- Follow this blog:
- RSS
- Email Alert
IT Security
Selena Frye
TechRepublic Staff
Selena Frye

-
Infographic: Online payment security
This infographic provides a snapshot of consumer worries about shopping online.
Posted by Selena Frye | February 10, 2012, 9:43 AM PST | Latest comment by 131313ontanez-24472904060645141771750399938085
-
VeriSign repeatedly hacked in 2010
Verisign was repeatedly attacked in 2010 but the extent of what was stolen is unknown, and the company didn't even own up to it until late 2011.
Posted by Kara Reeder | February 7, 2012, 6:39 AM PST | Latest comment by JCitizen
-
Juvenile cyber-delinquency: Laws that are turning kids into criminals
Deb Shinder considers the problem of juvenile delinquency when it concerns kids and computers. Do we need a better strategy for dealing with juvenile cybercrime? Take the opinion poll.
Posted by Deb Shinder | February 7, 2012, 6:00 AM PST | Latest comment by apotheon
-
Why are websites getting your mobile-phone number?
Are mobile-service providers leaking data into traffic destined for web servers? That's what a research analyst set out to prove.
Posted by Michael Kassner | February 6, 2012, 8:24 AM PST | Latest comment by Mohammad Oweis
-
The three types of online attackers
Patrick Lambert describes the three main groups of attackers that security specialists are guarding against.
Posted by Patrick Lambert | February 6, 2012, 6:00 AM PST | Latest comment by tonys3kur3
-
Infographic: Kim Dotcom and the Megaupload story
While Megaupload's attorney tries to negotiate a deal with the government to preserve users' legitimate hosted files, check out this snapshot of Kim Dotcom fun facts and figures.
Posted by Selena Frye | January 31, 2012, 11:33 AM PST | Latest comment by bwallan@...
-
World IPv6 launch day set: Security pitfalls to look out for
Patrick Lambert warns that when the IPv6 launch date officially arrives this June 6, it will be prudent to watch out for some security gaps in the initial days. Here are some issues to think about.
Posted by Patrick Lambert | January 31, 2012, 6:00 AM PST | Latest comment by stigall@...
-
Insidious insiders: Psychology provides clues in handling invisible threats
Dominic Vogel considers the insider threat risk in organizations and suggests that cross-departmental collaboration could help shore up data loss prevention methods.
Posted by Dominic Vogel | January 30, 2012, 9:00 AM PST | Latest comment by Bruce Epper
-
Repurposed software: Apps gone rogue
You come up with a dynamite app. Companies are thrilled with it. Next thing you know, your app is used to deny visitors access to a website. Michael Kassner considers repurposed software.
Posted by Michael Kassner | January 30, 2012, 7:50 AM PST | Latest comment by clk536@...
-
Symantec says to disable pcAnywhere after source code exposure by Anonymous
Symantec acknowledges a breach that exposed the source code for pcAnywhere. Users are advised to disable it immediately until software updates are available to resolve vulnerabilities.
Posted by Selena Frye | January 25, 2012, 12:08 PM PST | Latest comment by apotheon
-
Facing down the Ramnit virus on Facebook: Tips for protection and clean-up
Bob Eisenhardt explains how the Facebook virus Ramnit works, why it's so bad, and how it can affect much more than a Facebook account.
Posted by Bob Eisenhardt | January 23, 2012, 12:55 PM PST | Latest comment by santosh_cc
-
Megaupload, Anonymous, SOPA and the Internet fallout
Patrick Lambert digests the tempestuous events of last week and what it means for the future of the Internet. Was the Megaupload bust really related to SOPA's failure? Was Anonymous' reaction...
Posted by Patrick Lambert | January 23, 2012, 9:40 AM PST | Latest comment by OPITSTUDENT
-
Testing just how good Next Generation Firewalls are
Next Generation Firewalls are supposedly the next best thing. Are they though? Michael Kassner decided to find out.
