Until information on how the Zappos breach was executed comes to light, we can only assume Zappos was as good, perhaps better than most on-line retailers as far as security is concerned.

The concept of a data diode isn’t new, but it’s been adopted recently in the critical infrastructure sector, and in so doing limiting the visibility needed to protect against targeted attacks. Data diodes may help protect critical infrastructure from certain attacks, but are they really practical?

Most businesses do not appear to have anything even remotely resembling a real security strategy. In the case of Information Security, you must first define your goals. These goals have to be realistic and inline with the resources at your disposal.

As malware gets progressively more complex, it’s important to understand how the major players in the malware industry fit together and how these relationships affect the ways that malware is developed, distributed and ultimately used in attacks.