Friday 15 May 2009

Another reason why you should never use pirate software

Whilst I am sure none of you ever use pirate software, can you say the same for your employee's or children.

Apart from the legal and moral issues there is a very real threat of compromising your data from malicious code.

A recent pirate release of Windows 7 contained malicious code to build a bot-net army and was infecting more than 200 machines per hour.

10,000 medical records may have been compromised

Police are investigating a string of identity theft cases that all appear to have a common thread; the victims all had records at Johns Hopkins hospital in Maryland.

Once again the breach appears to be caused by an insider threat.

$500K netted in NYC ATM fraud

It seems that we still do not close the doors even when a threat is well known.

Another skim and cam ATM fraud has been committed in NYC netting $500K.

Intelligent CCTV to spot retail fraud

StopLift Inc are trialing a new system that claims to be able to mathematically spot the signs of "sweethearting". This is when the checkout person obscures the bar code of some of the items, passing them free of charge to their accomplice.

This sounds like quite a challenge for a piece of software and the accuracy of its decision making will be under great scrutiny but there can be no doubt that we will see more behaviour based CCTV systems.

EU looses nerve for data breach disclosure law

The EU have been unable to agree a new disclosure law. Even though this legislation was only for communication and Internet providers they were still unable to reach an agreement.


We say DISCLOSE ALL DATA BREACHES NOW, the campaign starts here.

Death by Facebook!

A very real demonstration of the dangers of exposing too much personal data on-line.

Despite increase in cases there is no increased budget for e-crime unit

Once again the goverment demonstraits that it puts no priority on our privacy by refusing to increase the budget for the (already underfunded) Police Central e-crime unit.

Social engineering and confidence tricks - the easiest way to obtain passwords?

This is a great article on the BBC showing how easy it is to obtain passwords and other confidential information by using basic social engineering and confidence tricks.

A recent report by PGP showed that 70% of all data breaches were down to insider failings, not outside hackers.

How much of your ITSec budget is spent educating your people to avoid being part of the 70%?