Browse by Tags

Calling all LCS/OCS administrators...do not apply KB974571
A security patch that addresses - "MS09-056: Vulnerabilities in CryptoAPI could allow spoofing" has been reported to alter your LCS/OCS installations and send them into evaluation mode with expiry. For those that have already applied this hotfix...
Posted 14 Oct 2009 by Adam Jacobs | with no comments
Upgrade to Microsoft Security Essentials available
An upgrade is available to those running Microsoft's new beta Anti-Virus product "Microsoft Security Essentials". To update your software click Help -> Upgrade Microsoft Security Essentials. Source: here
Posted 20 Aug 2009 by Adam Jacobs | with no comments
Data redirection evolves in Windows 7
I know there is a lot of buzz about Windows 7 at the moment, which is great because this was not so much the case when Vista was launched. However one of things that Vista did introduce was user access management (UAC) and as with a number of Vista "enhancements"...
Posted 4 Aug 2009 by Adam Jacobs | 1 comment(s)
Apple releases iPhone firmware 3.0.1 to address ancient SMS security boo boo
But Apple does not release security patches for its exploit-free platforms? Well as soon as mass popularity is met, it is inevitable... Update Available for: iPhone OS 1.0 through iPhone OS 3.0 Impact: Receiving a maliciously crafted SMS message may lead...
Posted 31 Jul 2009 by Adam Jacobs | with no comments
Filed under: , ,
Microsoft due to release out-of-band security updates tomorrow
Microsoft is due to release two out of band security patches tomorrow (28th July 2009), these are specifically designed to address: Bulletin ID Maximum Severity Rating and Vulnerability Impact Restart Requirement Affected Software Internet Explorer Critical...
Posted 27 Jul 2009 by Adam Jacobs | with no comments
Filed under: ,
Protecting your data whilst parting with your "crown jewels"
If you try to compare a car repair shop with a PC repair man you will find many similarities, both cut corners, charge you for unneccessary extras and are likely to be dishonest. This is according to an exclusive Sky News expose . If you have to take...
Posted 22 Jul 2009 by Adam Jacobs | with no comments
Critical Firefox exploit uncovered?
Taken from eWeek : Mozilla is downplaying a reported bug in its Firefox browser. According to Mozilla, initial reports that the vulnerability could be exploited to execute malicious code. Mozilla is pouring cold water on reports of a severe bug affecting...
Posted 21 Jul 2009 by Adam Jacobs | with no comments
Filed under:
256GB on a USB memory stick, but no encryption?
Kingston Technology has just announced the release of a 256GB USB memory stick, a world first. 256 GB of data, allows you to store: 10 Blu-ray discs (~25 GB each) 54 DVD discs (~4.7 GB each) 365 CD discs (~700 MB each) My bug bear is when do companies...
Posted 21 Jul 2009 by Adam Jacobs | 1 comment(s)
RFID authentication more secure than hard drive encryption?
When looking for a secure hard drive last week I came across a new type of portable storage, Freecom have an encrypted RFID swide-card that unlocks access to your data. The idea sounds great, I could have two cards one assigned to myself and another to...
Posted 19 Jul 2009 by Adam Jacobs | with no comments
Steve Riley now working at Amazon (he is not selling books either!)
Back in May Steve Riley, an ex-Microsoft security guru come probably the best speaker I have ever seen was taken hostage by recent layoffs. He now works for Amazon Web Services, as mention on his Blog .
Posted 16 Jul 2009 by Adam Jacobs | with no comments
Filed under: ,
Data security for father in-laws
Last weekend my father in-law asked me if it was safe for him to throw away an old computer, as an ex-practicing solicitor his level of paranoia is heightened when it comes to information security. I found out that he had been storing his old computer...
Posted 27 May 2009 by Adam Jacobs | with no comments
Danger Will Robinson, IIS 6.0 vulnerability, but only on WebDav enabled servers
A recent vulnerabilty has been discovered that effects IIS 6.0 web server where WebDav is enabled, this is likely to be patched on the next patch Tuesday given that it is yet to be seen in the wild (if this changes I have no doubt it will be delivered...
Posted 19 May 2009 by Adam Jacobs | with no comments
Steve Riley leaves Microsoft!
Just spotted a post over at Nick Whittome's Blog that mentions Steve Riley has been hit by the second round of Microsoft layoffs. I met Steve back at last year's Strategic Architecture Forum (SAF), he presented on "Privacy in the Digital...
Posted 6 May 2009 by Adam Jacobs | 1 comment(s)
Filed under: , ,
Don't just block it, strip it and send it!
Whilst at InfoSec we spoke to the folks at Cisco about their IronPort e-mail gateway (an acquisition in early 2007), our question was “how can we put in place a more intelligent way of quarantining e-mail embedded with images”? You see, I...
Posted 28 Apr 2009 by Adam Jacobs | 1 comment(s)
Filed under: , ,
Look ma, I'm at InfoSec 2009
So today I thought I would venture down to InfoSecurity 2009 at Earl's Court and see what the security vendors were touting this year, initially I noticed two things.... The show was bigger than ever before, usually it takes place in Olympia (a smaller...
Posted 28 Apr 2009 by Adam Jacobs | with no comments
Filed under: ,