As the name suggests, ‘incident response’ is primarily about responding to incidents and restoring operations to normal, and hopefully there’d be some plan or strategy in place. An effective forensic readiness capability enables the collection, analysis and reporting of information related to the incident. This is where information security and digital forensics complement each other.

Is the organisation adequately prepared to forensically capture and analyse…

Windows is just so lame when it comes to handling trojan horse infection. I just cleaned out a system infected with AmmyAdmin and ZeroAccess, the AV companies still havent quite figured it out. Instead of just delete the infection why is there no report this feature whereby you find a Trojan which is siphoning money to fraudsters then have the option of submitting it for analysis so the people who proclaim to be in it for your security can dissect the back-door and then arrest the arsehole…

Reaver is a WPA attack tool developed by Tactical Network Solutions that exploits a protocol design flaw in WiFi Protected Setup (WPS).

This vulnerability exposes a side-channel attack against Wi-Fi Protected Access (WPA) both versions 1 and 2 allowing the extraction of the Pre-Shared Key (PSK) used to secure the network.

With a well-chosen PSK, the WPA and WPA2 security protocols are incorrectly assumed to be secure by a majority of the 802.11 security community.

WPS…

By some weird coincidence, a few days after Matthew MacDonald Wallace's talk at unified.diff on change management, I found myself actually dealing with an update gone wrong.



My hosting provider does a pretty good job in keeping things updated regularly, and I get decent results when performing the occasional vulnerability scan against the server, so it's quite safe against the average script kiddy using Metasploit. The hosting provider also…

Extra credit points if you can name the movie that this references.

27b/6