<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" version="2.0">

<channel>
	<title>Norman Blog » Security Exposed</title>
	
	<link>http://blogs.norman.com</link>
	<description>The place to get insights, opinions and information from the Norman team.</description>
	<lastBuildDate>Wed, 16 May 2012 14:37:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/norman/security_exposed" /><feedburner:info xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" uri="norman/security_exposed" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><item>
		<title>Understanding Hacker Strategies – Part 2</title>
		<link>http://blogs.norman.com/2012/uncategorized/understanding-hacker-strategies-part-2</link>
		<comments>http://blogs.norman.com/2012/uncategorized/understanding-hacker-strategies-part-2#comments</comments>
		<pubDate>Mon, 14 May 2012 19:37:39 +0000</pubDate>
		<dc:creator>Darin Andersen</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Antivirus]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[Social Engineering]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2743</guid>
		<description><![CDATA[Many security teams think that if they have a couple of firewalls, an IPS and antivirus software implemented, they’re home free.  The servers get patched, the team is alerted when network traffic behaves badly and viruses are quickly killed. Hackers know, however, there are many ways to probe, some do &#8230; <a href="http://blogs.norman.com/2012/uncategorized/understanding-hacker-strategies-part-2">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/uncategorized/understanding-hacker-strategies-part-2/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Those Pesky Passwords</title>
		<link>http://blogs.norman.com/2012/security-exposed/those-pesky-passwords</link>
		<comments>http://blogs.norman.com/2012/security-exposed/those-pesky-passwords#comments</comments>
		<pubDate>Fri, 11 May 2012 12:51:05 +0000</pubDate>
		<dc:creator>John Callahan</dc:creator>
				<category><![CDATA[Security Exposed]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2732</guid>
		<description><![CDATA[As I mentioned in a previous post, the long-ago patched Conficker worm is continuing to infect millions of new computers. Researchers have found that nearly every incident, 92 percent, is due to a single practice – poor password security. Unfortunately, the spread of Conficker is far from the only problem &#8230; <a href="http://blogs.norman.com/2012/security-exposed/those-pesky-passwords">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/those-pesky-passwords/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Understanding Hacker Strategies</title>
		<link>http://blogs.norman.com/2012/security-exposed/understanding-hacker-strategies</link>
		<comments>http://blogs.norman.com/2012/security-exposed/understanding-hacker-strategies#comments</comments>
		<pubDate>Mon, 07 May 2012 12:37:31 +0000</pubDate>
		<dc:creator>Darin Andersen</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[endpoint protection]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[network protection]]></category>
		<category><![CDATA[patch and remediation]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2689</guid>
		<description><![CDATA[I’m always amazed at how easy it can be to obtain company information.  SearchSecurity has an excellent series to help us better understand hacker attack techniques and tactics.  Serious hackers typically perform extensive reconnaissance prior to hacking into a network.  Often, employees will make this work much easier than it &#8230; <a href="http://blogs.norman.com/2012/security-exposed/understanding-hacker-strategies">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/understanding-hacker-strategies/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Doesn’t Need to be Complicated</title>
		<link>http://blogs.norman.com/2012/security-exposed/security-doesnt-need-to-be-complicated</link>
		<comments>http://blogs.norman.com/2012/security-exposed/security-doesnt-need-to-be-complicated#comments</comments>
		<pubDate>Wed, 02 May 2012 12:55:05 +0000</pubDate>
		<dc:creator>John Callahan</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[Antivirus]]></category>
		<category><![CDATA[Cornflicker]]></category>
		<category><![CDATA[network protection]]></category>
		<category><![CDATA[patch and remediation]]></category>
		<category><![CDATA[worms]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2632</guid>
		<description><![CDATA[As hard as it is to believe, the three-year old Conficker worm, long patched, is still causing significant security problems in many businesses, according to Microsoft’s recently released bi-annual Security Intelligence Report. Conficker infections have increased 225 percent each quarter since its discovery in late 2008. Researchers report that the &#8230; <a href="http://blogs.norman.com/2012/security-exposed/security-doesnt-need-to-be-complicated">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/security-doesnt-need-to-be-complicated/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Significant SCADA Breaches Are Not Inevitable</title>
		<link>http://blogs.norman.com/2012/security-exposed/significant-scada-breaches-are-not-inevitable</link>
		<comments>http://blogs.norman.com/2012/security-exposed/significant-scada-breaches-are-not-inevitable#comments</comments>
		<pubDate>Fri, 27 Apr 2012 12:19:58 +0000</pubDate>
		<dc:creator>Darin Andersen</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[critical infrastructure]]></category>
		<category><![CDATA[RSA]]></category>
		<category><![CDATA[SCADA]]></category>
		<category><![CDATA[security breaches]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2594</guid>
		<description><![CDATA[I was struck by one of the surveys that emerged from RSA.  When asked about the likelihood of a significant SCADA breach in 2012, 48 percent replied, “yes.”  Patrick Miller, the Founder, CEO and President of EnergySec, and principal investigator for NESCO, a DOE- funded partnership focused on enhancing cybersecurity &#8230; <a href="http://blogs.norman.com/2012/security-exposed/significant-scada-breaches-are-not-inevitable">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/significant-scada-breaches-are-not-inevitable/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Unfriending Social Media Security Threats</title>
