What’s Physical Security? Ok, I’m just going to say it, I’m a physical security guy in a IT security world. So why physical security for IT? Easy, you can not have a secure network without a secure environment around it. After all Physical Security is part of the CISSP isn’t it? I have conducted many …
Time is never on your side when you’re onsite with a client and trying to get the first good foothold, with admin privileges, can seem impossible. However, some things seem to work more often than others. One of my current, favorite methods to jump start my access in a network is to use an SMB …
Ever Run a Relay? Why SMB Relays Should Be On Your Mind Read More »
Healthcare organizations are a prime target for many malicious individuals and organizations in the information age. Identity thieves, blackmailers, and even the curious public are attracted to the intense amounts of personal information a healthcare organization must collect to provide adequate levels of care. Understanding the current state of security in healthcare is paramount to …
Ransomware Intelligence Briefing Media reporting on the WannaCry ransomware campaign has contained exaggeration, bad information, and fear tactics. This Bulletin seeks to provide Secure Ideas partners situational awareness about malware, ransomware, and phishing campaigns in the wild, and to provide a basic plan for businesses. The Secure Ideas Perspective Coverage of the WannaCry ransomware campaign has …
One of my favorite ways to eat Oreo cookies is to twist the two halves apart, carefully set the filling aside, eat both chocolate halves, and then slowly enjoy the indulgent filling. Without milk, this is by far the best way to fully indulge in both parts of the cookie. But with a glass of …
During a physical penetration test, it is not uncommon for the tester (attacker) to drop usb thumb drives out in the parking lot or someplace within the building. The hope is that an employee will pick it up and connect it to their computer. The end goal: malware that makes a connection back to the …
Secure Ideas’ prides itself on providing the highest level of service to our customers. We are tirelessly searching for new tools, and methods to use in strengthening security for our clients. With that in mind, it is with great pleasure that we announce the unveiling of PCIScout. After undergoing a thorough vetting, and testing process, …
One of the first concerns with protecting a network is stopping outsiders from being able to enter into the internal network. Of course, this does make sense because we believe that the main threat to our network is external by default. Over the years we have found this to not be so true and that …
Turn on any news outlet or visit any news site and you will most likely see an announcement of yet another data breach. On the DTR podcast we discuss breaches in the news during almost every episode. There is a push to put more of an emphasis on identifying and reacting to a breach or …
It was just recently announced that eBay suffered a breach that led to the compromise of user details including: username encrypted password email address physical address date of birth phone number Their announcement indicates that there was no other data (financial or otherwise) that was compromised. Financial data is believed to be stored separately. The …
Ebay Falls Victim to Breach: Source Forge Updates Password Storage Read More »