- Follow this blog:
- RSS
- Email Alert
IT Security
Selena Frye
TechRepublic Staff
Selena Frye

-
Inside your users' brains: Where they get security advice
Michael Kassner explains the research of a team that looked at where users tend to get security advice, how they respond to it, and what security pros can learn from their findings.
Posted by Michael Kassner | September 10, 2012, 5:33 PM PDT | Latest comment by JCitizen
-
Has the next Cold War already begun in cyberspace?
Alfonso Barreiro likens the current state of cyber warfare measures and counter-measures to a Cold War. Could it escalate? Is it all hype? Take our poll.
Posted by Alfonso Barreiro | September 5, 2012, 9:00 AM PDT | Latest comment by ProfessorLarry
-
Infographic: 2012, the year of password theft
This infographic breaks out the numbers of password theft exploits so far in 2012. Help your users understand the risks of bad password management.
Posted by Selena Frye | September 4, 2012, 12:47 PM PDT | Latest comment by maryjones115
-
Not all gloom and doom for antivirus: A talk with Mario Vuksan
Signs indicate antivirus apps, as we know them, are not working. In this interview with security researcher, Mario Vuksan, Michael Kassner learns that there are still ways to change that.
Posted by Michael Kassner | September 4, 2012, 6:39 AM PDT | Latest comment by JCitizen
-
Is the death knell sounding for traditional antivirus?
Antivirus developers need to run malcode in their labs in order to create malware-identifying signatures. What happens if they can't?
Posted by Michael Kassner | August 27, 2012, 7:37 AM PDT | Latest comment by JCitizen
-
An overview of Next Generation Firewalls
Alfonso Barreiro explains the security capabilities that Next-Generation Firewalls are supposed to have and offers some tips on what to consider when researching them.
Posted by Alfonso Barreiro | August 27, 2012, 6:00 AM PDT
-
Porn browsing at work leads to corporate security breaches
Users accessing porn at work is a gateway for malware and ransomware that IT pros have to clean up. And if the content is also illegal, it's an even bigger problem. Bob Eisenhardt shares some tips...
Posted by Bob Eisenhardt | August 23, 2012, 12:17 PM PDT | Latest comment by Deadly Ernest
-
Uncloaking invisible iFrames
Mention drive-by malware to nefarious types and they smile, silently thanking the invisible iFrame. Ever wonder why?
Posted by Michael Kassner | August 20, 2012, 7:26 AM PDT | Latest comment by thisflourishinglife
-
Microsoft Attack Surface Analyzer gives IT pros risk assessment tool
Patrick Lambert gives an overview of the Microsoft Attack Surface Analyzer, which helps IT pros assess the risks of new applications and deployments on their systems.
Posted by Patrick Lambert | August 20, 2012, 6:00 AM PDT
-
Infographic: Spam Olympiad
Spammers and "slammers" took advantage of world-wide attention on the London 2012 Olympics to flood us with junk and fill the social media streams with abuse. Here's a snapshot of their activity.
Posted by Selena Frye | August 17, 2012, 11:13 AM PDT | Latest comment by BetsyJoKellum
-
What Windows 8 has done to improve security
Windows 8 is getting mixed reviews but there's no doubt that Microsoft has taken significant steps to improve security. Patrick Lambert describes the new features.
Posted by Patrick Lambert | August 14, 2012, 6:00 AM PDT | Latest comment by Deadly Ernest
-
Survey says: People do care about their privacy
Finally, someone asked users how important it was to remain private while online. Michael Kassner shares what the research team found, including some surprises.
Posted by Michael Kassner | August 13, 2012, 7:44 AM PDT | Latest comment by Michael Kassner
-
Five ways to protect yourself in a multi-device, multi-platform world
In the wake of Wired reporter Mat Honan's digital disaster, you should revisit your security strategy for "living online." Here are best practices for repairing the weakest links in your personal...
Posted by Deb Shinder | August 9, 2012, 12:32 PM PDT | Latest comment by Tgneg
-
Beyond passwords: Biometrics continue to evolve
Patrick Lambert looks at the current state of biometrics in security systems.
