WindowSecurity.com blogs RSS

Welcome to our Network Security blogs. The blogs are updated on a regular basis with the latest news, information and insider gossip within the network security world and security related fields, such as cryptography.

Deb Shinder's Blog - FEATURED RSS

Deb Shinder is MS SECURITY. An Enterprise Security MVP, she has the “inside story” on all topics related to securing Microsoft networks, from the server all the way down to the network-connected smart phone. Her blog will address Microsoft’s security products and technologies including those built into the operating system (access controls and permissions, EFS, BitLocker, etc.), network security technologies (Active Directory, IPsec, DirectAccess, etc.) and separate security products (ISA Server/TMG, IAG, ILM and the Forefront family of client and server security products and services). This blog focuses on how network administrators and network security specialists can create a multi-layered security strategy, develop sound security policies, and build a strong line of defense around the network to prevent both internal and external attack.

Visit Deb Shinder's Blog

Latest Windows Security blog posts

Cybersecurity bill passed by House
Date - Feb 5th, 2010
Author - Debra Shinder
Here’s good news for you if you’re a cybersecurity guru or aspire to be one. The U.S. House of Representatives recently passed a piece of legislation, the Cybersecurity Enhancement Act of 2009 (HR 4061) that will shovel millions of dollars in funding into the National Science Foundation (NSF) for the purpose of developing cybersecurity programs, constructing cybersecurity research facilities and offering scholarships and training programs in cybersecurity at colleges and universities. more...
Over half a million web sites infected
Date - Feb 5th, 2010
Author - Debra Shinder
Safe surfing is getting harder to do and if your users access the Internet with a web browser, they could be putting their machines and the entire network at risk. During the fourth quarter of 2009, a malware analysis tool made by Dasient found that over 560,000 web sites were “infected” with malicious code. More bad news: the attacks are becoming more efficient, more sophisticated and more difficult to detect. more...
iPhones on your corporate network: How secure?
Date - Feb 5th, 2010
Author - Debra Shinder
Apple has touted the iPhone’s “sandboxing” technology that is supposed to prevent iPhone apps from accessing operating system resources – but security expert Nicolas Seriot says the permissions that are set in the deny/allow rules are way too loose and some apps may be able to access data from other apps, including contacts, email addresses and phone numbers. The iPhone is immensely popular and many businesses are now allowing them to access the corporate network. more...
Don’t hang out the “Phishing Gone” sign just yet
Date - Jan 30th, 2010
Author - Debra Shinder
What with all the anti-phishing technologies built into the latest versions of popular web browsers, some folks might have thought the phishing threat was over. Unfortunately, it’s not that easy. The Anti-Phishing Working Group (APWG), an organization that tracks and analyzes online phishing attacks, recently released their Phishing Activity Trends Report for the third quarter of 2009, and the news isn’t good. The numbers are up, with August setting new records. more...
Good news for IT security pros: Forrester says network security spending will rise in 2010
Date - Jan 29th, 2010
Author - Debra Shinder
A gloomy global economy put a damper on IT spending of all kinds in 2009, and businesses may be moving out of it slowly, but according to a recent report by Forrester Research, a significant portion of companies are planning to increase spending on IT security technologies in the coming year: 42 percent of enterprise-level organizations and 37 percent of small and medium-size companies. more...
Google adds security features to Chrome browser
Date - Jan 27th, 2010
Author - Debra Shinder
Regardless of which web browser your users use, there are bound to be security issues. That’s the nature of the beast. Amidst all the hoopla about an IE exploit being used in the December attacks on Google and other companies, Google itself has obviously recognized that its own browser needed some beefing up in the security department, too. more...
Microsoft COFEE and other forensics tools targeted
Date - Jan 24th, 2010
Author - Debra Shinder
Last November, the code for Microsoft’s Microsoft’s COFEE (Computer Online Forensic Evidence Extractor) forensics tool was leaked to the Internet. COFEE is distributed free to law enforcement agencies all over the world and used to gather digital evidence from computers that are seized in connection with criminal activity. more...
Facebook security bug on AT&T mobile network
Date - Jan 22nd, 2010
Author - Debra Shinder
Do you use social networking sites? Is one of them Facebook? Do you log onto your Facebook page from your mobile phone? Is your cell phone provider AT&T?  Recently a “glitch” was discovered whereby a woman in Georgia signed on to what she thought was her account, only to see a group of “friends” she’d never heard of. more...
Jesper Johansson: How Delegation Privileges are Represented in AD
Date - Jan 22nd, 2010
Author - Debra Shinder
Have you ever wondered about the delegation flags in Active Directory, and how you can use them to determine which accounts are trusted for full delegation? That’s not real clear from some of the Microsoft documentation, but Microsoft security MVP Jesper Johannson, who is also author of the Windows Server 2008 Security Resource Kit, explained it in a blog post back in October, in a way that’s clear and easy to understand. Now you can find out how those flags are set and what they really mean. more...
Why you should implement password policy enforcement
Date - Jan 22nd, 2010
Author - Debra Shinder
It’s common sense: strong passwords (those that contain a larger number of characters made up of a combination of upper and lower case letters, numbers and symbols) are harder to crack than short, simple or common ones. Surely you can count on the users on your network to understand that and set their passwords accordingly, right? Maybe not. Imperva Inc. more...

Archived Blogs


Receive all the latest articles by email!

Receive Real-Time & Monthly WindowSecurity.com article updates in your mailbox. Enter your email below!
Click for Real-Time sample & Monthly sample

Become a WindowSecurity.com member!

Discuss your security issues with thousands of other network security experts. Click here to join!

Community Area

Log in | Register

Solution Center

Follow TechGenix on Twitter