		<link>http://blogs.norman.com/2012/security-exposed/unfriending-social-media-security-threats-2</link>
		<comments>http://blogs.norman.com/2012/security-exposed/unfriending-social-media-security-threats-2#comments</comments>
		<pubDate>Tue, 24 Apr 2012 15:26:47 +0000</pubDate>
		<dc:creator>John Callahan</dc:creator>
				<category><![CDATA[Security Exposed]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2589</guid>
		<description><![CDATA[Social media has transcended its origins as a tool for personal networking and social diversion; its use is now pervasive at work as well. While many individuals actively use social media at work, increasingly businesses leverage social media to increase brand awareness, share information and better understand consumer sentiment. The &#8230; <a href="http://blogs.norman.com/2012/security-exposed/unfriending-social-media-security-threats-2">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/unfriending-social-media-security-threats-2/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using a VPN Doesn’t Mean Your Information Is Safe When You Travel</title>
		<link>http://blogs.norman.com/2012/security-exposed/using-a-vpn-doesnt-mean-your-information-is-safe-when-you-travel</link>
		<comments>http://blogs.norman.com/2012/security-exposed/using-a-vpn-doesnt-mean-your-information-is-safe-when-you-travel#comments</comments>
		<pubDate>Wed, 18 Apr 2012 19:50:54 +0000</pubDate>
		<dc:creator>Darin Andersen</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[security breaches]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2565</guid>
		<description><![CDATA[In another twist that demonstrates the ingenuity of hackers, iBahn, a broadband service provider to hotels such as Marriott, has suffered cyberattacks that potentially expose millions of emails and other confidential information.  A recent article in Bloomberg BusinessWeek provides details. By breaking into iBahn, hackers can use traveling employees as &#8230; <a href="http://blogs.norman.com/2012/security-exposed/using-a-vpn-doesnt-mean-your-information-is-safe-when-you-travel">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/using-a-vpn-doesnt-mean-your-information-is-safe-when-you-travel/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>April 2012 Patch Tuesday Addresses Critical Issues in Popular Microsoft Products</title>
		<link>http://blogs.norman.com/2012/security-exposed/april-2012-patch-tuesday-addresses-critical-issues-in-popular-microsoft-products</link>
		<comments>http://blogs.norman.com/2012/security-exposed/april-2012-patch-tuesday-addresses-critical-issues-in-popular-microsoft-products#comments</comments>
		<pubDate>Wed, 18 Apr 2012 19:03:31 +0000</pubDate>
		<dc:creator>John Callahan</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[enterprise security]]></category>
		<category><![CDATA[Patch Tuesday]]></category>
		<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[Vulnerabilities / Exploits]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2560</guid>
		<description><![CDATA[Right on schedule, Microsoft has released its monthly batch of security updates. The April update includes six bulletins, four of which Microsoft categorizes as critical. Microsoft rates the remaining two bulletins as important. In total, the six bulletins resolve eleven vulnerabilities in Windows, Internet Explorer, .Net Framework, Office, SQL Server &#8230; <a href="http://blogs.norman.com/2012/security-exposed/april-2012-patch-tuesday-addresses-critical-issues-in-popular-microsoft-products">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/april-2012-patch-tuesday-addresses-critical-issues-in-popular-microsoft-products/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Many Mid-Size European Businesses Face Security Challenges</title>
		<link>http://blogs.norman.com/2012/security-exposed/many-mid-size-european-businesses-face-security-challenges</link>
		<comments>http://blogs.norman.com/2012/security-exposed/many-mid-size-european-businesses-face-security-challenges#comments</comments>
		<pubDate>Mon, 16 Apr 2012 14:31:53 +0000</pubDate>
		<dc:creator>John Callahan</dc:creator>
				<category><![CDATA[Security Exposed]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2540</guid>
		<description><![CDATA[Mid-Sized European Businesses Not Meeting the Challenge of Data Security Many mid-sized businesses may believe that they are too small for attackers to target, but this assumption is far from valid. Any organization that stores information &#8211; whether it’s customer records, product data or trade secrets &#8211; are at risk &#8230; <a href="http://blogs.norman.com/2012/security-exposed/many-mid-size-european-businesses-face-security-challenges">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/many-mid-size-european-businesses-face-security-challenges/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>It’s Time to Focus on Prevention versus Disclosure</title>
		<link>http://blogs.norman.com/2012/security-exposed/its-time-to-focus-on-prevention-versus-disclosure</link>
		<comments>http://blogs.norman.com/2012/security-exposed/its-time-to-focus-on-prevention-versus-disclosure#comments</comments>
		<pubDate>Tue, 10 Apr 2012 14:25:58 +0000</pubDate>
		<dc:creator>Darin Andersen</dc:creator>
				<category><![CDATA[Security Exposed]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[security strategy]]></category>

		<guid isPermaLink="false">http://blogs.norman.com/?p=2519</guid>
		<description><![CDATA[The Global Payments security breach has rapidly fallen out of the news and that’s too bad.  On last report, Visa had dropped the company as a payment processor and the final tally of accounts that may have been breached topped 1.5 million. But the bigger and ongoing question is, what &#8230; <a href="http://blogs.norman.com/2012/security-exposed/its-time-to-focus-on-prevention-versus-disclosure">Read More</a>]]></description>
		<wfw:commentRss>http://blogs.norman.com/2012/security-exposed/its-time-to-focus-on-prevention-versus-disclosure/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss><!-- Dynamic page generated in 0.438 seconds. --><!-- Cached page generated by WP-Super-Cache on 2012-05-16 16:38:05 -->