Posted by Patrick Lambert | August 6, 2012, 10:00 AM PDT | Latest comment by anil_g
-
Traditional antivirus software is useless against military malware
Antivirus programs are obsolete. In that case, what are we supposed to do? Learn what the security community has to say.
Posted by Michael Kassner | August 6, 2012, 7:13 AM PDT | Latest comment by a1computers.ie
-
Scariest stuff from BlackHat 2012
NFC hacking, ultra-stealthy malware, and hotel room lock and keycard weaknesses made this list of some of the scariest demonstrated exploits at BlackHat 2012.
Posted by Selena Frye | August 2, 2012, 12:40 PM PDT | Latest comment by JCitizen
-
Around the world in IP attacks
Bob Eisenhardt recently had to lock down a server that was vulnerable to IP attacks. Here is what he found out about them and his steps to resolve the problem.
Posted by Bob Eisenhardt | August 1, 2012, 9:00 AM PDT | Latest comment by magic8ball
-
Bromium: Newcomer to the periodic table of security elements
Dominic Vogel looks into a new security solution that relies on micro-virtualization to isolate untrustworthy desktop tasks from enterprise networks.
Posted by Dominic Vogel | July 30, 2012, 12:18 PM PDT
-
The truth behind those Nigerian 419 scammers
Why would 419 scammers say they're Nigerian, even if they are as American as apple pie? Michael Kassner provides some insight as to why.
Posted by Michael Kassner | July 30, 2012, 8:57 AM PDT | Latest comment by anxious lady
-
Microsoft to block keys less than 1024 bits in August software update
This is your last chance to prepare for an August update from Microsoft that will reject cryptographic keys less than 1024 bits.
Posted by Patrick Lambert | July 23, 2012, 2:11 PM PDT | Latest comment by mark1408
-
List open ports and listening services
You should turn off any services you don't actually need so that they will not become avenues of attack for security threats. Different systems will have different services running by default,...
Posted by Chad Perrin | April 15, 2008, 8:47 PM PDT | Latest comment by jackhard
-
Battling the Google Redirect virus
Consultant Bob Eisenhardt recounts his frustrating experience trying to track down and get rid of a client's search-redirect virus. Here's how he finally ditched it.
Posted by Bob Eisenhardt | January 2, 2013, 10:56 AM PST | Latest comment by Jane3344
-
BGP and Internet security: Is it better to be lucky or good?
Does "it's not a problem until it actually happens" apply to Internet security? Michael P. Kassner interviews a networking expert who's wondering about the same thing.
Posted by Michael Kassner | June 10, 2013, 9:11 AM PDT | Latest comment by wdewey@...
-
DropSmack: Using Dropbox to steal files and deliver malware
Michael P. Kassner interviews a digital forensic scientist who uses Dropbox to compromise targeted networks -- something the bad guys probably figured out as well.
Posted by Michael Kassner | April 15, 2013, 7:46 AM PDT | Latest comment by Michael Kassner
-
New Android malware should be wake-up call for security admins
Security firm Kaspersky reported on a new malware threat that it calls the most sophisticated it has seen in targeting Android phones.
Posted by Patrick Lambert | June 12, 2013, 10:29 AM PDT | Latest comment by Michael Kassner
-
The anatomy of a phishing operation
There are far better things than being phished, like writing about how not to get phished. Michael P. Kassner reviews a research paper that provides amazing insight into a successful phishing...
Posted by Michael Kassner | June 3, 2013, 7:04 AM PDT | Latest comment by JCitizen
-
How to spoof a MAC address
MAC address filtering for wireless networking isn't real "security". Anyone who pays any attention to current trends in wireless security at all should know that MAC filtering is less effective...
Posted by Chad Perrin | January 22, 2008, 1:28 PM PST | Latest comment by Doug Vitale
-
Aaron Swartz legacy lives on with New Yorker's Strongbox: How it works
Strongbox was Aaron Swartz's final project. Michael P. Kassner explains why The New Yorker requested a way to keep sources and their information secret.
