Regular Expression DoS and Node.js [su_dropcap style=”simple”]I[/su_dropcap]magine you are trying to buy a ticket to your favorite JavaScript conference, and instead of getting the ticket page, you instead get 500 Internal Server Error. For some reason the site is down. You can’t do the thing that you want to do most and the conference is losing out on your purchase, all […]
Cloud Providers Don’t Care About Your Data Security Last week I shared five ways consumers can protect against another Sony breach. As a follow up to that discussion, I want to address cloud providers’ disconcerting lack of accountability when it comes to security.
The Last Things Standing After The Cloudpocolypse Most times the truly interesting things I hear are from the mouths (and keystrokes) of our customers. Last week talking with a client about their move to the cloud, which they called the “cloudpocolypse,”
Survey Says It’s Still Difficult To Secure Data In The Cloud The recent pace of cloud migrations has been remarkable. The affordability, flexibility and scalability of cloud versus on-premises environments are usually cited as the drivers. But if there’s one inhibitor that keeps organizations from making the move to the cloud, that culprit is usually security.
Is Cloud Computing Leading To Poor Security Practices? Despite what you may have heard, the cloud does not make it easier to have poor security from a technical standpoint.
Guarding Against Spear Phishing Threats In the wake of this year’s devastating data breach at the U.S. Office of Personnel Management (OPM), calls for heightened IT security at federal government agencies intensified. Blame for the breach points everywhere from Katherine Archuleta, the Director of OPM, down to the agency’s stunning lack of proper encryption of sensitive data.
Do As I Say, Not As I Do When Managing Passwords Changing user passwords on a regular basis has long been a basic – and well known – tenet of IT security. But when it comes to password security, privileged passwords (admin, root and such) are often overlooked.
Encrypt Your Data In The Cloud Research from Microsoft has been released showing that almost two-fifths of companies will start paying for cloud services within three years. This figure demonstrates why organizations adopting the cloud should revisit their encryption needs.
5 Ways To Avoid Being The Next Security Breach Headline It’s been an active season for criminal hackers, rogue IT administrators and others with vindictive motives and the ability to exploit weak and outdated security systems. Let’s recap with a look at just a few of the security breach fiascos we’ve seen in recent months:
Some Things Never Change In Password Security When you’re a security pro, there are a lot of conversations you’re accustomed to having over and over. There’s the “Yes, we should have the business review and approve security policy” conversation. The classic “No, we can’t just give everyone all access to the share to make your life easier.”
