Blog

Vulnerability of your..Voicemail?

August 26, 2011August 19, 2011 Scott D. RosenbergIT SecurityLeave a Comment

Yup, another target for hackers – voicemail. It falls pretty low on the totem pole of items to secure, and leaves many vulnerabilities for that reason. For example, a mobile phone will rarely ask you for a password when you call from your own phone – what happens if you lose it? Anyone who picks it up can dial in and listen to your messages. eSecurityPlanet’s Robert McGarvey recently wrote an interesting piece on the subject which offers tips for […]

Oracle stack factor: Wow factor benefits for Exadata & Exalogic

August 24, 2011September 6, 2011 Scott D. RosenbergExadata, Exalogic, Fusion Middleware, JAVA, Oracle 11g, Oracle 12g, Oracle database, Oracle license, Oracle Licensing Compliance, WebLogicLeave a Comment

I don’t want to sound like a cheerleader for Oracle, but after looking at some comparative benchmark tests, the competition just can’t stack up (pun intended). While not everything is perfect, the power and precision of Oracle’s Exadata and Exalogic is worth at least a peek (especially those out there seeking to cut real estate and costs at the data center). While the prices may be a little daunting, the benefits have caused a major “wow” factor. Mid-tier organizations should pay […]

Security Breaches – How Bad Are They?

August 22, 2011August 19, 2011 Scott D. RosenbergIT SecurityLeave a Comment

We have all heard about the recent security breaches – Sony, Amazon, LastPass – but the question is, what is the cost of those breaches? Aside from embarrassment – how bad is it for the company. Here is a breakdown of the various costs associated with a breach: Fixing what’s broken – strengthening existing IT security to prevent another breach Replacement – if physical items were stolen Credit monitoring – anyone affected by the breach will be vulnerable to identity […]

How to Avoid a Giant Security Breach

August 19, 2011 Scott D. RosenbergDatabase security, IT SecurityLeave a Comment

Security breaches are bad news, for everyone involved. Some companies don’t come back from them – others take years to gain their reputation back, not to mention the huge costs of upgrading the network to prevent it from happening again. Miro’s security expert Sam Alapati just published a Front IT Blog on ITInsideronline about preventing such a breach. He offers some really simple, yet important, tips for securing your organization. Check it out!

Enterprise IT is from Venus; software vendors are from Mars

August 4, 2011 Scott D. RosenbergUncategorizedLeave a Comment

To quote Jonathan Feldman of InformationWeek: “Enterprise IT is from Venus; software vendors are from Mars.” This statement should be funny, but unfortunately it’s all to true to be laughable. Jonathan recently wrote a great piece about how licensing changes happen without notice and often without making much sense. Microsoft and VMWare are the vendors in particular called out in this instance, both with bad track records for making confusing and frequent changes to their licensing. He makes some interesting […]

Which browser is the most secure?

July 14, 2011July 8, 2011 Sam AlapatiIT SecurityLeave a Comment

One good way to assess the security of a web browser is to see how it fares in testing against socially engineered malware. Why is this test important? Because socially engineered malware is the most significant internet threat today. A test performed by NSS labs in 2010 showed that Internet Explorer 8 offered the best protection against socially engineered malware. While Google Chrome, Mozilla Firefox and Apple’s Safari browser have improved over time, IE has proven to be far superior […]

Risk Monitoring Growing Concern for CIOs

July 14, 2011July 8, 2011 Sam AlapatiUncategorizedLeave a Comment

There are a large number of types of GRC software, with most of them focusing on one area of GRC. For a CIO, one of the biggest concerns over the past few years has been the growing number of compliance mandates. GRC tools that focus on the compliance part of GRC have turned out to be useful for many CISOs. CISOs have been able to take advantage of the structured enterprise -wide approach to regulatory compliance that’s made possible by […]

How to avoid data leakage on Android

July 11, 2011July 8, 2011 Sam AlapatiIT SecurityLeave a Comment

Android phones all the rage, some even believe it will outpace the iPhone. As for me, being a security professional, I have my concerns. Many security researchers have demonstrated that almost every single Android Smartphone can leak login data for Google services – that’s a scary thought. The problem is due to the fact that the login tokens are sometimes sent in clear test over wireless networks, thus allowing hackers to grab these tokens and potentially cause mischief. This can […]

In Archive