Vermont State Employees Credit Union (VSECU) Data Breach
80,000 Social Security numbers and personal financial information for members of the Vermont State Employees Credit Union have been lost in a security breach.
Category: Policies
3 Reasons Assigning Permissions Based on Computer is Bad
Something that frequently confuses many of our clients is the concept of a user versus that of a computer.
Still Think You Want Those Admin Rights Over Your PC? Think Again.
In case you missed a previous post or two on the topic of why end users should not have administrative rights over their PCs, BeyondTrust has released a very compelling report on this issue.
Password Quiz
This month’s SANS Ouch! (Vol.7 No. 2) newsletter asks the question “What is your Password IQ?”
ABA Recommends Dedicated PC for Online Banking
Earlier this month the American Bankers Association (ABA) has issued practical, simple advice which could dramatically enhance everyone’s online banking security. And, I predict, it won’t make any difference because people are unlikely to do it.
What the Google/China Hack Means to You
Trusting Google does not just mean “trusting that Google won’t do anything evil with my data.” It also means “trusting Google will never make a mistake which accidentally opens my data up to anyone else.”
Bank Sued for Losses Due to Alleged Weak Security
In a previous post, I wrote how small businesses are being scammed by European cyber-hackers. In a related story, Computerworld reports how Pacto Construction Co. in Portland, ME is suing Ocean Bank of Delaware because the company lost hundreds of thousands of dollars due to allegedly weak security on the part of Ocean’s online banking […]
Further Evidence That Personal Internet Use Should Be Restricted at Work
This week’s Data Security Podcast had two items that really piqued my interest. The first was an article about an Ohio hospital which suffered data loss due to a malware infection. The malware was sent by the boyfriend of a hospital worker. Apparently he intended to follow his girlfriend’s movements on the Internet on her […]
Using Microsoft Outlook to Access Other Users’ Mailboxes
If you have a Microsoft Exchange server at your business, Microsoft Outlook has the ability to access more than one mailbox at a time. This is a useful feature if multiple users need to share access to the same email address, or if someone needs to cover another person’s email (when an auto-responder won’t suffice) […]