Year: 2014

The Case for N. Korea’s Role in Sony Hack

There are still many unanswered questions about the recent attack on Sony Pictures Entertainment , such as how the attackers broke in, how long they were inside Sony’s network, whether they had inside help, and how the attackers managed to steal terabytes of data without notice.

2014 – A Bumper Year for ServiceDesk Plus!

As our ServiceDesk Plus team constantly focuses on what’s next, it’s easy to lose sight of how far we’ve come. Looking in the rear view, 2014 was a fantastic year for us filled with major releases/upgrades, user conferences, trade shows, webinars, major revamps and most importantly, a pioneering move of making the Standard Edition free for all our users that saw a huge spike in downloads and sign ups. We’re also proud to see how much of our roadmap we’ve covered with numerous features and integrations guided by constant feedback from our customers

Gang Hacked ATMs from Inside Banks

An organized gang of hackers from Russia and Ukraine has broken into internal networks at dozens of financial institutions and installed malicious software that allowed the gang to drain bank ATMs of cash. While none of the victim institutions were in the United States or Western Europe, experts say the stealthy methods used by the attackers in these heists would likely work across a broad range of western banks.

Serious NTPd vulnerabilities Patched; XTM Not Affected

Today, CERT and NTP.org warned the world about some serious vulnerabilities in a very popular network time server called ntpd. If you use Linux systems, or any number of network appliances, chances are you’re using ntpd somewhere in your organization, and should apply the 4.2.8 update (tarball) as soon as possible. Network Time Protocol (NTP) is a standard for updating and synchronizing your computer’s clock over a network.

ICANN Breach & More Sony – WSWiR Episode 133

Wow! This week’s been such a busy news week that the information security (InfoSec) stories kept pouring in, long after I finished this week’s video. The latest? CERT just warned  about some critical vulnerabilities in NTPd, a popular network time protocol (NTP) service that many network devices and software uses

Staples: 6-Month Breach, 1.16 Million Cards

Office supply chain Staples Inc. today finally acknowledged that a malware intrusion this year at some of its stores resulted in a credit card breach. The company now says some 119 stores were impacted between April and September 2014, and that as many as 1.16 million customer credit and debit cards may have been stolen as a result.

FBI: North Korea to Blame for Sony Hack

The FBI today said it has determined that the North Korean government is responsible for the devastating recent hack attack against Sony Pictures Entertainment . Here’s a brief look the FBI’s statement, what experts are learning about North Korea’s cyberattack capabilities, and what this incident means for other corporations going forward