Posted by Michael Kassner | January 23, 2012, 7:06 AM PST | Latest comment by Michael Kassner
-
Infographic: Online banking and security
This is a handy infographic to share with friends, family, and coworkers -- reminding them to stay alert and follow some basic security tips for online and mobile banking.
Posted by Selena Frye | January 18, 2012, 7:47 AM PST | Latest comment by michael john2
-
SOPA shelved for now, but what does the future hold?
Patrick Lambert summarizes the latest action on the SOPA controversy, with lawmakers moving over the weekend to shelve it while "outstanding concerns" are being evaluated.
Posted by Patrick Lambert | January 17, 2012, 8:21 AM PST | Latest comment by michael john2
-
DNSViz: Intimate view of a website's DNS security
DNSSEC is supposed to certify DNS transactions, but how do you know if it's working?DNSViz, that's how.
Posted by Michael Kassner | January 16, 2012, 1:14 PM PST | Latest comment by Michael Kassner
-
How to sell information security to management
Alfonso Barreiro shares his tips for selling security initiatives to management -- as well as a few methods you should avoid.
Posted by Alfonso Barreiro | January 16, 2012, 6:00 AM PST
-
Facebook takes steps to reward bug hunting: White hat debit cards
Patrick Lambert looks at Facebook's recent attempts to reward bug hunters on their site and help fight the rising tide of malware and other scams.
Posted by Patrick Lambert | January 12, 2012, 11:59 AM PST
-
Hitting Windows 8 reset button: Security bonus saves time and money
Dominic Vogel makes his pitch for the Windows 8 reset button from a security perspective.
Posted by Dominic Vogel | January 11, 2012, 6:00 AM PST | Latest comment by Lost Cause?
-
SpyEye banking malware learns to cover its tracks
SpyEye banking malware has added a new feature to its arsenal that takes advantage of "paperless" statements by hiding the fact that your bank account has been compromised.
Posted by Kara Reeder | January 9, 2012, 12:30 PM PST | Latest comment by JCitizen
-
List open ports and listening services
You should turn off any services you don't actually need so that they will not become avenues of attack for security threats. Different systems will have different services running by default,...
Posted by Chad Perrin | April 15, 2008, 8:47 PM PDT | Latest comment by jackhard
-
Hackers: From innocent curiosity to illegal activity
Researchers asked why talented youth skilled in "computerese" evolve into criminal hackers. Michael P. Kassner explains their unexpected results.
Posted by Michael Kassner | May 6, 2013, 7:59 AM PDT | Latest comment by mattohare@...
-
DropSmack: Using Dropbox to steal files and deliver malware
Michael P. Kassner interviews a digital forensic scientist who uses Dropbox to compromise targeted networks -- something the bad guys probably figured out as well.
Posted by Michael Kassner | April 15, 2013, 7:46 AM PDT | Latest comment by Michael Kassner
-
Cloud-service contracts and data protection: Unintended consequences
There are things your cloud-service (Facebook, Amazon, Google, Dropbox, etc.) contracts aren't telling you. Michael P. Kassner interviews an attorney concerned about what's not being said.
Posted by Michael Kassner | May 13, 2013, 11:52 AM PDT | Latest comment by Michael Kassner
-
Battling the Google Redirect virus
Consultant Bob Eisenhardt recounts his frustrating experience trying to track down and get rid of a client's search-redirect virus. Here's how he finally ditched it.
Posted by Bob Eisenhardt | January 2, 2013, 10:56 AM PST | Latest comment by Jane3344
-
Understanding what motivates Chinese hackers
Michael P. Kassner, with the help of a noted academic and author, looks at what motivates Chinese hackers. It may not be what you think.
Posted by Michael Kassner | April 22, 2013, 10:16 AM PDT | Latest comment by HAL 9000
-
BoxCryptor vs. DropSmack: The battle to secure Dropbox
Can DropSmack malware be stopped? Michael P. Kassner asks the creators of BoxCryptor if it is up to the task of securing the Dropbox file-synchronization service.
