I. Well, that The link for this article located at SecurityPark is no longer available. . Explore recent cybersecurity threats and strategies to evaluate vulnerabilities effectively this month.. Cyber Attack, Risk Assessment, Incident Management, Security Alert. . LinuxSecurity.com Team
The TJX Companies, a large retailer that operates more than 2,000 retail stores under brands such as Bob. Banking officials in Massachusetts say the TJX breach is behind a recent warning by Visa to banks in Massachusetts, which have contacted customers in recent days and had to reissue thousands of ATM and debit cards. In the end, the hack may affect a wide range of credit card companies and thousands of consumers in America and in countries like the United Kingdom and Ireland, experts say. TJX said it is working with IBM and General Dynamics to investigate the breach, which is believed to have occurred on computer systems that process and store information on customer transactions for T.J. Maxx, Marshalls, HomeGoods and A.J. Wright. Transactions from T.K. Maxx in the United Kingdom and Ireland may have also been exposed in the breach. The link for this article located at CSO Online is no longer available. . Financial regulators caution that the massive Target security incident affects financial institutions in Massachusetts due to the revelation of consumer debit card information.. TJX Companies, Data Breach, Payment Security, Consumer Protection. . LinuxSecurity.com Team
Atos is using VLANs both to simplify troubleshooting and to limit damage if anyone manages to break into the network. There are separate VLANs for the commentator information system, information diffusion applications, and the game management system. Technical services, directories, management and monitoring, and the on-venue results system each have their own VLANs too, sometimes several per venue for the same function. . . .. Atos is using VLANs both to simplify troubleshooting and to limit damage if anyone manages to break into the network. There are separate VLANs for the commentator information system, information diffusion applications, and the game management system. Technical services, directories, management and monitoring, and the on-venue results system each have their own VLANs too, sometimes several per venue for the same function. "The purpose is to segment the traffic so we can monitor it and contain potential issues," Noblot says. "If someone brings in a virus, that would be contained on systems on the same VLAN." The link for this article located at IDG is no longer available. . Atos is using VLANs both to simplify troubleshooting and to limit damage if anyone manages to break . using, vlans, simplify, troubleshooting, limit, damage, anyone, manages, break. . Anthony Pell
For this learning session on Help Net Security, we've got Michael J. Staggs, Senior Security Engineer at Guidance Software, discussing the basics of computer forensics. In this twelve minute audio, Mr. Staggs introduces the listeners to computer forensics in general, the need and importance of forensics in the IT environment and gives a number of valuable tips regarding the process, including creating methodology guidelines, incident simulation and more. . . .. For this learning session on Help Net Security, we've got Michael J. Staggs, Senior Security Engineer at Guidance Software, discussing the basics of computer forensics. In this twelve minute audio, Mr. Staggs introduces the listeners to computer forensics in general, the need and importance of forensics in the IT environment and gives a number of valuable tips regarding the process, including creating methodology guidelines, incident simulation and more. The link for this article located at net-security.org is no longer available. . Delve into the fundamentals of digital forensics alongside Michael J. Staggs in this enlightening educational workshop presented by Help Net Security.. Computer Forensics, IT Security, Incident Management, Security Techniques. . Anthony Pell
Contrary to popular belief, corporate sabotage is among the least likely causes of computer security breaches. According to an April 2002 survey by the Computer Security Institute, sabotage accounted for just 8 percent of system attacks in 2002. Security breaches . . . . Contrary to popular belief, corporate sabotage is among the least likely causes of computer security breaches. According to an April 2002 survey by the Computer Security Institute, sabotage accounted for just 8 percent of system attacks in 2002. Security breaches are more often due to errors by end users or administrators. The inadvertent gaffes are the main culprits for introducing viruses, allowing denial of service attacks, and opening entryways to supposedly secured data. CIOs can reduce, and possibly eliminate, an organization's risk from these errors by creating and implementing a comprehensive set of IT security policies aimed at user behavior. These policies, along with efforts to educate users about how to eliminate