Posted by Michael Kassner | May 20, 2013, 7:17 AM PDT | Latest comment by tylerpitchford
-
The basics of using a proxy server for privacy and security
Patrick Lambert goes over the basics of how proxy servers work and why they are used to add security and privacy.
Posted by Patrick Lambert | December 5, 2012, 6:30 AM PST | Latest comment by Tony Hopkinson
-
BoxCryptor vs. DropSmack: The battle to secure Dropbox
Can DropSmack malware be stopped? Michael P. Kassner asks the creators of BoxCryptor if it is up to the task of securing the Dropbox file-synchronization service.
Posted by Michael Kassner | April 29, 2013, 10:30 AM PDT | Latest comment by Michael Kassner
-
Virtualizing apps could be the bridge over the BYOD security gap
Allowing BYOD has unfavorable implications for both the company and employees. Michael P. Kassner explores what businesses are doing to mitigate the risk.
Posted by Michael Kassner | May 28, 2013, 6:33 AM PDT | Latest comment by Michael Kassner
-
How to successfully implement the principle of least privilege
Least privilege is a core security principle, but it's one that often meets with resistance by users. Here are tips for how to implement it and get the point across to others.
Posted by Dominic Vogel | May 29, 2013, 9:27 AM PDT | Latest comment by o_p_i
-
DARPA's Plan X and the future of the U.S. cyber defense infrastructure
Plan X sounds like a summer sci-fi movie, but it's actually one of DARPA's latest projects, aimed at improving the nation's defense of critical infrastructure targets.
Posted by Patrick Lambert | June 4, 2013, 5:30 AM PDT
-
Cloud-service contracts and data protection: Unintended consequences
There are things your cloud-service (Facebook, Amazon, Google, Dropbox, etc.) contracts aren't telling you. Michael P. Kassner interviews an attorney concerned about what's not being said.
Posted by Michael Kassner | May 13, 2013, 11:52 AM PDT | Latest comment by Michael Kassner
-
DDoS attack methods and how to prevent or mitigate them
Patrick Lambert covers the various methods attackers use to launch distributed denial of service attacks, and the precautions you can take to prevent or at least, mitigate these types of events.
Posted by Patrick Lambert | October 15, 2012, 11:24 AM PDT
-
Is uncovering digital vulnerabilities doing more harm than good?
A noted virtual-reality technologist and author views "security through obscurity" as the only true way security can exist. Michael P. Kassner looks at what this uniquely divergent viewpoint means.
Posted by Michael Kassner | March 25, 2013, 8:48 AM PDT | Latest comment by mla_ca520@...
-
Dropbox: Convenient? Absolutely, but is it secure?
A potential security lapse and possibly misleading statements are plaguing Dropbox, a hugely popular file-syncing app. What are the issues and is concern justified?
Posted by Michael Kassner | June 13, 2011, 8:03 AM PDT | Latest comment by kprivigyi@...
-
Use PuTTY as a secure proxy on Windows
Last month, I wrote about using OpenSSH as a secure Web proxy on UNIX and Linux systems. This time, I'll show you how to do the same thing on Microsoft Windows using PuTTY -- probably the single...
Posted by Chad Perrin | March 10, 2008, 4:30 PM PDT | Latest comment by abaabaa
-
The FBI locked your computer? Watch out for new spins on ransomware
The FBI locks your computer. Can they do that? Or is it fake? How does one know? Michael Kassner asks an expert for help with the latest forms of ransomware.
Posted by Michael Kassner | November 15, 2012, 7:18 AM PST | Latest comment by JCitizen
-
10 services to turn off in MS Windows XP
As I pointed out on 19 October, in point number four of the article 10 security tips for all general-purposes OSes, an important step in the process of securing your system is to shut down...
Posted by Chad Perrin | November 7, 2007, 10:02 AM PST | Latest comment by JonB2008

































