Archive
Verizon Business 2009 Data Breach Investigations Report
Earlier this week, Verizon Business released their 2009 Data Breach Investigations Report (DBIR). This report details 90 confirmed breaches involving the compromise of 285 million records. The report shows that of these beaches, 74 percent were from external sources. The vast majority of these breaches were caused by mistakes, including poor access controls, default credentials, and SQL injection. 83 percent of the attacks were not considered difficult, and an astounding 87 percent were considered avoidable through simple or intermediate controls. Simply astounding…
Security Update for Microsoft ISA Server 2006 and Forefront Threat Management Gateway (MS09-016)
Microsoft today announced the availability of a security update for Microsoft ISA Server 2006 and Forefront Threat Management Gateway. This update addresses two vulnerabilities; Web Proxy TCP State Limited Denial of Service Vulnerability [CVE-2009-0077] and a Cross-Site Scripting Vulnerability [CVE-2009-0237]. Please refer to Microsoft Knowledge Base Article 961759 for more information.
RSA Conference 2009
If you are planning to attend the 2009 RSA Conference next week (April 21-23, 2009), be sure to stop by the Celestix booth and introduce yourself! We’ll be in booth #248 this year. If you are interested in attending the expo, send me an e-mail and I will provide you with a free expo pass! Hope to see all of you there!
Connect
Richard Hicks' Forefront TMG Blog 