<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress.com" -->
<rss version="0.92">
<channel>
	<title>Where Trust is Key!</title>
	<link>http://trustcc.wordpress.com</link>
	<description>Posts primarily for Financial Institutions adressing IT security and compliance.</description>
	<lastBuildDate>Fri, 20 Nov 2009 18:36:19 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Combatting Scareware</title>
		<description><![CDATA[TrustCC helps banks and credit unions navigate many kinds of IT threats. One of the most interesting threat vectors in recent years is "Scareware," a pop-up window that displays a warning stating a victim machine is infected with some sort of virus or spyware, even though it is not.

Such programs are extremely widespread and are increasingly used by cybercriminals. <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=214&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/11/20/combatting-scareware/</link>
			</item>
	<item>
		<title>You&#8217;d Think a Security Product Would Make You More Secure!</title>
		<description><![CDATA[This week we hacked a bank using an exploit that takes advantage of a vulnerability in Symantec's Enterprise Anti-Virus Product (nerds say SYM09-007)...<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=210&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/10/29/youd-think-a-security-product-would-make-you-more-secure/</link>
			</item>
	<item>
		<title>Did I mention Banner Ads can deliver a malicious payload?</title>
		<description><![CDATA[Banner Ads are an attack method used by attackers to load malicious programs on the unsuspecting user's computer...<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=204&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/10/28/did-i-mention-banner-ads-can-deliver-a-malicious-payload/</link>
			</item>
	<item>
		<title>Cyber Criminals Targeting SMBs</title>
		<description><![CDATA[A recent trend of cyber attacks on small and mid-size US firms is netting big profits for criminals in the multi-million dollar scam.  According to a report in Tuesday’s Washington Post, SMB customers of financial institutions are infected with a virus through phishing or other malicious activities.  The virus captures logon credentials for online banking systems and transmits the credentials to the cyber-thieves.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=199&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/08/26/cyber-criminals-targeting-smbs/</link>
			</item>
	<item>
		<title>Swine Flu Part 2… Are You Prepared?</title>
		<description><![CDATA[With the second phase of the Novel A (H1N1) influenza virus (commonly known as Swine Flu) coming over the horizon, we thought it would be great timing to give a few tips and pointers for your Business Continuity pandemic event planning and process. We know that some of the ideas listed may be a little farfetched for your organization so rather than using these items as a to-do checklist, think of them as discussion topics for your next BCP planning/testing session.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=197&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/08/19/swine-flu-part-2%e2%80%a6-are-you-prepared/</link>
			</item>
	<item>
		<title>Network Enclaves – Enhanced Internal Network Segmentation</title>
		<description><![CDATA[In a larger sized organization where resources allow for greater segmentation, we recommend the use of a Network Enclave.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=194&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/08/13/network-enclaves-%e2%80%93-enhanced-internal-network-segmentation/</link>
			</item>
	<item>
		<title>Not All Security Assessment Vendors Are Equal</title>
		<description><![CDATA[When it comes to security assessments, each vendor has their own methodology for performing an analysis. Unlike TrustCC, many vendors rely solely on commercial applications or appliances that perform automated scans of systems using pre-built templates.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=190&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/08/10/not-all-security-assessment-vendors-are-equal/</link>
			</item>
	<item>
		<title>Defcon Wrap Up</title>
		<description><![CDATA[My dilemma is how to tell them (YOU) that the “hacker” world is technically advanced, internally cooperative, curiously motivated, and unimpeded by corporate “talk” of security and controls.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=188&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/08/07/defcon-wrap-up/</link>
			</item>
	<item>
		<title>Defcon 17: Day Two</title>
		<description><![CDATA[Welcome to a series of four posts about the Defcon Conference in Las Vegas.  TrustCC sends staff to the conference every year to ensure we are up to speed with the latest development of exploits in the hacking community.  Today I witnessed the complete hack of a mobile phone, I witnessed people having their userids [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=166&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/07/31/defcon-17-day-two/</link>
			</item>
	<item>
		<title>Welcome to Las Vegas, home of the Defcon “Hacker” Conference</title>
		<description><![CDATA[Defcon 17 is definitely underway.  It started with a bang for me.  My work laptop isn’t going anywhere near the Defcon conference so I brought a backup laptop with a generic install, patched, firewall enabled, anti-malware, bluetooth and wireless turned off, the IR receiver turned off, logging turned on.  (I even took a screen shot [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=trustcc.wordpress.com&blog=5689297&post=159&subd=trustcc&ref=&feed=1" />]]></description>
		<link>http://trustcc.wordpress.com/2009/07/30/welcome-to-las-vegas-home-of-the-defcon-%e2%80%9chacker%e2%80%9d-conference/</link>
			</item>
</channel>
</rss>
