POODLE SSL Bug Scanner
As you may have noticed, there’s been widespread attention on this new POODLE SSL attack (CVE-2014-3566) that lets attackers spy on your traffic to any website that is vulnerable. As a public service,...
View ArticleUsing PowerShell to Combat CryptoLocker
On the Varonis blog, we recently wrote about how CryptoLocker—the malware that encrypts your local files and holds them for a Bitcoin ransom—has better marketing than many companies. However, we...
View ArticleMiscommunication as a Cybersecurity Threat
There was a great interview in WSJ this weekend with Blackstone’s CISO Jay Leek. They asked Mr. Leek a question that I love asking people in high-level security roles: WSJ: What most worries you?...
View ArticlePoS Malware Mitigation Advice from the Pros
There’s still much we don’t know about the attacks that targeted retailers’ PoS systems over the last year. We do know for certain that Backoff, BlackPos, and its variants were used as the RAM scraping...
View ArticleSix Authentication Experts You Should Follow on Twitter
Our recent ebook shows what’s wrong with current password-based authentication technology. Luckily, there are a few leading experts that are shaping the future of the post-password world. Here are six...
View ArticleCorporate Data: A Protected Asset or a Ticking Time Bomb?
How many days pass between big, publicized security breaches now? Not many. You’ve probably been worried about the state of data security, but you’re going to be surprised at just how out of control...
View ArticlePrivacy Predictions 2025!
After posting our IT predictions for next year, we decided to assign ourselves an even more challenging task. Using recent headlines from the tech press as a baseline, we tried to extrapolate ahead to...
View Article99.99% Report Brakes Slowing Down Their Car
(.01% were moving too quickly to comment.) “The whole point of a car is so I can get where I’m going quickly. I just can’t understand why they put the brake pedal right next to the accelerator. And the...
View ArticleThey get it! Here are three organizations that understand privacy…
If we need any more evidence that insiders have WAY too much access to user data, click on over to BuzzFeed’s report on the internal security policy of 29 tech companies. The BuzzFeed writers directly...
View ArticleHow to Detect and Clean CryptoLocker Infections
CryptoLocker is by now a well known piece of malware that can be especially damaging for any data-driven organization. Once the code has been executed, it encrypts files on desktops and network shares...
View ArticleWindows 10’s Security Reboot, Part I: Authentication
There’s incredible excitement about the Windows 10 release. If you completely quantum leap over Windows 9, you’d expect big things. In December, I was talking with NYU-Poly’s Professor Justin Cappos....
View ArticleWindows 10’s Security Reboot, Part II: More on Authentication
A good part of Windows 10’s security improvements center on basic changes to the way users and software prove their identities. No, that wasn’t a mistake in the last sentence. Software, like, people,...
View ArticleFree Ways to Learn about IT Security
Technology startups have built a name for themselves, and the Labor Department slots tech jobs among the fastest growing this decade.1 New graduates, tech enthusiasts, and many others are working...
View ArticleShould you get Cyber Insurance?
The latest string of data breaches has damaged reputations, spurring demand for cyber liability coverage. More specifically, recent findings by industry analysts report that spending on cyber liability...
View ArticleThe ‘Varonis Track’ at RSA Conference 2015
What do Doris Kearns Goodwin, Diana Nyad, and Alec Baldwin have in common? No, they weren’t all past guests on Stephen Colbert, but they will be speaking at this year’s upcoming RSA Conference! The...
View ArticleHow to Create a Good Security Policy
CIOs have taken note of the nightmarish scenarios data breaches can bring – remember Sony and Target? To combat this ticking time bomb, they’ve beefed up their security budgets. The Computer Emergency...
View ArticleThe Metadata Era Data Analysis Contest
Courtesy of Dato’s co-founder Danny Bickson, we’ve come into possession of a three tickets for the Data Science Summit & Dato Conference being held in San Francisco July 20 -21. Thanks Danny!...
View ArticleLet’s Go to the RSA Videos!
For your viewing pleasure, the RSA folks have generously released the video recordings of most of the presentations from last month’s conference. So I bought popcorn, got an aisle seat, and spent an...
View ArticleAnnouncing DatAdvantage for Microsoft Office 365
We’re excited to announce the beta release of DatAdvantage for Microsoft Office 365 – with permissions visibility for Microsoft Exchange Online, SharePoint Online, OneDrive, and visibility into Active...
View Article‘Varonis Track’ at InfoSecurity Europe
This is getting to be a regular feature. Another conference, and another request from our readers to put together a Varonis Track. The conference this time is InfoSecurity Europe, which will touchdown...
View Article