Entries from 2014-08-08 to 1 day

TweetDeck — Just another hack or a missed opportunity to tighten cloud security?

The recent TweetDeck hack on Twitter presents a common cloud dilemma for information security teams. On the one hand, the BYOX trends that drive cloud service adoption and worker self-enablement are transforming traditional IT into a User-…

100,000 Tweets in 1 Day – How One Company Discovered a Security Breach using Big Data Analytics

As the recent breach involving millions of Target customer credit cards illustrates, security breaches leave a pattern of activity that is mathematically unusual. As cyber criminals increasingly use the cloud as an attack vector, these att…

24 Hours After Heartbleed, 368 Cloud Providers Still Vulnerable

Over the past weeks, security teams across country have been grappling with end of life for Windows XP, which is still running on 3 out of 10 computers. That issue has been completely overshadowed with news of the Heartbleed vulnerability …

The Consumerization of IT, BYOC, and the (New) Role of IT

It has been a decade since Nicolas Carr published his controversial essay “IT Doesn’t Matter” in the Harvard Business Review. Back then, he claimed that companies weren’t really getting a competitive advantage from the technology advances …

Prevent the Loss of IP through Code Sharing Sites

Everybody has IP in their code nowCoding is not just for software companies anymore. Companies in every industry – financial services, transportation, media, manufacturing, healthcare – all rely heavily on developers to create internal sof…

Don’t neglect Data Loss Prevention (DLP) for the cloud

There was a time when data loss prevention (DLP) efforts were focused on storage devices, email, and printing. However, now that you can take your device with you, in the form of a laptop or mobile phone, a lot more attention has been focu…

The Great Russian Hacker Heist & the “Shadow ID” Problem it Exposed

On Monday the world learned that a small crew of Russian hackers stole 1.2 billion internet passwords. Before digging into what this means to your enterprise’s information security posture, I must first commend Nicole Perloth and David Gel…