security weaknesses, can thwart future vulnerabilities and boost awareness about security issues throughout the enterprise. Defining IT security policies and making them operational is no light task, according to TechRepublic members. A good security policy must address both end users and administrators. On the user side, policies should address how the staff is allowed to make use of computer equipment and applications, according to TechRepublic member William Graham, president of G&G Computing consultancy in Fort Campbell, KY. Graham recommends that end-user policies include the following: The link for this article located at ZDNet is no longer available. . Corporate sabotage may contribute to data breaches, but human errors are usually the main cause. Educating employees is crucial to improve their knowledge of security protocols. IT Training Programs, User Behavior, Security Management, Breach Prevention, Awareness Training. . Anthony Pell
Kevin Jurrens writes: Prentice Hall PTR and HP Books today announced the publication of "Halting the Hacker: A Practical Guide to Computer Security," Second Edition by Donald L. Pipkin, CISSP, Information Security Architect for the Internet Security Division of the Hewlett-Packard Company. "Halting the Hacker: A Practical Guide to Computer Security," Second Edition, combines unique insight into the mind of the hacker with practical, step-by-step countermeasures for protecting any HP-UX, Linux, or UNIX system.. . .. Kevin Jurrens writes: Prentice Hall PTR and HP Books today announced the publication of "Halting the Hacker: A Practical Guide to Computer Security," Second Edition by Donald L. Pipkin, CISSP, Information Security Architect for the Internet Security Division of the Hewlett-Packard Company. "Halting the Hacker: A Practical Guide to Computer Security," Second Edition, combines unique insight into the mind of the hacker with practical, step-by-step countermeasures for protecting any HP-UX, Linux, or UNIX system. Prentice Hall PTR and HP Books Publish Second Edition of Computer Security Bestseller "Halting the Hacker" Updated to Reflect Today's Most Critical Threats, Tools and Responses Upper Saddle River, NJ, Oct. 2, 2002 - Prentice Hall PTR and HP Books today announced the publication of "Halting the Hacker: A Practical Guide to Computer Security," Second Edition by Donald L. Pipkin, CISSP, Information Security Architect for the Internet Security Division of the Hewlett-Packard Company. "Halting the Hacker: A Practical Guide to Computer Security," Second Edition, combines unique insight into the mind of the hacker with practical, step-by-step countermeasures for protecting any HP-UX, Linux, or UNIX system. Top HP security architect Donald L. Pipkin has updated this global bestseller for today's most critical threats, tools, and responses. The book explores the processes hackers use to gain access, privileges, and control--showing readers exactly how hackers work and the best ways torespond to incidents. Using dozens of new examples, the book provides readers with the skills and mindset to protect themselves against any current hacking exploit--even attacks that haven't even been imagined yet. Halting the Hacker, Second Edition, covers: How hackers select targets, identify systems, gather information, gain access, acquire privileges, and avoid detection How multiple subsystems can be used in harmony to attack your computers and networks Specific steps to take immediately to improve the security of any HP-UX, Linux, or UNIX system How to build a secure UNIX system from scratch--with specifics for HP-UX and Red Hat Linux Systematic proactive, reactive, and preemptive security measures Security testing, ongoing monitoring, incident response, and recovery--in depth Legal recourse: What laws are being broken, what one needs to prosecute, and how to overcome the obstacles to successful prosecution The accompanying CD-ROM contains an extensive library of HP-UX and Linux software tools for detecting and eliminating security problems and a comprehensive information archive on security-related topics. About the Author... Donald L. Pipkin, CISSP, is an Information Security Architect for the Internet Security Division of HP who consults with many of HP's largest customers. An internationally renowned security expert with over 15 years of experience, Pipkin is a frequent speaker and presenter on security issues in regional, national, and international conferences. His areas of expertise include policy, procedures, and intrusion response. He is author of Information Security: Protecting the Global Enterprise. Halting the Hacker: A Practical Guide to Computer Security, Second Edition, Pipkin. Prentice Hall PTR/HP Books 2003. ISBN: 0-13-046416-3. 384 pp. $44.99 Editors and media: For complimentary review copies, permission for excerpts, art or interviews with the author, please contact Kevin Jurrens of Garfield Group PR at 215-867-8600 x273 or
Get the latest Linux and open source security news straight to your inbox.