Featured Blog
On March 16, 2012
Using PcAnywhere for Remote Control of POS Systems? – FAIL!!!!!
H. D. Moore of leading vulnerability scanner company Rapid7 has just determined that as many as 200,000 systems connected to the Internet could be hijacked by hackers exploiting bugs in Symantec's pcAnywhere. Even worse for those in retail, up to 5,000 of those are running point-of-sale software ...
Read MoreOn March 12, 2012
Why is network monitoring crucial in data security?
Many different services and ports are enabled by default when installing a new operating system. Hackers can easily take advantage of these vulnerable ports and services without affecting you as the user. These malicious users can install programs and steal sensitive data without a trace. It is imp ...
Read MoreOn March 8, 2012
Security and convenience of soft tokens
The PCI-DSS mandates the use of Two-Factor Authentication(2FA) to ensure secure remote access sessions to devices within the CDE. There are several different types of 2FA tokens that have become available but a soft token can significantly increase the convenience of access for users. Instead of ca ...
Read MoreOn March 4, 2012
I’d feel a lot better about PCI compliance if I knew it delivered some real benefits to my bottom line. Does it?
Indeed it does. PCI can be viewed as a way to improve operational efficiencies. For instance, by automating the process of applying patches or configuration changes to your store systems, you not only minimize the system downtime but you also improve efficiency—because now your IT employees won’ ...
Read MoreOn February 28, 2012
Tips For Creating Secure Passwords (Part 2)
Last month we provided some important guidelines to use when creating passwords for accessing your various web site and applications. This month we want to show some examples of how you apply those guidelines. Recall from last month that we have a fixed phrase "I like Dogs" which translates to a ...
Read More