Mike Foster's IT Security & Best Practices Blog

Latest Posts

Three secrets about managing IT pros

Of course, you know the solution to managing IT pros, both in-house and out-sourced, should be somewhere between “Give them free range” and “tie their hands.” Here are three key points perhaps nobody has told you before:
Continue reading ‘Three secrets about managing IT pros’


New LinkedIn App

LinkedIn just released new apps for Google’s Android and Apple’s iOS. They are built from the ground up to be more useful.
Continue reading ‘New LinkedIn App’


Viruses on Macs? Really?

Really. Two recent outbreaks have Mac users thinking about whether they need to consider more security.
Continue reading ‘Viruses on Macs? Really?’


Are you rolling out the welcome mat to attackers?

One of the biggest surprises IT receives during an audit is that their network is basically configured to grant attackers access.
Continue reading ‘Are you rolling out the welcome mat to attackers?’


Recipe to get hacked: Keep doing what you’ve always done

Been hacked? Well there is always the insanity defense! IT professionals, both in-house and out-sourced, have a validated reason for being adverse to patching operating systems. Executives have a valid reason to be adverse to upgrading operating systems from, for example, Windows XP to Windows 7. Unless you resolve the issues, or at least establish compensating controls, you are more vulnerable to attack. But doing what you’ve always done and expecting a different result (aside from being the definition of insanity) is the short route to being hacked. Here is the solution:
Continue reading ‘Recipe to get hacked: Keep doing what you’ve always done’


Single Biggest Way to Repel IT Attacks

Attackers have learned that one of the easiest and most successful ways to successfully take control of a network is to launch attacks against vulnerable programs on your systems. It is almost certain that you are not protected against these attacks—at least not until you take important steps.
Continue reading ‘Single Biggest Way to Repel IT Attacks’


Stop Drive-By-Downloads

It is time to review your anti-spam filters and your web-filters to ensure you are adequately protected against targeted email attacks as well as drive-by-download attacks. The latter attacks happen when one of your users visits an infected site. The settings your IT department configured in 2011 probably need to be reconfigured to repel new attacks.
Continue reading ‘Stop Drive-By-Downloads’


Quickly Identify an Attack Email Message–Know thy Enemy

Many attacks come from the outside world. Those attacks are directed at your users. There are two ways, and teach these to your workers, to identify almost all of these dangerous email messages before the user clicks on them.
Continue reading ‘Quickly Identify an Attack Email Message–Know thy Enemy’


Lighten Your Load–78 Items your Smartphone replaces

Perhaps you want to lighten your load. Perhaps you want to save money. Perhaps you want to make the most of your investment in your iPhone, iPad, Android, BlackBerry, etc. Brainstorming with CEOs, other senior level executives, and owners resulted in the following list of 78 items your device can replace.
Continue reading ‘Lighten Your Load–78 Items your Smartphone replaces’


Stop Attackers Who Bypass Your Firewall: Firewall or Failwall?

When a user gets one of those phishing emails about, “click here to…” and the user clicks, that communication just went through and your organization’s firewall probably didn’t even realize what was happening. Other than training users, there is a simple way to make up for the weakness of your organization’s firewall.
Continue reading ‘Stop Attackers Who Bypass Your Firewall: Firewall or Failwall?’