Exaprotect BlogManager

A new report from the US Treasury Inspector General for Tax Administration has delivered a damning verdict on the security of internal web servers on the Internal Revenue Service (IRS) network.

(more…)

Growing concerns about identity theft and fraud have led to increasing interest in speaker verification solutions. One of the reasons is that speaker verification is often seen as a more attractive option than fingerprint or iris scan-based solutions. Many companies already use speech technology in their customer contact centers, whilst from a customer perspective the only device they need to use to access a speaker verification system is their voice.

(more…)

A new study finds organizations may let employees use Web 2.0 technology, but they don’t have the proper security tools in place to protect them from the new threats these applications pose.

To read the whole story: http://www.csoonline.com/article/450964/Despite_Threats_Companies_Lag_on_Web_._Security

The Internet Crime Compliant Center (IC3) has received thousands of reports concerning the hit man e-mail scam. This scam, which originally surfaced in 2006, contained a message claiming that the sender has been hired to kill the recipient.
(more…)

Security information management systems, or SIMs for short, are effective platforms for the collection, analysis and storage of events from a broad range of systems and devices within the IT infrastructure. Many enterprises are overwhelmed by the myriad of choices and types of data a SIM can provide.  all the article at http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1327864_tax312277,00.html

Watch the demo and see how EventManager instantly detects and respond to security threats! http://exaprotect.com/products/eventmanager/

An uncertain economy is causing many companies to do some budget tightening, but the continued barrage of data breach news has helped keep data security a priority in most company board rooms, says Khalid Kark, a principal analyst at Cambridge, Mass.-based Forrester Research Inc. In this interview, Kark shares some of the details of a recent security survey and explains why budget tightening may not have a major impact on security projects. Kark will present the details at the Forrester Security Forum, which begins Sept. 4 in Boston.

Read the whole article: http://searchsecurity.techtarget.com/news/interview/0,289202,sid14_gci1328034,00.html

BOSTON — Forrester analyst John Kindervag says he’s sick of hearing people whine about the payment card industry data security standard (PCI-DSS). A former qualified security assessor (QSA), Kindervag said companies often drag out compliance issues instead of dealing with them head-on.

Read all the story: http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1329845,00.html

See how LogManager makes compliance easy: Download PCI Solution Sheet for free on http://www.exaprotect.com/resources/ !!

The information security industry continues to be under the spotlight in the wake of the almost daily occurrence of highly publicized data breaches, credit card frauds and phishing attacks. The challenges we as information security professional must address are to proactively plan against the various threats we now face, rather than simply reacting to problems through point solutions. What is needed is a holistic approach to security and governance - and much more engagement with business owners and directors.

(more…)

The recent losses in customer data in the UK continue at a pace with the bizarre news that a computer sold on eBay contained the records of no fewer than one million bank customers.
(more…)

…that’s why fast-flux botnets and the aforementioned emerging hydraflux models are taking off as they offer botmasters the ability to hide and failsafe their networks so that when one command and control center is taken offline, another can simply take over. And, Botezatu also highlights the emergence of another model that researchers believe may appear, but which has not yet been discovered in the wild, the “random” controlled botnet.

Read the whole article: http://securitywatch.eweek.com/exploits_and_attacks/anatomy_of_a_botnet.html

See how to detect unusual behavior change on your machine caused by a botnet: http://www.exaprotect.com/products/logmanager/index.php