SANS Brochure Challenge Write-Up
Last Summer SANS organised a security/hacking challenge through 4 of their brochures, each brochure had an “easy” challenge in the form of a hidden message to de-cipher to get a URL to the second level...
View ArticleBlackHat Europe 2014 – Some Highlights
Hacking conferences are a great way to learn he latest hacking techniques and more underground ways of thinking on IT Security. They complement nicely more corporate Security Training courses such as...
View ArticleiOS Backdoors
In the last few days there has been an increasing noise related to some iOS backdoors. Apple does not deny they exist, but contests how they can be used. This is not new, and the security researcher...
View ArticleCritical Infrastructure and Cyber attacks
I recently came across an article on a UK newspaper, the Guardian, about Mt Kaspersky predicting a riot. Well, not exactly. He is predicting a major cyber terrorist attack on UK soil which will disrupt...
View ArticleHeartbleed, do not panic!
The security issue related to OpenSSL has been all over the news in the last couple of days. It is indeed a very bad issue, one that can let an attacker access the login details, including passwords,...
View ArticleBluetooth under attack
I have heard of Ubertooth for a while now and it seems it use to attack bluetooth devices keep growing. Once recent attack described HERE can leverage the Ubertooth sniffing capability to crack the...
View ArticleApple Security in the Enterprise
There is a good document from the UK government describing the different security features available in Apple Mac OS X 10.8 and the ones you should consider if using a Mac as an enterprise end point:...
View ArticleA new look
It seems I refresh the look of this website every 3 years and 3 years was up so here the new look :) I decided to go with a slick, low maintenance theme. It has also been a few months since I updated...
View ArticleUsing a phone as a keylogger, next it will be a smartwatch!
There is an interesting paper from Georgia Tech College describing a clever proof of concept where a phone is used to eavesdrop on keystrokes. This is done by leveraging the phone motion sensor...
View ArticleNew iPhone 5S Fingerprint reader, a step in the right direction!
Apple has just announced two new models of iPhones, one of them is the iPhone 5S which comes with a fingerprint reader. Like others I believe this is no silver bullet, but it is a step in the right...
View ArticleMobile Device Management Limitations
Current MDM frameworks, unless using some kind of container approach, will always play catch-up to hackers wanting to bypass the controls enforced to their phones, as highlighted in the following...
View ArticleThe right (way) to disclose vulnerabilities
An article was discussed last month in The Guardian and The BBC explaining how a research paper from the University of Birmingham had been barred by a judge from being published because it discussed...
View ArticleiOS7 and Mavericks Security
There is an interesting article HERE that describes the new security features of iOS7 and Mavericks. It also asks some interesting questions that still need answering.
View ArticleA story about Password – The Wrong Formula
In this article I will first talk about some missconceptions as to what is considered a secure password and then about you can leverage different technologies to help you with all your passwords. In...
View ArticleEvernote hacked, an early warning for the Cloud Storage storm coming?
In recent years I have written various articles warning of the risk related to uncontrolled cloud storage solutions usage in the corporate world. Evernote is a popular online note storage solution...
View ArticleA new iOS 6.1 hack
As seen on the Hacker news, there is currently a way to bypass the iPhone lock screen (iPad with SIM too?) running iOS 6.1.x I had to change the steps listed in “The Hacker news” slightly for it to...
View ArticleMobile devices security, history repeating itself: Harder, Faster, Stronger...
Following up on my SANS 575: Mobile Device Ethical Hacking course review, below is my take on the current state of Mobile Devices security. First, let me define what I mean by mobile devices:...
View ArticleSANS 575: Mobile Device Ethical Hacking Review
In the last two years I have been to a few SANS training courses: 508: Advanced Forensic 617: Wireless Ethical Hacking 660: Advance PenTest Last week I attended the SANS 575: Mobile Ethical Hacking...
View ArticleIs there a bug with McAfee
There is something quite surreal with what is happening with John McAfee; the author of the popular McAfee Antivirus and who is rich, lives in Belize and has recently been accused by the authority to...
View ArticleBoxcryptor, a great tool to secure your cloud storage solution.
I made my feelings very clear about the use of Dropbox in the enterprise, through a previous post. I still believe Dropbox and similar other cloud sotrage solutions such as Google drive or Sky Drive...
View Article