Stephen and Chey Cobb: Independent Researchers

It is hard to think of anything more attractive to hackers than a widely-deployed digital payment system. And the world is now witnessing th...

There is no doubt in my mind that the new information security frontier is mobile, as in mobile phones and mobile pads/slates/tablets. More ...

Time for some perspective on Wikileaks, the cyber attacks against it, and for it, and the real informaton security story that may get lost i...

I recently came across some archival security wordage while writing a whitepaper about satellite Internet service. Because it still seems re...

"According to McAfee Avert Labs , as of Q1 2010, malicious malformed PDF files are now involved with 28% of all malware directly connec...

I think I have mentioned David Kennedy's information security updates before. I get them on FriendFeed but you can read them on Google ...

This post was supposed to contain further details of the CAFE cycle that I outlined in my previous post but no, two dumb things cropped up t...

I have written this post/article/paper because I see a pattern of human behavior, the understanding of which may have some potential to impr...

Just a quick post to point to the archived version of the Symantec MessageLabs Threat Forecast 2010 Webinar/webcast that I mentioned in my ...

Okay, so the year has already started, but how many hours have you spent pondering your information security strategy for 2010? If the answe...

Just a quick post to help folks find the recent article on network auditing on TechTarget's SearchSecurity . Think of it like this: The...

In addition to his work for a certain government agency, my brother Mike continues to find time to put out some very helpful security articl...

Large chunks of Web 2.0 are not working this morning, apparently because of one or more denial of service attacks . Users of Twitter, Facebo...

This story is curious to me. About 13 years ago I taught some banking security classes with a chap who could do this in his head. I always a...

As reported by SearchSecurity: "TJX Companies, Inc., which has undergone a barrage of lawsuits as a result of a massive data breach of ...

When they say "anyone can get a Twitter account" they mean anyone and anything can get a Twitter account, including malicious ...

Surely April 8 will be flagged as a new low in the history of American journalism. Why? The "power grid may be hacked" story, and ...

Vast Spy System Loots Computers in 103 Countries - NYTimes.com : By JOHN MARKOFF, Published: March 28, 2009 "TORONTO — A vast electroni...

Larry Seltzer at eWeek: "The other big thing that CAN-SPAM did was to set rules for businesses to follow in order to do mass-mailings....

The market for buying and selling stolen credit card numbers and access to financial accounts has reached the $276 million mark, according t...

A new phish frontier: Phishing of domain registrar accounts--Sophos Report New and expanded attempted to get personal data via domain names ...

WARNING: Enom Phishing Scam Domain Name News : "We have received several reports of phishing scam emails that at first glance appear to...

Ten years ago I started to alert my clients to the emergence of privacy as the new "driver" of data security. Eight years ago I s...

The outbreak of spam that pretends to be a news alert from CNN has now morphed into "BREAKING NEWS" from MSNBC, like this message ...

I have received a handful of these in the past few days, messages that look like they could be a CNN news alert that I had signed up for, ex...

My brother, Mike, has been busy this week, responding to questions about the latest Ponemom Institute survey, which suggests a heck of a lot...

If this wasn't in the Washington Post I would think it was a hoax: Travelers' Laptops May Be Detained At Border . More than anything...

There won't be any new posts here for a while, but you can catch the latest news and views at Cobbsblog.com .

Interesting study indicates banks cannot substitute a virtual presence for local branches and a commitment to community. Nearly three-quart...

I found a handy set of pages by a Victor Ng titled What SMBs Need to Know About Computer Security Threats in a publication called SMBedge ...

Here is a pretty good reason to make sure your company is doing a good job of protecting customer data: TJX: Data breach damage $25 million ...