Cybertage

Prev Next

I called this presentation ‘PrivateIy Invasive, Publically Devastating’ for a reason. It’s true – Spear Phishing can be personally humiliating (career-ending), feel like a violation and yet is much more...

My Spear Phishing Webinar presentation is now available

I called this presentation ‘PrivateIy Invasive, Publically Devastating’ for a reason. It’s true – Spear Phishing can be personally humiliating (career-ending), feel like a violation and yet is much more…

The article came out quicker than I expected. I thought it would be more geared to APTs and even criminal online gang activity, but it turned out to be more...

I was interviewed for eWeek and CIO Insights: Industrial Systems Still Lack Firewalls, Authentication, Basic Security

The article came out quicker than I expected. I thought it would be more geared to APTs and even criminal online gang activity, but it turned out to be more…

My December topic is one that lots of folks are most likely firing up right now – the traditional Christmas season “Top ‘X’ Issues for the coming year”. In...

My Webinar presentation ‘Top 5 Security Issues for 2012′ is available

My December topic is one that lots of folks are most likely firing up right now – the traditional Christmas season “Top ‘X’ Issues for the coming year”. In…

From: http://identitypr.com/pressrelease/creative-breakthroughs/joe-schoor-joins-creative-breakthroughs-inc-as-enterprise-security-practice-lead/ TROY, Mich., August 10, 2011 – Steve Barone, President and CEO of Creative Breakthroughs, Inc. (CBI) has announced today that Joe Schorr has joined the Troy, Mich.-based company as their Enterprise Security...

“Joe Schorr Joins Creative Breakthroughs, Inc. as Enterprise Security Practice Lead”

From: http://identitypr.com/pressrelease/creative-breakthroughs/joe-schoor-joins-creative-breakthroughs-inc-as-enterprise-security-practice-lead/ TROY, Mich., August 10, 2011 – Steve Barone, President and CEO of Creative Breakthroughs, Inc. (CBI) has announced today that Joe Schorr has joined the Troy, Mich.-based company as their Enterprise Security…

Featured Stories

I called this presentation ‘PrivateIy Invasive, Publically Devastating’ for a reason. It’s true – Spear Phishing can be personally humiliating (career-ending), feel like a violation and yet is much more...

0January 11, 2012

My Spear Phishing Webinar presentation is now available

The article came out quicker than I expected. I thought it would be more geared to APTs and even criminal online gang activity, but it turned out to be more...

0December 14, 2011

I was interviewed for eWeek and CIO Insights: Industrial Systems Still Lack Firewalls, Authentication, Basic Security

My December topic is one that lots of folks are most likely firing up right now – the traditional Christmas season “Top ‘X’ Issues for the coming year”. In...

0December 11, 2011

My Webinar presentation ‘Top 5 Security Issues for 2012′ is available

From: http://identitypr.com/pressrelease/creative-breakthroughs/joe-schoor-joins-creative-breakthroughs-inc-as-enterprise-security-practice-lead/ TROY, Mich., August 10, 2011 – Steve Barone, President and CEO of Creative Breakthroughs, Inc. (CBI) has announced today that Joe Schorr has joined the Troy, Mich.-based company as their Enterprise Security...

0August 10, 2011

“Joe Schorr Joins Creative Breakthroughs, Inc. as Enterprise Security Practice Lead”

Infographic by Veracode Application Security Tweet This Post

0January 9, 2012

How Secure? An Apple iOS vs Android Infographic from Veracode

You can see my APT presentation at http://www.slideshare.net/jpschorr/apt-webinar Tweet This Post

0October 25, 2011

My Advanced Persistent Threat Webinar preso is available

You can view my latest webinar presentation at: http://www.slideshare.net/jpschorr/cbi-threat-landscape-webinar Tweet This Post

0September 28, 2011

‘The Evolving Threat Landscape’ – my webinar preso is available

550 people were at the inaugural GrrCon in Grand Rapids, MI this week. They were hoping to get 400, max 500 so this was an amazing turnout. I was on...

0September 18, 2011

Just got back from being on a Cloud Security Panel at GrrCon

Wow! DEFCON was unbelievably crowded, like Disney at Christmas crowded. 15,000 people by most estimates. I was among those who didn’t get the cool badge (only 11,000? made I think)...

0August 8, 2011

Got back from speaking at DEFCON SkyTalks

Infographic by Veracode Application Security Tweet This Post

Sony PSN Breach Infographic from Veracode

In Part 1 of this article I talked about Stuxnet being the first proven Cyberwar weapon. Part 2 discussed why ‘Stuxnetting’ was an improvement over the Kinetic War ‘send in...

Is it OK to call it Cyberwar yet? (Part 3)

A recent Social Engineering project caused me to examine some of the new (October, 2010) PCI language. In particular, there was something about Requirement 9 (Restrict physical access to cardholder data) that wasn't sitting quite right.

0February 1, 2011

PCI-DSS 2.0: Got Gaps?

One of the main factors in attributing the Stuxnet attack to a national power was the need to test the software in a similar environment. It appears that this was done at Israel's Dimona facility over two years.

http://www.foxnews.com/scitech/2011/01/16/report-israel-tested-worm-linked-iran-atom-woes/

0January 16, 2011

Israel and US tested Stuxnet

The two biggest data security stories of 2010 (and maybe all time) are the weaponization of a computer virus targeted at a nuclear plant and the massive, unprecedented theft and...

0December 2, 2010

Harry Palmer wins again: Stuxnet and Cablegate

I was pleased to collaborate with 25 other security professionals from around the world to help create the CSFI 'Stuxnet Report'.

0October 26, 2010

CSFI Stuxnet Report Released

In Part 1 of this article I talked about Stuxnet possibly being the first proven Cyberwar weapon. But now I'd like to show just why it may be a more improved method over the legendary "send in the F-16s" method that many have waited for as Iran nears its goal of joining the Nuke Club.

0October 6, 2010

Is it OK to Call It Cyberwar Yet? -Stuxnet ups the ante- (Part 2)

0October 5, 2010

SHODAN Computer Search Engine – Google for Hackers?

If you have had a PCI compliance vulnerability scan performed since Win2k support sunsetted, you will realize that your ASV is operating under a set of rules that don’t really match up with what you are being told. You will astutely figure this out because of the big ol’ can of FAIL you now have on your report.

0September 28, 2010

PCI-CAM (Clear As Mud)

The ongoing investigation into the Stuxnet Worm may just be the smoking gun that validates the term ‘ Cyberwar’ and quiets those who see it as just a conspiratorial money-grab by the military-industrial bogeyman.

0September 21, 2010

Is it OK to Call It Cyberwar Yet? -Stuxnet ups the ante- (Part 1)

Blogroll

Rss Feed Tweeter button Facebook button Technorati button Myspace button Linkedin button Digg button Flickr button