
- 13-Apr-2009: BMC Software Named a Leader in IT Asset Life-Cycle Management by Independent Research Firm13 April 2009, 12:00 am
...
- 08-Apr-2009: CUSTOMER SUCCESS: BMC Software Drives Improved IT Efficiency and Responsiveness at Sony Pictures Entertainment8 April 2009, 12:00 am
...
- 06-Apr-2009: CUSTOMER SUCCESS: BMC Software's Business Service Management Platform Drives New Multi-Million-Dollar Revenue Stream for Axon Computer Systems6 April 2009, 12:00 am
...
- 31-Mar-2009: BMC Software Offers Major Updates to Industry-Leading Business Service Management Platform31 March 2009, 12:00 am
...
- 30-Mar-2009: CUSTOMER SUCCESS: SIA-SSB Relies on BMC Software to Orchestrate Credit Card Processing for Leading European Banks30 March 2009, 12:00 am
...
- 25-Mar-2009: Dell Certifies BMC Software IT Management Solutions for Large Enterprise Customers25 March 2009, 12:00 am
...
- 16-Mar-2009: Cisco and BMC Software Deliver Major Breakthrough in Management for Unified Computing System16 March 2009, 12:00 am
...
- 11-Mar-2009: CUSTOMER SUCCESS: Roundy´s Supermarkets Inc. Depends on BMC Software to Ensure Business Efficiency11 March 2009, 12:00 am
...
- 10-Mar-2009: CUSTOMER SUCCESS: PHH Mortgage Selects BMC Software to Maintain Competitive Edge Amidst Market Volatility10 March 2009, 12:00 am
...
- 04-Mar-2009: CUSTOMER SUCCESS: BMC Software Helps Banco BPI Reduce Production Time and Increase Business Value4 March 2009, 12:00 am
...
- Yr puvsser vaqrpvssenoyr?10 June 2009, 7:27 pm
Some readers of our 2009 Data Breach Investigations Report have inquired about this odd inscription on page 48. Is it a printing mistake? An easter egg? A secret message? Random gibberish from an insane mind? Hmmm…
Well, we’re not going to reveal all here but we will tell you that it was entirely intentional and that [...]...
- Security’s Possible Path To Maturity1 June 2009, 9:16 am
At times, there are topics in information security discussions that get a lot of attention, fall out of interest, only to be resurrected again and reemerge as a hot topic. I call these “Information Security Zombie Memes”; they are the walking dead of discussion and rhetoric that we can’t seem to destroy. Return [...]...
- What’s the deal with Anti-Forensics?31 May 2009, 4:00 pm
Despite the release of numerous tools intended to make things easier for forensic investigators, there’s also development on the other side of the law. I’ve personally given multiple presentations on the topic of anti-forensics at various conferences and have also attended my fair share as well. No matter where you go, it always seems to [...]...
- Exploitation of Previously Unknown DirectShow Vulnerability Occurring29 May 2009, 12:47 pm
Microsoft has announced that they have discovered a vulnerability in DirectShow. Exploitation of the vulnerability could allow a criminal to run code of their choice in the victim’s security context simply by the victim browsing to a website while allowing scripts to run. The browser being used doesn’t matter providing it allows scripting. Microsoft is [...]...
- On Clouds and The Evolving Role of the CISO6 May 2009, 8:55 am
One of the fun things about being in Information Security is the amount of change our profession goes through. In a sense, we might pity the accountant, the sales person, or others whose role in the corporation has been well defined for many years. Our role is centered on understanding the use (and [...]...
- When you’re pwned, you’re pwned. Any questions?17 April 2009, 6:09 pm
Multiprotocol Label Switching (MPLS) security is not for the faint hearted. However, like most information technology, understanding basic principles and having a policy founded on sound principles allows an administrator to sleep at night knowing the networks are secure. A policy for employing thoughtful and conservative essential practices and having quality assurance practices to ensure continuity [...]...
- To DBIR: Show me the Money!15 April 2009, 9:08 pm
One of the most common questions/criticisms we get regarding the Data Breach Investigations Report is the lack of data on financial losses experienced by organizations in our sample. We can understand the frustration. There are, however, several reasons that the report does not contain such information:
1) A breach investigation focuses on the collection of evidence [...]...
- The 2009 Data Breach Investigations Report14 April 2009, 11:01 pm
Get it free of charge with no sign-up requirements here.
Creating the single-year sequel to a four-year report on over 500 breach investigations is a daunting prospect. While it would be impossible to trump the sheer scope of the original 2008 DBIR, we’ve sought to preserve its strengths and introduce some key enhancements for 2009. Here [...]...
- 2009 DBIR: Demographics14 April 2009, 9:30 pm
In our minds, there are two very interesting items with regard to demographics in this years report. The first is that the number of attacks in the financial services industry more than doubled in 2008. More importantly, an amazing 93% of compromised records were the result of breaches in the financial services industry. As we [...]...
- 2009 DBIR: Sources of Data Breaches14 April 2009, 9:00 pm
I’ve been reading reviews of the 2009 DBIR today and I gotta say - I’m surprised at the lack of snarling and teeth gnashing over our stats on who’s behind all these breaches and lost records. Last year, we received no shortage of comments (positive and negative) about insiders causing the fewest breaches. I won’t [...]...
