companies need to develop procedures to mitigate the risk of an internal threat, such as a rigorous hiring procedure, security training and an appropriate level of monitoring. Spam-AlotSpammers are linking to blogs, profiles and other pages on these trusted sites to give victims a false sense of security that the links can be followed safely. These sites may not have been hacked, but following the spam links to these sites and clicking on links shown there can result in harm to your computer. If you would like more information on our data and why these sites are listed here, please contact PCIS Spam-Alot Websites Exploited Since Feb. 26, 2009
|
||||
Boonbox and Pacific Coast Information Systems Ltd.Boonbox is a division of Pacific Coast Information Systems Ltd., specializing in products for web security, network security, password management and data backup. PCIS is a Vancouver-based company which provides strategic consulting, application development, technology solutions and managed services to companies and government organizations throughout North America. |
|||||
|
HOW TO SUBSCRIBE/UNSUBSCRIBE SUBSCRIBE: To subscribe to Web Threats Weekly, send a blank email message with subject line "SUBSCRIBE" to informer@pcis.com UNSUBSCRIBE: If you do not wish to receive future issues of Web Threats Weekly, send a blank email with subject line "UNSUBSCRIBE" to:informer@pcis.com and we will promptly remove you from our distribution list. WE WANT YOUR FEEDBACK Our purpose for providing this free service is to keep our clients and business contacts informed of technology developments. This information can help them resolve common problems and achieve their full potential by strengthening their business processes and infrastructure. Your input is important to us and we welcome your ideas for new features and how we can continue to improve our service to you. Send your comments and suggestions to informer@pcis.com or contact us directly at 604.844.7558 |
|||||
