Skip to main content

The WiKID Blog

Viewing posts tagged Phishing and Fraud

Single-site browser

Posted by: admin 13 years, 1 month ago

Read Jeremiah Grossman's post about "A Single-Site Browser’s impact on XSS, CSRF, and Clickjacking".  The benefits of using a Single-Site Browser are clear: reduced risk of XSS, CSRF and Clickjacking.  So, why isn't every bank in the world and every user of SSL-VPNs not deploying single-site browsers?

read more / 0 comments

Fraudsters defeat poor risk management, not two-factor authentication

Posted by: admin 13 years, 3 months ago

SC Magazine's Australian edition recently published an article entitled $45k stolen in phone porting scam. This article was then rewritten on Help Net Security as "Fraudsters beat two-factor authentication, steal $45k"

read more / 0 comments

More Marketing Service firms in the news

Posted by: admin 13 years, 10 months ago

Dark Reading is reporting that Best Buy has suffered a second loss of customer data - e-mail addresses - through another vendor (not Epsilon).  

read more / 0 comments

PCI news & updates

Posted by: admin 13 years, 11 months ago

According to this article on InformationWeek:

read more / 0 comments

A world without static passwords

Posted by: admin 14 years, 5 months ago

I wanted to quickly clarify my brief twitter rant about SMS authentication.  This was all started by Chris Wysopal's tweet about Zeus's new mobile MiTM attacks and that "phones are not secure enough for 2 factor".  Zeus is now targeting the text messages that banks are using for authenticating transactions.

read more / 0 comments

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom