Security
How two-factor authentication stopped an account takeover on DT's Messaging Portal
On 23 October, an attacker exploited a flaw in our password reset flow and changed the passwords on three accounts (including our own) in under an hour. They never got into a single dashboard. Here's what happened, why it didn't become a breach, and what we've changed.
Read more
Anatomy of a Fake DVLA Fine: How a Speeding-Ticket SMS Scam Works
How a fake DVLA speeding-fine SMS leads to a card-stealing website, the red flags to watch for, and how to report scams like it.
Read morevBulletin Exploit - Perhaps yet another reason why security should not be left in the hands of the "end user?"
You probably already heard/read about attacks compromising websites using a "security weakness in sites powered by the forum vBulletin." In case you missed it, there's a really good post about this on Brian Krebs' websi…
Read morevBulletin Vulnerability and Malware Exploit
VBulletin is a publishing suite that allows users create and publish a variety of content, including: forums, blogs, and polls. If you currently use an older version of this application on your website, you might be ope…
Read moreWordpress 3.5.2 Maintenance and Security Release
Wordpress, yesterday, announced the release of version 3.5.2 -- a maintenance and security release that fixes several issues in the Wordpress software. This update contains fixes for seven (7) security issues: Server-si…
Read moreRunning out of disk space? How to check what is using up server space in Linux
If there is one thing you will surely be confronted with as a server administrator, it's the issue of disk space being used on on the server. Every day use of your server involves reading and writing data to different p…
Read moreGlobal Brute Force attack on Wordpress Web sites
Reports are making the rounds of an automated, highly distributed attack on Wordpress installations across the globe. From all indications, the attack is (very) well organized and completely distributed; over 90,000 IP …
Read moreProtecting your Organization against "Acts of God"
Several factors conspire to threaten the security of information systems within an organization, including: deliberate attacks such as theft, sabotage, vandalism and hacking, and accidental events such as technical soft…
Read moreEmployees: the "hidden" threat
Information security professionals are taught that employees are the greatest threat to an organization's security. The argument behind this is based on the precept that because employees have inside information about a…
Read more