“…readers won’t look at words unless they are immediately adjacent to pictures. Solution: stock art! I am delighted to report that there is an abundance of stock art geared toward illustrating news stories about cybercrime.”
SecurityWeek: Don't Focus on Headlines: Worry About More Common Attacks, Says Expert
“Although Groups Like LulzSec and Anonymous Have Created Headlines with Very High Profile Attacks, They Represent a Tiny Fraction of the Online Crime that Happens Around the World Each Day”
Journey Into Incident Response: Google the Security Incident Detector
“Search engines are not only great tools for locating information across the Internet but they can alert organizations of potential security incidents. Others have already published methods on how to use search engines to locate information including web pages infected with SPAM links and common vulnerabilities. In addition to this information, search engines can help determine if a company’s data has been stolen.”
“ There is no bigger sucker than a marketer who’s afraid he’s missing the latest trend. ”
Bob Hoffman, quoted by Tim Orr in a comment on MediaPost
Cloudmark: Google Groups to require confirmation before addition
“This feature allowed Groups to be created and email addresses added without requiring any confirmation from the recipient, and not surprisingly this was heavily abused by spammers.”
Shady Characters: The @-symbol, part 1 of 2
“…the ‘@’ symbol is not strictly a mark of punctuation; rather, it is a logogram or grammalogue, a shorthand for the word ‘at’. Even so, it is as much a staple of modern communication as the semicolon or exclamation mark, punctuating email addresses and announcing Twitter usernames. Unlike the ampersand, though, whose journey to the top took two millennia of steady perseverance, the at symbol’s current fame is quite accidental. It can, in fact, be traced to the single stroke of a key made almost exactly four decades ago.”
Enterprise Efficiency: Phishers Are Casting Nets for Your Domain Names & DNS
“We all know how traditional phishing works, where email is sent to users in an attempt to steal login or credit card information. But there is another, less known attack that is becoming more common: striking at the domain name level.”
Fast Company: When Hacks Attack: The Computer Security Textbook Plagiarism Epidemic
“A crusader from Attrition.org has found that an alarmingly high number of books written by computer security experts are nearly 100% copied from other sources. What does that say about the industry?”
Gizmodo: Software Can Detect Fake Reviews With 90% Accuracy
“…Cornell researchers…developed an algorithm that can detect phony reviews with 90% accuracy. This is better than human judges who struggle to pick out bogus reviews and would do better if they just randomly guessed.”
threatpost: How I Taught the Senate To Hack
“What happens when 20-something Beltway wonks put down their Blackberries and start getting real about hacking? Chris Wysopal can tell you.”
The Tech Herald: Log management and network auditing led to AT&T insider's arrest
“AT&T’s internal investigation into the data breach discovered an IP address on their network visited FileApe.com at the same time the confidential information was accessed without authorization. Drilling down into network logs, the IP address itself was assigned to a pool of IPs allocated to Convergys contractors. At the time of the breach there were 19 contractors connected to the server where the documents were stored.”
The Atlantic: SEO Shop Puts 50 Google 1s on Sale for Just $9.99
‘You knew it had to happen, right? As soon as Google opened up its search engine to “social signals,” the search engine optimization shops had to find ways to game the system.’





