Here we go again. A new PoS Malware variant dubbed PoSeidon has been analyzed by Cisco and the details made public. When I read this I ...

Google engineers just released a Proof of Concept for an undisclosed Windows 8.1 vulnerability that would allow privilege escalation. ...

Everything you read about the Regin (Reg In or Reagan) malware indicates that it is one of the most "sophisticated" malware since ...

Powershell is, well powerful. Microsoft is making Powershell the future of Windows Management starting with Windows Server 2012. For us se...

We all knew variants of BackOff would occur and infections spreading to other retailers and PoS machines. By practicing the process of Malwa...

When is something that looks like Adobe, not Adobe? When it's Malware of course. Like the BackOff malware BlackEnergy also tries to foo...

Thanks again to US-Cert for producing a perfect example of The Malware Reporting Standard output! Another teaching moment to demonstrate how...

Practicing Malware Management as a part of any 'good' Information Security program, you would have caught the Tyupkin malware ...

You can find all the resources discussed in the interview for Episode 388 here: MalwareArchaeology.com #InfoSec #HackerHurricane ...

After being on the Security Weekly podcast and to address a response to an email on my previous blog I decided to post this challenge to a...

Here we go again with the 'Breach of the Week' ... This time it is potentially larger than Target, which is the largest known...

You know what is worse than all these HUGE Credit Card breaches? The fact that it is ridiculously easy to detect! All BackOff malware use...

Proof if you were practicing the " Malware Management Framework " and reading the analysis from BlackPoS that took out Targe...

Continuing on the PoneMon study... The following figure shows where the interviewees get their information. Seriously? You ask CERT and Law...

I just read the latest Ponemon survey "Exposing the Cyber Security Cracks: A Global Perspective" and I had to laugh. The email st...

Have you ever worked with Windows logs and enabled all or a lot of auditing items and feel there are way too many events or noise? Ever enab...

Ever wanted to open up a port on your home firewall, but restrict it more than a NAT router allows with raw port 1234 to IP 1.2.3.4? Restri...

We are all too familiar with the Credit Card breaches that hit Target, Neiman Marcus, Michaels, Marriott, Holiday Inn, Sheraton, Westin,...