The Security Pub

Random Thoughts About Security

Smartphone Security

A reader recently wrote: I am concerned with spying on our corporate iPhones. As a policy, we don’t encourage accessing the Web, we wipe the memory, we use PINs to authenticate, and we make sure our users never let the devices out of their sight. Users receive and send emails via Gmail, but they typically do not use Bluetooth; the setting is turned off. Is it still possible for a third party to eavesdrop on users’ conversations, and if so, what can be done to prevent this?

Check out the entire article – [Search Security]

What do you think about mobile security in corporate environments?  Post your comments!

How Does Data Gets Out?

Most attention goes to keeping hackers out. But once they’re inside, how do they extract data from your organization? Research from Trustwave’s SpiderLabs shows the answer is often surprisingly simple.  Cyber criminals are increasingly becoming more sophisticated in their methods of attack. Often we can equate this to the methods of data exfiltration as well. Exfiltration, or exportation, of data is usually accomplished by copying the data from the system via a network channel, although removable media or physical theft can also be utilized.

Check out the full article - [CSO]