Security Now Blog: Addressing Today's Information Security Issues

Signature Based AntiVirus Technologies vs Malware Detection with a Coin Toss

Friday, August 22nd, 2008

We need a fresh start in endpoint security. Recently tested legacy AntiVirus products detected 30% of malware, which is less accurate than the 50% one might get from tossing a coin to decide if something is malware. (more…)

With ActiveX Conveniences Come Security Risks

Friday, August 1st, 2008

Search the national vulnerability database (http://nvd.nist.gov/nvd.cfm) for medium and high severity vulnerabilities involving “ActiveX”. You would find dozens of examples in 2008 alone that could enable a hacker to “own” one or more endpoints in your organization. Hackers can use these to steal information from your PCs, infect others, and steal data from whatever servers those PCs interact with. Good news: you can do something about it!
(more…)