- The Pirate Bay hit by DDOS attacks on news of sale2 July 2009, 7:12 pm
Global Gaming Factory's announcement Tuesday that it plans to purchase the file-swapping BitTorrent site The Pirate Bay for $7.8 million has set off distributed denial-of-service (DDOS) attacks on the Swedish company's website, likely from disgruntled members who have cast the founders as sell-outs.The Pirate Bay website was down for long periods of time on Tuesday, fueling speculation that hacker-members were launching attacks, according to Tomshardware.com. Peter Sunde, one of the company's fo...
- Michael Jackson spam email proliferates, spreads viruses2 July 2009, 7:11 pm
Surging popular interest in the wake of Michael Jackson's death last week has set off a bonanza of related spam email, some of which contains malicious links, viruses and scams designed to ensnare curious recipients. Web security firm Symantec said in a blog post Wednesday that spammers have largely abandoned Fourth of July-themed spam that typically picks up around the holiday weekend, likely because Jackson's death continues to drive web traffic like nothing else."Surprisingly, it looks as...
- Mozilla will issue security fixes for Firefox 3.52 July 2009, 3:29 pm
Mozilla, which just released the latest version of its Firefox browser on Tuesday, is already planning to release web security fixes for bugs in Firefox 3.5, according to Computerworld.com.The company said it plans to fix at least three bugs and "topcrashes," how the company refers to bugs that cause the most-reported crashes. "[The] goal of this release should be a quick turnaround that fixes topcrashes and bugs we almost held ship for," Mozilla said, according to Computerworld....
- Online security fears affect consumers more than economy1 July 2009, 4:49 pm
Seventy-two percent of consumers said the economy has not changed the way they shop online, but nearly half of consumers have terminated an online order due to security fears, according to a new survey by web security vendor McAfee. Tim Dowling, vice president of McAfee's web security group, said security concerns are the driving force behind whether an online transaction is completed or terminated. According to the survey, 63 percent of online consumers won't purchase from a website that does n...
- Cyber vigilante arrested for DDOS attacks on news sites1 July 2009, 4:10 pm
Federal authorities have charged Bruce Raisley, of Monaca, Pennsylvania, in connection with a series of distributed denial-of-service (DDOS) attacks on news websites hosting articles that detailed embarrassing facts about his online relationship with a man pretending to be a woman. Raisley allegedly used a botnet - a collection of compromised PCs - to launch the DDOS attacks to overwhelm the websites with traffic in order to shut them down. According to the criminal complaint filed in the New Je...
- Trojan malware on the upswing for data theft1 July 2009, 3:05 pm
Security researchers from Trend Micro are warning that Trojan malware - data-stealing programs that come disguised as harmless files - have grown in use over the past year to 93 percent of all data-stealing malware.The IT security vendor reported that Trojans' share of data-stealing malware grew to that figure in Q1 2009, up from 87 percent in 2008. In 2007, 52 percent of data-stealing malware were Trojans.Cybercriminals use Trojans to steal proprietary information such as online banking credent...
- Web security report: Q2 spam averaged 88 percent30 June 2009, 5:44 pm
Spam levels for Q2 2009 averaged 88.7 percent compared with 74.5 percent for Q1 2009, according to the June 2009 MessageLabs Intelligence Report from security vendor Symantec. The global ratio of spam was 90.4 percent in June, reflecting no change since May. Spam from compromised PCs, known as botnets, accounted for 83.2 percent of all spam in June. One of the largest botnets, Cutwail (also known as Pushdo), had resumed spamming just hours after the shut-down of the botnet's command-and-control ...
- New spam tactic: Spam profiles on social networks29 June 2009, 5:42 pm
Spammers have been creating profiles on social networking sites to attract unsuspecting users through spam friend requests and messages, according to Google researcher Jason Morrison, writing on the Google webmaster blog.Some fake profiles include popular pharmaceuticals as the profile name, but savvier spammers have begun to use real names and realistic data to fly under the radar and populate the network with bad links. "To make sure their newly-minted gibberish profile shows up in searche...
- Hackers hijack Britney Spears' TwitPic account29 June 2009, 5:41 pm
Hackers broke into the TwitPic accounts of Britney Spears, Ellen DeGeneres and other celebrities to broadcast bogus information, the Associated Press reported.The hacked accounts were discovered Sunday after TwitPic, the largest service for posting photographs to the micro-blogging site Twitter, noticed phony messages, including one that said Spears had died.Twitpic, which is not owned or affiliated with Twitter, said on its Twitter feed that the company had "implemented a fix for the email ...
- FTC settles with rogue antivirus vendor ByteHosting29 June 2009, 2:53 pm
The Federal Trade Commission last week settled its case against ByteHosting, an alleged vendor of phony antivirus software known as scareware. The FTC said the defendants tricked more than 1 million people into buying fake antivirus products.In its judgment of nearly $1.9 million against James Reno and ByteHosting Internet Services, FTC agreed to reduce the amount to $116,000 due to the defendants' inability to pay. FTC said the full judgment represented the gross revenues realized from the alle...
info@calasis.com