Stephen and Chey Cobb: Independent Researchers

Cybersecurity reports, blog posts, and white papers are not in short supply these days, so I thought I would help folks decide what subset ...

I read about the hacking of the California State Law Enforcement Association or CSLEA website by Anonymous "for fun and m4yh3m!"...

In the wake of the News of The World (NOTW) scandal in which "journalists" are alleged to have listened to, and sometimes erased,...

In the context of data privacy, cyber security, and risk management I once wrote: "Failure to police your employees and sub-contractors...

The negative impact of information security incidents on stock prices has been documented numerous times over the past ten years, but I thin...

Recent hacking of the CIA website brings back memories of the earliest days of eCommerce on the Web and the first wave of website hacking. ...

Today there are over a million computers in America that connect to the Internet via a satellite connection, and the number continues t...

What is Twitter spam? A whole bunch of "people" tweeting the same thing from accounts that are likely automated. These bogus accou...

Well worth paying attention, whether you are in privacy or security, in business or investing in businesses, CIPP or CISSP: Cost of a data b...

It is hard to think of anything more attractive to hackers than a widely-deployed digital payment system. And the world is now witnessing th...

There is no doubt in my mind that the new information security frontier is mobile, as in mobile phones and mobile pads/slates/tablets. More ...

Time for some perspective on Wikileaks, the cyber attacks against it, and for it, and the real informaton security story that may get lost i...

I recently came across some archival security wordage while writing a whitepaper about satellite Internet service. Because it still seems re...

"According to McAfee Avert Labs , as of Q1 2010, malicious malformed PDF files are now involved with 28% of all malware directly connec...

I think I have mentioned David Kennedy's information security updates before. I get them on FriendFeed but you can read them on Google ...

This post was supposed to contain further details of the CAFE cycle that I outlined in my previous post but no, two dumb things cropped up t...

I have written this post/article/paper because I see a pattern of human behavior, the understanding of which may have some potential to impr...

Just a quick post to point to the archived version of the Symantec MessageLabs Threat Forecast 2010 Webinar/webcast that I mentioned in my ...

Okay, so the year has already started, but how many hours have you spent pondering your information security strategy for 2010? If the answe...

Just a quick post to help folks find the recent article on network auditing on TechTarget's SearchSecurity . Think of it like this: The...

In addition to his work for a certain government agency, my brother Mike continues to find time to put out some very helpful security articl...

Large chunks of Web 2.0 are not working this morning, apparently because of one or more denial of service attacks . Users of Twitter, Facebo...

This story is curious to me. About 13 years ago I taught some banking security classes with a chap who could do this in his head. I always a...

As reported by SearchSecurity: "TJX Companies, Inc., which has undergone a barrage of lawsuits as a result of a massive data breach of ...

When they say "anyone can get a Twitter account" they mean anyone and anything can get a Twitter account, including malicious ...

Surely April 8 will be flagged as a new low in the history of American journalism. Why? The "power grid may be hacked" story, and ...

Vast Spy System Loots Computers in 103 Countries - NYTimes.com : By JOHN MARKOFF, Published: March 28, 2009 "TORONTO — A vast electroni...

Larry Seltzer at eWeek: "The other big thing that CAN-SPAM did was to set rules for businesses to follow in order to do mass-mailings....

The market for buying and selling stolen credit card numbers and access to financial accounts has reached the $276 million mark, according t...

A new phish frontier: Phishing of domain registrar accounts--Sophos Report New and expanded attempted to get personal data via domain names ...

WARNING: Enom Phishing Scam Domain Name News : "We have received several reports of phishing scam emails that at first glance appear to...