Home

Security auditors should update risk driven methodologies says Hoelzer

UK: SANS Spring London 2016 will welcome a growing community of security auditors set to refresh skills on the recently updated AUD507: Auditing & Monitoring Networks, Perimeters & Systems course which is one of eight security training tracks in London in February.

According to course author and industry expert David Hoelzer, “One of the struggles that IT auditors face today is assisting management to understand the relationship between the technical controls and the risks to the business that these affect. This track is organised specifically to provide a risk driven method for tackling the enormous task of designing an enterprise security validation program.”

: THE EDITORIAL TEAM; Industry News; Posted On Wednesday, 03 February 2016 14:11

ESET examines windows exploitations that emerged in 2015

ESET has publishes its annual report Windows Exploitation in 2015. In this report ESET analyzes the major vulnerabilities of Microsoft Windows that have occurred in the past 12 months, highlighting new security features introduced in Windows, web browsers and Microsoft’s Enhanced Mitigation Experience Toolkit.

: THE EDITORIAL TEAM; Industry News; Posted On Wednesday, 03 February 2016 14:08

Do you belong to the “selfie” generation? You are probably oversharing

Found a new girlfriend or boyfriend? Share. Had a blast on vacation? Share. Cooked a tasty dinner? Share. Got a new passport? Share. Share. Share. Is this routine familiar to you? If so, be very careful: you might well be oversharing.

This kind of behavior is typical of young people who have grown up with computers, proliferating technology and emerging social networks. Thanks to their urge to share every detail of their lives, they’ve been dubbed the “Selfie” or “Me, Me, Me” generation.

: Ondrej Kubovič, ESET Security Specialist; Talking Point; Posted On Wednesday, 03 February 2016 14:02

Belgian Bank Loses €70 Million to Classic CEO Fraud Social Engineering Trick

In light of the breaking news that Belgian Bank Crelan, Credit Agricole's Belgian subsidiary, has announced it was the victim of a fraud camaign and lost of €70m in the process, Troy Gill, Manager of Security Research at AppRiver comments:

"The use of social engineering spear phishing attacks to defraud companies via wire transfer emails also picked up recently. The targeted users represented many verticals, from large enterprises to small nonprofits. Typically in these fraudulent emails, the victim, who is normally a high level member of the finance department, receives a spoofed message from a hacker posing as the CFO, or even CEO of a partner company, requesting a money transfer be placed for a vendor payment or company acquisition. Of course, instead of this money being applied to the vendor or merger in question, it instead is applied to a remote account the hacker controls.