June 14, 2011 - The Threat Research Team at Palo Alto Networks has been at it again, discovering yet another critical Microsoft vulnerability. The vulnerability (MS11-038) is addressed in today’s patch Tuesday release, and you can read the Microsoft summary here. The (continue reading...) Read more
June 3, 2011 - We recently published data that analyzed application activity in more than 1,250 organizations worldwide and confirmed what most assumed to be the case: that Facebook is indeed the dominant player in social networking, consuming 87% of all social networking (continue reading...) Read more
June 2, 2011 - As reported today in the New York Times, Google has acknowledged the discovery of a scheme to steal Gmail passwords and eavesdrop on the affected email accounts. (You can read more information on this from Google’s blog here) This (continue reading...) Read more
May 25, 2011 - Last week Forrester released their 2011 Market Overview for IPS solutions (read it here), and in it they had some pretty interesting (continue reading...) Read more
May 25, 2011 - When asked what personal email you use, most will immediately reply with Gmail, Facebook Mail, or Yahoo Mail while a select few of us will admit to using Microsoft Hotmail. Why? Speculation would be that it is because Hotmail is (continue reading...) Read more
May 12, 2011 - The 7th Edition of the Palo Alto Networks Application Usage and Risk Report provides insight into application activity that is based on 1,253 application assessments that show what is really happening on the network. Each of the previous six reports have (continue reading...) Read more
May 9, 2011 - It has been a very busy spring for data breaches, which has exposed not only a shift in how breaches are executed, but also what types of information are being targeted. As with most breaches, some of the details remain (continue reading...) Read more
April 25, 2011 - Money mules are an essential and often overlooked part of financial theft and malware rings. Even after a theft, the hacker still must find a way to get the money back to his account without revealing his true identity or (continue reading...) Read more
April 14, 2011 - As part of our ongoing botnet tracking and research, we have recently discovered a novel approach for detecting the presence of SpyEye in a network. Just in case you aren’t familiar, SpyEye is a rapidly growing banking botnet and a (continue reading...) Read more
April 10, 2011 - If you are not already familiar, Windows Live Mesh 2011 is Microsoft’s file synchronization and remote desktop access application that evolved out of its earlier products, FolderShare and Live Sync. It is a part of Microsoft’s vision for how users (continue reading...) Read more
March 30, 2011 - The ongoing WikiLeaks saga has been one of the most intensely covered stories in information security, and for good reason. It involves the exposure of damaging national secrets; has ignited fresh debates about the freedom of information, and has a (continue reading...) Read more
March 23, 2011 - Twitter has recently joined the ranks of fellow social media giants Facebook and Google by moving to more widespread and defualt use of SSL to protect their end-users’ information. Twitter announced on their blog that users can set a preference (continue reading...) Read more
March 17, 2011 - It’s that time of year again when college basketball takes center stage in America – brackets are filled out, fretted over, and filled out again. Otherwise sane and reasonable coworkers morph into die-hard superfans, and full-grown men begin having serious (continue reading...) Read more
February 15, 2011 - Cisco’s news at this years RSA Conference is the unveiling of SecureX. Cisco itself describes this next generation security architecture as “complicated” in that it includes new scanning elements, policy language and enforcement capabilities (endpoint control, presumably), all aimed (continue reading...) Read more
February 15, 2011 - Cisco’s news at this years RSA Conference is the unveiling of SecureX. Cisco itself describes this next generation security architecture as “complicated” in that it includes new scanning elements, policy language and enforcement capabilities (endpoint control, presumably), all aimed (continue reading...) Read more
February 1, 2011 - Last Friday was the annual Data Privacy Day, held to raise awareness about data privacy issues among consumers, organizations, and government. A key piece of online data is information about a user’s location. While location information has enabled the delivery (continue reading...) Read more
February 1, 2011 - Last Friday was the annual Data Privacy Day, held to raise awareness about data privacy issues among consumers, organizations, and government. A key piece of online data is information about a user’s location. While location information has enabled the delivery (continue reading...) Read more
January 28, 2011 - This week, Facebook announced HTTPS support for all communication between its servers and end users’ web browsers. This is the right thing for Facebook to do in light of (continue reading...) Read more
January 28, 2011 - This week, Facebook announced HTTPS support for all communication between its servers and end users’ web browsers. This is the right thing for Facebook to do in light of (continue reading...) Read more
January 13, 2011 - In our content updates over the last two weeks, we included App-IDs for 8 new applications – 3 of which are very interesting to me, as evidence for the continued movement towards browser-based filesharing, and another as proof of the (continue reading...) Read more