Skip to main content

The WiKID Blog

Viewing posts tagged Phishing and Fraud

Single-site browser

Read Jeremiah Grossman's post about "A Single-Site Browser’s impact on XSS, CSRF, and Clickjacking".  The benefits of using a Single-Site Browser are clear: reduced risk of XSS, CSRF and Clickjacking.  So, why isn't every bank in the world and every user of SSL-VPNs not deploying single-site browsers?

Fraudsters defeat poor risk management, not two-factor authentication

SC Magazine's Australian edition recently published an article entitled $45k stolen in phone porting scam. This article was then rewritten on Help Net Security as "Fraudsters beat two-factor authentication, steal $45k"

More Marketing Service firms in the news

Dark Reading is reporting that Best Buy has suffered a second loss of customer data - e-mail addresses - through another vendor (not Epsilon).  

PCI news & updates

According to this article on InformationWeek:

A world without static passwords

I wanted to quickly clarify my brief twitter rant about SMS authentication.  This was all started by Chris Wysopal's tweet about Zeus's new mobile MiTM attacks and that "phones are not secure enough for 2 factor".  Zeus is now targeting the text messages that banks are using for authenticating transactions.

Recent Posts

Archive

2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom