As noted on several discussion sites around the Internet, there seems to be a new phishing attack against Facebook users. The login page is being spoofed by several .BE and .AT domains in an attempt to steal user’s credentials. Be careful signing in to Facebook for a few days…make sure everything looks correct and your browser is showing you the real Facebook login page.
Phishing on Facebook
May 25th, 2009 | Posted by Brett Edgar in Malware | Social networks - (0 Comments)Facebook is the new King of Social Networking
June 23rd, 2008 | Posted by Brett Edgar in Give me more Internets! | Social networks - (0 Comments)According to PC Pro[pcpro.co.uk], Facebook is now larger than MySpace. Thank goodness. MySpace was the worst assault on the eyes since the short striped shorts of the early 80′s. Facebook at least has a somewhat consistent interface from profile to profile, and none of those god-awful tiled backgrounds of kitty cats or what have you.
Still, Facebook is beginning to get cluttered and annoying thanks to the proliferation of extensions with their constant annoying questions. For the last time, I do NOT WANT TO PLAY RISK VIA FACEBOOK!!! Get a life, buy the board game, gather up some friends, and freaking talk to another person tête-à-tête!!
Brett Edgar
Brett is a Founder and the Director of Managed Security Services at TRUE. He has been working in the system and network forensics field since graduating from the University of Tulsa with a B.S. Computer Science in 2003. He speaks hexadecimal fluently and is TRUE's resident human Ethernet transceiver. He holds CISSP, CSSLP, and CNSS 4011-4015 certificates, loves MLB and NCAA Football, and when he gets tired of hexadecimal, he goes home to hang out with his wife and kid.
Beware: the Millenials are coming!
March 18th, 2008 | Posted by Brett Edgar in Give me more Internets! | Security | Social networks - (0 Comments)Slashdot has posted an item[slashdot.org] about the upcoming results of a survey by Symantec and Applied Research-West describing the threat to IT from the so-called ‘Millenials’ generation–those born after 1980. The IT threat apparently comes from the willingness of this young crowd to connect almost any device or social networking software to the corporate network. There is a positive in the report: Millenials are more likely to be aware of the security implications of what they are installing or connecting.
Whew…for a second there I thought my generation was going to be banned from working! It’s not like that would make that many of us angry…just don’t take away our Internets!!! You don’t want us to get angry!
Brett Edgar
Brett is a Founder and the Director of Managed Security Services at TRUE. He has been working in the system and network forensics field since graduating from the University of Tulsa with a B.S. Computer Science in 2003. He speaks hexadecimal fluently and is TRUE's resident human Ethernet transceiver. He holds CISSP, CSSLP, and CNSS 4011-4015 certificates, loves MLB and NCAA Football, and when he gets tired of hexadecimal, he goes home to hang out with his wife and kid.
Dangerous data
March 5th, 2008 | Posted by Dominic Schulte in privacy | Social networks | Terrorism - (0 Comments)Reuters is reporting[reuters.com] that Canadian soldiers have been ordered not to post personal information to social networking sites like MySpace[myspace.com] and Facebook[facebook.com]. The apparent motive is safety – “Al Qaeda operatives are monitoring Facebook and other social networking sites.”
Many have heard of the potential effects that sharing the wrong information online can have on our careers and social lives, but few would view death as one of those potential effects. “This may seem over dramatic … (but) the information can be used to target members for further exploitation. It also opens the door for your families and friends to become potential targets as well.”
Are these soldiers and their families really in danger or is this an exaggeration or a command with a hidden motive?
Dominic Schulte
Dominic Schulte currently serves as the Managing Director of Security Services & Consulting at TRUE, where he is responsible for the execution of a wide range of security and regulatory compliance services. Previously, Dominic worked with the National Security Agency (NSA) as a Global Network Exploitation and Vulnerability Analyst in the National Security Incident and Response Center (NSIRC). He holds CISSP, QSA and CNSS 4011-4015 certifications.
Upcoming Events
- February 23, 2012 11:30 amISACA Tulsa Chapter Meeting: Mobile Device Security
Connect with True
Archives
Blogs of Interest
Information Security Resources
- Energy/Utilities: FERC
- Energy/Utilities: NERC
- Energy/Utilities: SmartGridNews.com
- General: DATALOSSdb
- General: Information Security Forum
- General: ISO
- General: NIST
- General: Red Flags Rule
- General: SANS Critical Security Controls
- Health Care: OCR HIPAA Privacy
- Health Care: SearchHealthIT.com
- PCI: PCI Knowledgebase
- PCI: PCI Security Standards Council
- SSAE 16: American Institute of CPAs
- SSAE 16: Toolbox for IT