Posted by Michael Kassner | April 29, 2013, 10:30 AM PDT | Latest comment by Michael Kassner
-
How to spoof a MAC address
MAC address filtering for wireless networking isn't real "security". Anyone who pays any attention to current trends in wireless security at all should know that MAC filtering is less effective...
Posted by Chad Perrin | January 22, 2008, 1:28 PM PST | Latest comment by Doug Vitale
-
Running the gauntlet: Tips for achieving your CISSP
One of the most highly regarded security certifications is the CISSP. Dominic Vogel offers these nine tips for becoming certified based on his own experience.
Posted by Dominic Vogel | April 23, 2013, 5:30 AM PDT | Latest comment by JCitizen
-
The basics of using a proxy server for privacy and security
Patrick Lambert goes over the basics of how proxy servers work and why they are used to add security and privacy.
Posted by Patrick Lambert | December 5, 2012, 6:30 AM PST | Latest comment by Tony Hopkinson
-
DDoS attack methods and how to prevent or mitigate them
Patrick Lambert covers the various methods attackers use to launch distributed denial of service attacks, and the precautions you can take to prevent or at least, mitigate these types of events.
Posted by Patrick Lambert | October 15, 2012, 11:24 AM PDT
-
Software-Defined Networking: How it affects network security
SDN technology is set to rewrite the book of networking. Michael P. Kassner looks into how SDN will improve security, and where it's vulnerable.
Posted by Michael Kassner | April 8, 2013, 7:13 AM PDT | Latest comment by Michael Kassner
-
Dropbox: Convenient? Absolutely, but is it secure?
A potential security lapse and possibly misleading statements are plaguing Dropbox, a hugely popular file-syncing app. What are the issues and is concern justified?
Posted by Michael Kassner | June 13, 2011, 8:03 AM PDT | Latest comment by kprivigyi@...
-
Use PuTTY as a secure proxy on Windows
Last month, I wrote about using OpenSSH as a secure Web proxy on UNIX and Linux systems. This time, I'll show you how to do the same thing on Microsoft Windows using PuTTY -- probably the single...
Posted by Chad Perrin | March 10, 2008, 4:30 PM PDT | Latest comment by abaabaa
-
The future of IT security compliance: 201 CMR 17.00
Why should you be concerned about a security rule that is part of the State law of Massachusetts -- especially if you aren't in business there? Donovan Colbert explains how compliance regulations...
Posted by Donovan Colbert | April 30, 2013, 6:00 AM PDT | Latest comment by dcolbert@...
-
Hacker vs. cracker
The word "hacker" gets used in a pejorative sense by journalists an awful lot. Some people think this is perfectly reasonable; others find it offensive, and recommend an alternative term for that...
Posted by Chad Perrin | April 17, 2009, 1:20 PM PDT | Latest comment by wizard57m-cnet
-
New McAfee patent hints at a more walled-off online world
A McAfee patent hints at content filtering at the user level in order to block sites that offer pirated content.
Posted by Patrick Lambert | May 3, 2013, 9:00 AM PDT | Latest comment by public_domain
-
10 services to turn off in MS Windows XP
As I pointed out on 19 October, in point number four of the article 10 security tips for all general-purposes OSes, an important step in the process of securing your system is to shut down...
Posted by Chad Perrin | November 7, 2007, 10:02 AM PST | Latest comment by JonB2008
-
Security lessons from the 2013 Verizon Data Breach Report
Verizon's latest report on data breach statistics offers security pros a guide to the most persistent threats and where attention should be focused to defend against them.
Posted by Alfonso Barreiro | May 15, 2013, 6:00 AM PDT
-
The FBI locked your computer? Watch out for new spins on ransomware
The FBI locks your computer. Can they do that? Or is it fake? How does one know? Michael Kassner asks an expert for help with the latest forms of ransomware.
Posted by Michael Kassner | November 15, 2012, 7:18 AM PST | Latest comment by JCitizen

































