Top IT Security Bloggers

• 

  Shoulder Surfing The Friendly Skies

  CSO Online

  When you fly nearly every week, you can get pretty bored on a plane. When I am sick of working, playing games, or watching movies, my latest distraction is checking out laptop screens. Sometimes I'm curious what movie you are watching but other times I am interested in what type of confidential company information you are displaying for the world to see.
• 

  Hard to criticize Anonymous for targeting Westboro Baptist Church

  CSO Online

  Saying this won't earn me any popularity points. It may even be hypocritical given my criticism of Anonymous in the past. But my feelings are colored by the filth that is the Westboro Baptist Church.
• 

  After Sandy Hook, how do we make schools more secure?

  CSO Online

  The tragedy in Newtown, Connecticut leaves us asking how to make school buildings harder to penetrate. But every sound idea has its limits.
• 

  Windows passwords: "Dead in Six Hours" - paper from Oslo password hacking conference

  Sophos - Naked Security

  The total number of Windows passwords you can construct using eight keyboard characters is vast: one followed by 16 zeros, or near enough.
  
  Gone in six hours.
  
  Plus you get to heat your house at the same time.
• 

  Observations on the Evolution of Cyber Tactics in 2013

  TrendLabs - Malware Blog

  “There is one thing stronger than all the armies in the world, and that is an idea whose time has come.” – Victor Hugo The world has reached a point of inflection in cybercrime. As cyberspace abounds with cyber privateers, and many nations of the world become havens for these modern-day pirates, it appears that [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Observations on the Evolution of Cyber Tactics in 2013

• 

  Monday review - the hot 18 stories of the week

  Sophos - Naked Security

  Here you go.
  
  All the stories we wrote in the past seven days, in case you missed anything (or just want to read them again).
• 

  Trojan.Batchwiper Reported in Iran

  Symantec Security Response Blogs

  On December 16, 2012, CERTCC-IR posted an advisory regarding a new threat that wipes disks. We have recovered samples matching the hashes mentioned in their advisory and, based on preliminary analysis, can confirm their findings.

  
  

  read more

• 

  Phishers' Fake Security App for Facebook

  Symantec Security Response Blogs

  Contributor: Avdhoot Patil

  
  

  read more

• 

  Tapjacking: An Untapped Threat in Android

  TrendLabs - Malware Blog

  Using social engineering tricks, a developer can create an app that tricks users into tapping a specifically-crafted app popup window (called toast view), making it a gateway for varied threats.This attack, dubbed tapjacking, takes advantage of a specific vulnerability in Android user interaction (UI) component. This technique is not very complicated but has serious security [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Tapjacking: An Untapped Threat in Android

• 

  Security Intelligence Can Help Enterprises Improve Risk Management and Incident Detection/Response

  Network World - Networking Nuggets and Security Snippets

  According to ESG Research, 65% use external threat intelligence (i.e. open source or commercial threat information) as part of their overall security analytics activities. This is yet another factor driving the intersection of big data and security analytics.
  Of those enterprises that consume commercial threat intelligence, 29% say that it is “highly effective” in helping their organization address...