Deadline for Irish Cyber-Crime Survey Extended

The deadline for the Irish Cyber Crime Survey has been extended until May 28th.  If you are based in Ireland and have responsibility for information security in your organisation and you have not yet completed the survey then do so now.  This survey is one of the most valuable pieces of information we as Irish information […]

NIST Issues Draft Guidance for Securing Servers

NIST, the US National Institute of Standards and Technology, have released a draft version of their Special Publication 800-123 “Guide to General Server Security” for comments.  The document provides guidance to those wishing to ensure their servers are secure. NIST provide an invaluable range of guidance documents to help you secure your network infrastructure and […]

Internet Threat Level Increases

The SANS Internet Storm Center has raised its Infocon status to yellow.  The yellow status indicates that the ISC is “currently tracking a significant new threat. The impact is either unknown or expected to be minor to the infrastructure. However, local impact could be significant. Users are advised to take immediate specific action to contain the […]

Microsoft Windows XP Service Pack 3 Now Available

Microsoft has released the latest service pack for Windows XP.  Service Pack 3 includes all the updates and hot-fixes released since Service Pack 2 and also a number of new security features. most notably; “Black Hole” Router Detection, whereby Windows XP will now by default detect routers that silently discarding packets. Network Access Protection (NAP) […]

"Security Economics and the Internal Market" – Call for Comments

ENISA has extended the deadline for comments on the report “Security Economics and the Internal Market” until May 30th.  The paper is the work of Prof. Ross Anderson, Rainer Böhme, Richard Clayton and Tyler Moore (University of Cambridge, UK).  The report and guiding questions for comments can be downloaded from ENISA‘s website here. 

Irish Times Interviews me

Wednesday’s edition of the Irish Times contains a follow up story to the recent data loss in Bank of Ireland.  I was asked for my thoughts and opinions on what happened and whether or not encryption would have prevented the loss.  Those of you who know me and regularly read my Blog know that I […]

Computer Thefts Expose Bank of Ireland Customers' Data

RTE News tonight reported that Bank of Ireland has admitted to having four laptops stolen some time last year resulting in the personal data of 10,000 of the bank’s customers being exposed.  The laptops were stolen from the bank’s Life Assurance division.  It is reported that one laptop was stolen from an employee’s car. The data included […]

Upcoming IISF Event

Venue:      The Morgan Hotel, Temple Bar. Date & Time:  Wednesday April 9th 2008 at 6.30pm The next IISF meeting is scheduled for Wednesday April the 9th at 18:30.  The topic for this event is “Preventing and Detecting Employees and Contractors from Stealing Corporate Data” and will be presented by Dr. Eric Cole from the SANS […]

Community Night at SANS Dublin 2008

This coming Thursday, the 10th of April, the SANS Community night will start at 6.00pm and is part of SANS Dublin 2008.  This is a great opportunity to meet Irish and international information security professionals in a relaxed and friendly environment. The event will take place at the Red Cow Moran Hotel, Red Cow Complex, Naas Road […]

Hacking for Non-Techies

“Hi I’m Johnny and I hack stuff” is how this video starts.  It features Johnny Long who is well known for the Google Hacking Database.  The video is from Defcon 15 and is an interesting insight into how much information an attacker can gather on you or your company by simply observing.  Items like stickers in […]